last executing test programs: 5.867491782s ago: executing program 1 (id=59): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{}, 0x0, &(0x7f0000000300)='%pi6 \x00'}, 0x20) socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000f80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000700014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x40080) socket$inet_tcp(0x2, 0x1, 0x0) 5.836058476s ago: executing program 3 (id=60): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) r1 = open(&(0x7f0000000080)='.\x00', 0x518282, 0x78e22799f4a46e8e) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r3, 0x92a, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x6f}}}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x8040) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 5.685062536s ago: executing program 1 (id=61): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r2 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) msgctl$IPC_RMID(0x0, 0x0) syncfs(r2) 5.606688376s ago: executing program 1 (id=62): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r1], 0x4) 5.230400585s ago: executing program 1 (id=66): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) utimes(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r3, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) read(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) sendmsg$GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x200000000010}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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") 4.692806374s ago: executing program 1 (id=70): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) r1 = open(&(0x7f0000000080)='.\x00', 0x518282, 0x78e22799f4a46e8e) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r3, 0x92a, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x6f}}}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x8040) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) write(r4, &(0x7f0000004200)='t', 0x1) 3.348898258s ago: executing program 0 (id=80): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x211}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0xffe0, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x1}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000004}, 0x4010804) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.222132204s ago: executing program 0 (id=81): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="000800000000000003000000000000000000000000000000fd"], 0xfc}}, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c0000001200000026bd7000fcdbdf2508060a014e244e0bf8ffffff", @ANYRES32=0x0, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001280)=ANY=[@ANYBLOB="5c0000005b7fa1b44acb2c2f8df0a5b8cb4d8d4736e0b8148e6be69a79415bd7beb649aa85ddf0578e781920a689f659cf9a28808638dac327c65ad498889e3c63a2040e8067e5e14fa0ca100dfe74288b81c7d870972f", @ANYRES16=r2, @ANYBLOB="000828bd7000fddbdf250600000005000100010000000500010000000000140006006261746164765f736c6176655f3100001400030000000000000000000000000000000000080005000a0101010800050064010102"], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x2044000) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000"], 0x0, 0x8, 0x0, 0x0, 0x41100}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x18) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000140)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, 0x40, 0x101) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000001f80)=ANY=[@ANYRES64=r3, @ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000480)='asymmetric\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)='abcdefghijklmnop', 0x0) socket$inet6(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = getpgrp(0x0) tkill(r6, 0x6) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000300)={0x0, 0x77ff, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x40814}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) poll(&(0x7f00000003c0)=[{r8}], 0x1, 0xfffffff9) 3.082541902s ago: executing program 3 (id=82): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{}, 0x0, &(0x7f0000000300)='%pi6 \x00'}, 0x20) socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000f80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000700014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x40080) socket$inet_tcp(0x2, 0x1, 0x0) 2.960325598s ago: executing program 3 (id=83): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r0 = socket$rds(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2718, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r2}, 0x18) sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731a", 0x8c, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xd3, 0x1, 0x0, 0x0, 0x0, 0xf, 0x1211, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0}, 0x4, 0x100004, 0x0, 0x2, 0x75a3f7, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x11, r3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000700008000000000feffffff95"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000840)=ANY=[@ANYRESHEX, @ANYRESDEC=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x2003ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0xffff, 0xbd, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f0000000240)={0x3ff, 0x3, 0x0, 0x9, 0x8, 0x3af81fdd, 0x7}, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8088e3ad132bc192, 0x4002011, r3, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x473, &(0x7f0000000bc0)="$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") syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') pselect6(0x40, &(0x7f0000000280)={0x0, 0x2, 0x8, 0x8000000000000000, 0x3, 0x80, 0x8000000000000, 0xfffffffffffffffe}, &(0x7f0000000300)={0x3, 0x2, 0x0, 0x3, 0x4, 0x69, 0x66, 0xe}, &(0x7f00000003c0)={0x3ff, 0x6, 0x3, 0x3, 0xab, 0x214, 0x7, 0xfffffffffffffffc}, &(0x7f0000000400)={0x77359400}, &(0x7f0000000600)={&(0x7f0000000500)={[0x2]}, 0x8}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 2.361005885s ago: executing program 0 (id=87): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r0 = socket$rds(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2718, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xd3, 0x1, 0x0, 0x0, 0x0, 0xf, 0x1211, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0}, 0x4, 0x100004, 0x0, 0x2, 0x75a3f7, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x11, r3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000700008000000000feffffff95"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000840)=ANY=[@ANYRESHEX, @ANYRESDEC=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x2003ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0xffff, 0xbd, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f0000000240)={0x3ff, 0x3, 0x0, 0x9, 0x8, 0x3af81fdd, 0x7}, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8088e3ad132bc192, 0x4002011, r3, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x473, &(0x7f0000000bc0)="$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") syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') pselect6(0x40, &(0x7f0000000280)={0x0, 0x2, 0x8, 0x8000000000000000, 0x3, 0x80, 0x8000000000000, 0xfffffffffffffffe}, &(0x7f0000000300)={0x3, 0x2, 0x0, 0x3, 0x4, 0x69, 0x66, 0xe}, &(0x7f00000003c0)={0x3ff, 0x6, 0x3, 0x3, 0xab, 0x214, 0x7, 0xfffffffffffffffc}, &(0x7f0000000400)={0x77359400}, &(0x7f0000000600)={&(0x7f0000000500)={[0x2]}, 0x8}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 2.100570118s ago: executing program 2 (id=93): ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000540)={0x0, &(0x7f0000000200)}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{}, 0x0, &(0x7f0000000300)='%pi6 \x00'}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x7fff}, 0x18) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00'}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000f80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000700014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x40080) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2.01402565s ago: executing program 1 (id=94): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) r1 = open(&(0x7f0000000080)='.\x00', 0x518282, 0x78e22799f4a46e8e) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r3, 0x92a, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x6f}}}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x8040) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) write(r4, &(0x7f0000004200)='t', 0x1) 1.966010466s ago: executing program 2 (id=95): keyctl$clear(0x3, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYBLOB="05000000020000000400002000"/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000003c0)=0x14) readv(r0, &(0x7f0000000000), 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="f3ffffff00000000b7440800dd1be6014fc61d955eed49a0b4bbdeec58c28efb6a04e6ee27d77fcd846cb32e1933e9752cf9543055fe0d2b6c2f03b379f161d70a"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0xfac2, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000080)={0x0, 0x0}) 1.963329746s ago: executing program 3 (id=96): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = memfd_secret(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) lsetxattr$security_selinux(0x0, &(0x7f0000000300), 0x0, 0x0, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00'}, 0x18) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r2, r1, 0x2e, 0x4608, @void}, 0x10) close(0xffffffffffffffff) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r3, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r0}, &(0x7f0000000000), &(0x7f0000000200)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES8], 0x48) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896) close(0xffffffffffffffff) 1.906785523s ago: executing program 4 (id=97): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file1\x00', 0x5, &(0x7f0000001200)=ANY=[@ANYRES32], 0x1, 0x239, &(0x7f0000000dc0)="$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") r0 = socket(0x1e, 0x4, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000280)=0x497, 0x4) epoll_create1(0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01003a00000000000000200000002000000002000000000000000000000d0a0000000000000001000006040000000a000000090000000000"], 0x0, 0x3a, 0x0, 0x8}, 0x28) r2 = socket$inet(0x2, 0x3, 0xd) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x7, 0x0, 0x0, 0xfffffffb}]}) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) socket$inet6(0xa, 0x3, 0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r3, @ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) writev(r4, &(0x7f0000000780)=[{0x0}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x56, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r8, 0x0, 0xf3a, 0x0) close(r7) write$binfmt_script(r8, 0x0, 0xd9) open_tree(0xffffffffffffff9c, 0x0, 0x0) write(r5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 1.842847152s ago: executing program 3 (id=98): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="000800000000000003000000000000000000000000000000fd"], 0xfc}}, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c0000001200000026bd7000fcdbdf2508060a014e244e0bf8ffffff", @ANYRES32=0x0, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x2044000) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000"], 0x0, 0x8, 0x0, 0x0, 0x41100}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000140)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, 0x40, 0x101) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000001f80)=ANY=[@ANYRES64=r2, @ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000480)='asymmetric\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)='abcdefghijklmnop', 0x0) socket$inet6(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = getpgrp(0x0) tkill(r5, 0x6) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x77ff, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x40814}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) poll(&(0x7f00000003c0)=[{r7}], 0x1, 0xfffffff9) 1.827013024s ago: executing program 2 (id=99): socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB='AF', @ANYRES32=r2], 0x4) 1.672410044s ago: executing program 4 (id=100): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x1, 0xfffffffc, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000280), 0x4) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r3, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 1.528313083s ago: executing program 4 (id=101): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000540)={0x0, &(0x7f0000000200)}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{}, 0x0, &(0x7f0000000300)='%pi6 \x00'}, 0x20) socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000f80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000700014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x40080) socket$inet_tcp(0x2, 0x1, 0x0) 1.254742278s ago: executing program 4 (id=102): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x4008084) 1.219445072s ago: executing program 4 (id=103): ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) open(0x0, 0x518282, 0x78e22799f4a46e8e) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) write(r0, &(0x7f0000004200)='t', 0x1) 1.147130462s ago: executing program 4 (id=104): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) r1 = open(&(0x7f0000000080)='.\x00', 0x518282, 0x78e22799f4a46e8e) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r3, 0x92a, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x6f}}}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x8040) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) write(r4, &(0x7f0000004200)='t', 0x1) 1.107645927s ago: executing program 0 (id=105): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000006400000181100000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) readv(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1ff, 0x1}, 0x4352, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) ptrace$setregs(0xd, r1, 0xfffffffffffffffb, &(0x7f0000000a00)="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") bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f0000000080)=r4}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r7, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r7, 0x7, &(0x7f00000000c0)={0x0, 0x2, 0x80000000000007, 0x401}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) syz_clone(0x41aa1000, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000240)={0xffffffffffffffff, r5, 0x5d32d793}) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000140)='\\\\@[*#)\x00', 0xfffffffffffffffe) 976.749424ms ago: executing program 3 (id=106): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) r1 = open(&(0x7f0000000080)='.\x00', 0x518282, 0x78e22799f4a46e8e) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r3, 0x92a, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x6f}}}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x8040) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x3ffff) r7 = memfd_create(0x0, 0x7) r8 = openat$nvram(0xffffffffffffff9c, 0x0, 0x88002, 0x0) pwritev(r8, 0x0, 0x0, 0x0, 0x0) dup(r7) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 923.6983ms ago: executing program 2 (id=107): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000780)='mm_page_free\x00', r0}, 0x12) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000a80)='./file1\x00', 0x2800810, &(0x7f00000025c0)=ANY=[], 0x1, 0x15d, &(0x7f0000000f00)="$eJzs27+KE1EUB+AzJmrUJrVYDNhYBbWyVCSCOKAoKbRSiDaJBEwzWgWfxNaHEyRVCuGKzpLshoRl/8zO7ub7mhz4ccM9xZ3LGZj3dz6PhpPpp8mreXSyLNqPI49FFt24Eq2ozAIAuEwWKcXvlFK6PosbPyKl1PSOAIC6uf8BYPccev8/amhjAEBtzP8AsHvevH334klR9F/neSfi16wclIPqt8qfPS/69/P/uqtV87IctJb5gyrPD+ZX4+Ze/nBjfi3u3a3yf9nTl8VafiuG9bcPAAAAO6GXL22c73u9bXlV7Xs/sDa/t+N2+8zaAACOYPr12+jDePzxi0JxQYs/KaVjLP/+szoC56SL0y2yiDjZ/zT9ZALqtjr0Te8EAAAAAAAAAAAAAADYpt6vkVpNtwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb/Q0AAP//LjxONw==") r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x103, 0x30120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) open_by_handle_at(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x4000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) r5 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa0423, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x8, 0x7f}, 0x2012, 0x0, 0x80002, 0x5, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x8000000000000000, 0x3, 0x8, 0x80000101}) 325.710788ms ago: executing program 2 (id=108): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300002100000085"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x4008084) 282.667934ms ago: executing program 2 (id=109): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000006400000181100000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1ff, 0x1}, 0x4352, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) request_key(&(0x7f0000000040)='user\x00', 0x0, &(0x7f0000000140)='\\\\@[*#)\x00', 0xfffffffffffffffe) 167.009998ms ago: executing program 0 (id=110): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x5c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3d1, 0x3, 0x5, 0x6, 0x6}, 0x7e}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x8c}}, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x0) 0s ago: executing program 0 (id=111): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r0 = socket$rds(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2718, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241", 0x8a, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xd3, 0x1, 0x0, 0x0, 0x0, 0xf, 0x1211, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0}, 0x4, 0x100004, 0x0, 0x2, 0x75a3f7, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x11, r3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000700008000000000feffffff95"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000840)=ANY=[@ANYRESHEX, @ANYRESDEC=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x2003ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0xffff, 0xbd, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f0000000240)={0x3ff, 0x3, 0x0, 0x9, 0x8, 0x3af81fdd, 0x7}, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8088e3ad132bc192, 0x4002011, r3, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x473, &(0x7f0000000bc0)="$eJzs281vFVUbAPBnph/AywutiB8gapWYNBpbWlBZuNFo4gKjiS5wWdsLabhQQ6sRQqQYgxsTQ6Jr49LEv8CdMTHqysStblwZEqJsQFc1M3cG2qG3WHvbqdzfL7m958ycuXOenvk4c869AXStoYiYj4j/R8TPETEQEUm1wFDr7frVc5N/Xj03mcTCwmu/J3m5a1fPTZZFy+22F5nhNCL9IGltXDF75uyJiWazcbrIj86dfGt09szZJ985OXG8cbxxavzw4UMHx555evypjsSZxXVt73sz+/a89MallyePXnrz+y+TIu6oxNEpQ1ngfyzkquse6/TOarZjUTrprbEirEpPRGTN1Zef/wPREzcbbyBefL/WygHrKrs3bWm/en4BuIMlUXcNgHqUN/rs+bd8bVDXY1O48lzrASiL+3rxaq3pjbQo01d5vu2koYg4Ov/XZ9kr1mkcAgBgsY8mPz1Sjvgu7f+lcW/+/mv+d2cxhzIYEXdFxK6IuDsidkfEPRF52fsi4v411ufW/k96eY0fuaKs//dsMbe1tP9X9v5isKfI7cjj70uOTTcbB4r/yXD0bcnyYyvs4+sXfvq43brF/b/sle2/7AsW9bjcWxmgm5qYm8g7pR1w5ULE3t7l4k9uzAQkEbEnIvau7qN3lonpx7/Y167Q7eNfQQfmmRY+z8Kbz+Kfj0r8pWTx/OT0LfOTo1uj2TgwWh4Vt/rhx4uvttv/muLvgCuN1vui9q8WGUwWz9fOrn4fF3/5sO0zzb88/tP+5PV8nrm/WPbuxNzc6bGI/uRInl+yfPzmtmW+LJ8d/8P7lz//dxXbZPE/EBHZQfxgRDwUEQ8XdX8kIh6NiP0rxP/d8+3XlfFHWlP7X4iYWvb6d+P4r7T/6hM9J779qt3+/1n7H8pTw8WS/Pp3G8tVJ7tcVCu4lv8dAAAA/Fek+Xfgk3TkRjpNR0Za3+HfHf9LmzOzc08cm3n71FTru/KD0ZeWI10DxXhoc7rZGEvmi09sjY+OF2PF5XjpwWLc+JOebXl+ZHKmOVVz7NDttrc5/zO/9dRdO2CdbVt26Xj/hlcEqEF1Hj1dmj3/SrgYwJ3K77Whe93m/E83qh7AxnP/h+613Pl/vpI3FwB3Jvd/6F7Of+hS6Td11wCokfs/dKW1/K5/HRNbN0c16kls1kbJExFlIt0U9ZFYp0TdVyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDO+DsAAP//ncHpmg==") syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') pselect6(0x40, &(0x7f0000000280)={0x0, 0x2, 0x8, 0x8000000000000000, 0x3, 0x80, 0x8000000000000, 0xfffffffffffffffe}, &(0x7f0000000300)={0x3, 0x2, 0x0, 0x3, 0x4, 0x69, 0x66, 0xe}, &(0x7f00000003c0)={0x3ff, 0x6, 0x3, 0x3, 0xab, 0x214, 0x7, 0xfffffffffffffffc}, &(0x7f0000000400)={0x77359400}, &(0x7f0000000600)={&(0x7f0000000500)={[0x2]}, 0x8}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) kernel console output (not intermixed with test programs): [ 24.616752][ T29] audit: type=1400 audit(1768393454.262:62): avc: denied { search } for pid=3194 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 24.639871][ T29] audit: type=1400 audit(1768393454.262:63): avc: denied { search } for pid=3194 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=478 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 24.664668][ T29] audit: type=1400 audit(1768393454.262:64): avc: denied { search } for pid=3194 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 24.688279][ T29] audit: type=1400 audit(1768393454.262:65): avc: denied { search } for pid=3194 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 24.713027][ T29] audit: type=1400 audit(1768393454.262:66): avc: denied { read open } for pid=3195 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.69' (ED25519) to the list of known hosts. [ 29.235212][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 29.235229][ T29] audit: type=1400 audit(1768393458.872:70): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.265957][ T29] audit: type=1400 audit(1768393458.902:71): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.267983][ T3299] cgroup: Unknown subsys name 'net' [ 29.294563][ T29] audit: type=1400 audit(1768393458.932:72): avc: denied { unmount } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.416969][ T3299] cgroup: Unknown subsys name 'cpuset' [ 29.423523][ T3299] cgroup: Unknown subsys name 'rlimit' [ 29.574790][ T29] audit: type=1400 audit(1768393459.212:73): avc: denied { setattr } for pid=3299 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.607315][ T29] audit: type=1400 audit(1768393459.212:74): avc: denied { create } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.629437][ T29] audit: type=1400 audit(1768393459.212:75): avc: denied { write } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.649449][ T3303] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 29.651513][ T29] audit: type=1400 audit(1768393459.212:76): avc: denied { read } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.682826][ T29] audit: type=1400 audit(1768393459.212:77): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 29.709265][ T29] audit: type=1400 audit(1768393459.212:78): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 29.734287][ T29] audit: type=1400 audit(1768393459.252:79): avc: denied { read } for pid=3041 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 29.768986][ T3299] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 31.034741][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 31.070871][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 31.097356][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 31.107144][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 31.155708][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.163507][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.171134][ T3310] bridge_slave_0: entered allmulticast mode [ 31.177879][ T3310] bridge_slave_0: entered promiscuous mode [ 31.197629][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.204983][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.212401][ T3310] bridge_slave_1: entered allmulticast mode [ 31.219223][ T3310] bridge_slave_1: entered promiscuous mode [ 31.240667][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 31.265848][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.296507][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.331803][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.339226][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.346645][ T3311] bridge_slave_0: entered allmulticast mode [ 31.353351][ T3311] bridge_slave_0: entered promiscuous mode [ 31.367539][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.375113][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.382948][ T3319] bridge_slave_0: entered allmulticast mode [ 31.390079][ T3319] bridge_slave_0: entered promiscuous mode [ 31.402082][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.409860][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.417378][ T3311] bridge_slave_1: entered allmulticast mode [ 31.423966][ T3311] bridge_slave_1: entered promiscuous mode [ 31.430728][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.438038][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.445676][ T3313] bridge_slave_0: entered allmulticast mode [ 31.452486][ T3313] bridge_slave_0: entered promiscuous mode [ 31.461823][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.469543][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.477427][ T3319] bridge_slave_1: entered allmulticast mode [ 31.484775][ T3319] bridge_slave_1: entered promiscuous mode [ 31.492232][ T3310] team0: Port device team_slave_0 added [ 31.503749][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.511170][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.518786][ T3313] bridge_slave_1: entered allmulticast mode [ 31.526137][ T3313] bridge_slave_1: entered promiscuous mode [ 31.541170][ T3310] team0: Port device team_slave_1 added [ 31.573786][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.594505][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.610717][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.622280][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.633064][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.640603][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.648448][ T3317] bridge_slave_0: entered allmulticast mode [ 31.655134][ T3317] bridge_slave_0: entered promiscuous mode [ 31.663390][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.673298][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.680527][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.708503][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.726486][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.736290][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.743641][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.751579][ T3317] bridge_slave_1: entered allmulticast mode [ 31.758701][ T3317] bridge_slave_1: entered promiscuous mode [ 31.771229][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.778512][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.805466][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.840045][ T3311] team0: Port device team_slave_0 added [ 31.856855][ T3319] team0: Port device team_slave_0 added [ 31.865357][ T3311] team0: Port device team_slave_1 added [ 31.872652][ T3313] team0: Port device team_slave_0 added [ 31.880433][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.890985][ T3319] team0: Port device team_slave_1 added [ 31.902876][ T3313] team0: Port device team_slave_1 added [ 31.914948][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.955254][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.962697][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.990023][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.006537][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.013623][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.040683][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.058795][ T3310] hsr_slave_0: entered promiscuous mode [ 32.065661][ T3310] hsr_slave_1: entered promiscuous mode [ 32.079280][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.086930][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.114091][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.125688][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.133112][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.160060][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.171496][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.179002][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.205679][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.218229][ T3317] team0: Port device team_slave_0 added [ 32.227625][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.234760][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.261840][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.276419][ T3317] team0: Port device team_slave_1 added [ 32.322799][ T3319] hsr_slave_0: entered promiscuous mode [ 32.329060][ T3319] hsr_slave_1: entered promiscuous mode [ 32.334948][ T3319] debugfs: 'hsr0' already exists in 'hsr' [ 32.341067][ T3319] Cannot create hsr debugfs directory [ 32.347277][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.354406][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.381418][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.409926][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.417726][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.445909][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.464714][ T3311] hsr_slave_0: entered promiscuous mode [ 32.471583][ T3311] hsr_slave_1: entered promiscuous mode [ 32.478023][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 32.484108][ T3311] Cannot create hsr debugfs directory [ 32.509046][ T3313] hsr_slave_0: entered promiscuous mode [ 32.515457][ T3313] hsr_slave_1: entered promiscuous mode [ 32.521898][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 32.527849][ T3313] Cannot create hsr debugfs directory [ 32.580855][ T3317] hsr_slave_0: entered promiscuous mode [ 32.587187][ T3317] hsr_slave_1: entered promiscuous mode [ 32.593291][ T3317] debugfs: 'hsr0' already exists in 'hsr' [ 32.599229][ T3317] Cannot create hsr debugfs directory [ 32.760218][ T3310] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.771846][ T3310] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.783622][ T3310] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.792805][ T3310] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.817388][ T3319] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.827779][ T3319] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.837647][ T3319] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.850001][ T3319] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.881084][ T3311] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.891745][ T3311] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.909555][ T3311] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.920150][ T3311] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.957132][ T3313] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.966696][ T3313] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.976297][ T3313] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.986905][ T3313] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 33.033745][ T3317] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 33.045104][ T3317] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 33.055787][ T3317] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 33.067669][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.075539][ T3317] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 33.104702][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.130269][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.141249][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.151600][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.159002][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.174796][ T969] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.182539][ T969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.198625][ T969] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.205858][ T969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.219223][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.228243][ T969] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.235444][ T969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.265545][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.278733][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.298700][ T982] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.306349][ T982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.327577][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.335184][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.348982][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.369714][ T982] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.377158][ T982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.389768][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.409058][ T982] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.416676][ T982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.444831][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.469928][ T3317] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.480623][ T3317] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.503177][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.510853][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.520184][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.527639][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.554899][ T3311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.582420][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.629364][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.675508][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.690201][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.750110][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.864143][ T3319] veth0_vlan: entered promiscuous mode [ 33.872176][ T3311] veth0_vlan: entered promiscuous mode [ 33.883018][ T3319] veth1_vlan: entered promiscuous mode [ 33.907268][ T3310] veth0_vlan: entered promiscuous mode [ 33.921165][ T3311] veth1_vlan: entered promiscuous mode [ 33.933558][ T3310] veth1_vlan: entered promiscuous mode [ 33.941171][ T3319] veth0_macvtap: entered promiscuous mode [ 33.972945][ T3319] veth1_macvtap: entered promiscuous mode [ 33.984376][ T3311] veth0_macvtap: entered promiscuous mode [ 33.999255][ T3310] veth0_macvtap: entered promiscuous mode [ 34.007699][ T3317] veth0_vlan: entered promiscuous mode [ 34.018159][ T3313] veth0_vlan: entered promiscuous mode [ 34.026082][ T3311] veth1_macvtap: entered promiscuous mode [ 34.037868][ T3310] veth1_macvtap: entered promiscuous mode [ 34.046228][ T3317] veth1_vlan: entered promiscuous mode [ 34.054778][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.068105][ T3313] veth1_vlan: entered promiscuous mode [ 34.077096][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.090826][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.105153][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.114029][ T53] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.123895][ T53] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.133048][ T53] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.148760][ T53] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.160034][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.174321][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.182741][ T53] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.197886][ T53] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.210499][ T53] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.231579][ T3443] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.242811][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 34.242829][ T29] audit: type=1400 audit(1768393463.882:96): avc: denied { unmount } for pid=3319 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 34.274123][ T29] audit: type=1400 audit(1768393463.912:97): avc: denied { mounton } for pid=3319 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 34.288842][ T3313] veth0_macvtap: entered promiscuous mode [ 34.298064][ T29] audit: type=1400 audit(1768393463.912:98): avc: denied { mount } for pid=3319 comm="syz-executor" name="/" dev="gadgetfs" ino=5128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 34.328216][ T3317] veth0_macvtap: entered promiscuous mode [ 34.337025][ T31] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.337367][ T3319] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 34.366288][ T31] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.379230][ T3313] veth1_macvtap: entered promiscuous mode [ 34.388458][ T31] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.420148][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.428216][ T29] audit: type=1400 audit(1768393464.042:99): avc: denied { read write } for pid=3319 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 34.453081][ T29] audit: type=1400 audit(1768393464.042:100): avc: denied { open } for pid=3319 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 34.478080][ T29] audit: type=1400 audit(1768393464.042:101): avc: denied { ioctl } for pid=3319 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 34.504570][ T29] audit: type=1400 audit(1768393464.052:102): avc: denied { bpf } for pid=3483 comm="syz.2.3" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 34.530833][ T3317] veth1_macvtap: entered promiscuous mode [ 34.543630][ T31] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.571034][ T3487] tipc: Started in network mode [ 34.576483][ T3487] tipc: Node identity a6c8155abe69, cluster identity 4711 [ 34.584400][ T3487] tipc: Enabled bearer , priority 0 [ 34.595678][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.603161][ T29] audit: type=1400 audit(1768393464.242:103): avc: denied { ioctl } for pid=3485 comm="syz.2.6" path="socket:[4534]" dev="sockfs" ino=4534 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.608700][ T29] audit: type=1400 audit(1768393464.252:104): avc: denied { map_create } for pid=3489 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 34.655103][ T3487] syzkaller0: entered promiscuous mode [ 34.660837][ T3487] syzkaller0: entered allmulticast mode [ 34.674533][ T29] audit: type=1400 audit(1768393464.302:105): avc: denied { map_read map_write } for pid=3489 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 34.697222][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.708367][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.717012][ T3487] tipc: Resetting bearer [ 34.725235][ T3490] netlink: 'syz.1.2': attribute type 10 has an invalid length. [ 34.733465][ T31] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.743427][ T3485] tipc: Resetting bearer [ 34.751058][ T3485] tipc: Disabling bearer [ 34.762712][ T3490] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 34.771856][ T3493] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4'. [ 34.783747][ T31] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.806832][ T31] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.856467][ T3497] netlink: 'syz.2.7': attribute type 10 has an invalid length. [ 34.867106][ T148] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.879474][ T3501] loop1: detected capacity change from 0 to 512 [ 34.897210][ T3494] loop3: detected capacity change from 0 to 512 [ 34.912349][ T3494] EXT4-fs (loop3): orphan cleanup on readonly fs [ 34.913745][ T3497] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 34.934403][ T3494] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4: bg 0: block 127: padding at end of block bitmap is not set [ 34.951557][ T3494] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 34.961501][ T3501] msdos: Unknown parameter 'ÿÿÿÿ' [ 34.966051][ T3494] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.4: corrupted inode contents [ 34.984179][ T148] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.008869][ T3494] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 35.020588][ T148] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.044053][ T148] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.044169][ T148] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.044721][ T3494] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.4: corrupted inode contents [ 35.044974][ T3494] EXT4-fs error (device loop3): ext4_evict_inode:301: inode #15: comm syz.3.4: mark_inode_dirty error [ 35.045162][ T3494] EXT4-fs (loop3): 1 orphan inode deleted [ 35.045619][ T3494] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 35.139290][ T3515] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 35.195940][ T3520] loop4: detected capacity change from 0 to 1024 [ 35.196279][ T3520] EXT4-fs: Ignoring removed orlov option [ 35.203726][ T3519] loop0: detected capacity change from 0 to 1024 [ 35.208781][ T3520] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.217332][ T3519] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.11: bad orphan inode 134217728 [ 35.218102][ T3519] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.310950][ T3527] loop2: detected capacity change from 0 to 128 [ 35.498049][ T3534] ip6gretap0: entered promiscuous mode [ 35.511419][ T3494] syz.3.4 (3494) used greatest stack depth: 10288 bytes left [ 35.827915][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.417459][ T3545] loop2: detected capacity change from 0 to 512 [ 36.488037][ T3545] EXT4-fs (loop2): orphan cleanup on readonly fs [ 36.495009][ T3545] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.15: bg 0: block 127: padding at end of block bitmap is not set [ 36.552961][ T3547] netlink: 'syz.1.16': attribute type 7 has an invalid length. [ 36.586711][ T3545] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.15: corrupted inode contents [ 36.640713][ T3550] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 36.650500][ T3545] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 36.684523][ T3545] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.15: corrupted inode contents [ 36.707753][ T3550] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 36.726208][ T3545] EXT4-fs error (device loop2): ext4_evict_inode:301: inode #15: comm syz.2.15: mark_inode_dirty error [ 36.774975][ T3545] EXT4-fs (loop2): 1 orphan inode deleted [ 36.801092][ T3545] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 36.932206][ T3559] syzkaller0: entered promiscuous mode [ 36.938431][ T3559] syzkaller0: entered allmulticast mode [ 36.948321][ T3561] netlink: 'syz.1.22': attribute type 10 has an invalid length. [ 37.187118][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.218181][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.648272][ T3576] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 37.710097][ T3577] netlink: 16 bytes leftover after parsing attributes in process `syz.3.29'. [ 37.721383][ T3570] Set syz1 is full, maxelem 65536 reached [ 37.832041][ T3579] netlink: 'syz.0.30': attribute type 1 has an invalid length. [ 37.932726][ T3574] Set syz1 is full, maxelem 65536 reached [ 37.975524][ T3587] netlink: 'syz.3.34': attribute type 7 has an invalid length. [ 38.093916][ T3592] loop2: detected capacity change from 0 to 1024 [ 38.102497][ T3596] tipc: Started in network mode [ 38.107877][ T3596] tipc: Node identity de897f1fa002, cluster identity 4711 [ 38.115680][ T3596] tipc: Enabled bearer , priority 0 [ 38.123802][ T3594] netlink: 'syz.3.37': attribute type 7 has an invalid length. [ 38.135705][ T3594] netlink: 'syz.3.37': attribute type 13 has an invalid length. [ 38.163333][ T3592] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.36: bad orphan inode 134217728 [ 38.182176][ T3599] syzkaller0: entered promiscuous mode [ 38.188559][ T3599] syzkaller0: entered allmulticast mode [ 38.198716][ T3592] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.226955][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.237883][ T3594] gretap0: refused to change device tx_queue_len [ 38.248381][ T3594] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 38.287307][ T3596] tipc: Resetting bearer [ 38.294170][ T3595] tipc: Resetting bearer [ 38.348315][ T3603] loop3: detected capacity change from 0 to 512 [ 38.356296][ T3603] msdos: Unknown parameter 'ÿÿÿÿ' [ 38.371413][ T3595] tipc: Disabling bearer [ 38.440381][ T3588] Set syz1 is full, maxelem 65536 reached [ 38.501102][ T37] Bluetooth: hci0: Frame reassembly failed (-84) [ 38.511447][ T3602] syzkaller0: entered promiscuous mode [ 38.517914][ T3602] syzkaller0: entered allmulticast mode [ 38.617555][ T3612] netlink: 'syz.0.42': attribute type 7 has an invalid length. [ 38.659936][ T3611] ip6gretap0: entered promiscuous mode [ 38.680270][ T3610] netlink: 'syz.0.42': attribute type 13 has an invalid length. [ 38.708698][ T3614] gretap0: refused to change device tx_queue_len [ 38.717270][ T3614] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 38.740248][ T3610] gretap0: refused to change device tx_queue_len [ 38.749115][ T3610] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 40.184390][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.329333][ T29] kauditd_printk_skb: 413 callbacks suppressed [ 40.329352][ T29] audit: type=1326 audit(1768393469.972:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3645 comm="syz.1.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e1381f749 code=0x7ffc0000 [ 40.383385][ T29] audit: type=1326 audit(1768393469.972:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3645 comm="syz.1.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e1381f749 code=0x7ffc0000 [ 40.408490][ T29] audit: type=1326 audit(1768393469.972:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3645 comm="syz.1.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7f6e1381f749 code=0x7ffc0000 [ 40.432911][ T29] audit: type=1326 audit(1768393469.972:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3645 comm="syz.1.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e1381f749 code=0x7ffc0000 [ 40.457374][ T29] audit: type=1326 audit(1768393469.972:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3645 comm="syz.1.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e1381f749 code=0x7ffc0000 [ 40.481813][ T29] audit: type=1326 audit(1768393469.972:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3645 comm="syz.1.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e1381f749 code=0x7ffc0000 [ 40.507124][ T29] audit: type=1326 audit(1768393469.972:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3645 comm="syz.1.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e1381f749 code=0x7ffc0000 [ 40.531166][ T29] audit: type=1326 audit(1768393469.972:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3645 comm="syz.1.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e1381f749 code=0x7ffc0000 [ 40.555635][ T29] audit: type=1326 audit(1768393469.972:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3645 comm="syz.1.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e1381f749 code=0x7ffc0000 [ 40.580062][ T29] audit: type=1326 audit(1768393469.982:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3645 comm="syz.1.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e1381f749 code=0x7ffc0000 [ 40.592110][ T3568] Bluetooth: hci0: command 0x1003 tx timeout [ 40.610970][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 40.781677][ T3665] validate_nla: 2 callbacks suppressed [ 40.781694][ T3665] netlink: 'syz.4.56': attribute type 7 has an invalid length. [ 40.849161][ T3665] netlink: 'syz.4.56': attribute type 13 has an invalid length. [ 40.900651][ T3665] gretap0: refused to change device tx_queue_len [ 40.908308][ T3665] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 41.180261][ T3676] netlink: 'syz.1.59': attribute type 7 has an invalid length. [ 41.382039][ T3681] loop3: detected capacity change from 0 to 1024 [ 41.386851][ T3674] Set syz1 is full, maxelem 65536 reached [ 41.395267][ T3478] Bluetooth: hci0: Frame reassembly failed (-84) [ 41.403054][ T3681] EXT4-fs: Ignoring removed orlov option [ 41.458857][ T3681] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.801123][ T3698] loop1: detected capacity change from 0 to 512 [ 41.816127][ T3698] ------------[ cut here ]------------ [ 41.821924][ T3698] EA inode 11 i_nlink=2 [ 41.821944][ T3698] WARNING: fs/ext4/xattr.c:1058 at ext4_xattr_inode_update_ref+0x2e6/0x320, CPU#0: syz.1.66/3698 [ 41.838526][ T3698] Modules linked in: [ 41.842929][ T3698] CPU: 0 UID: 0 PID: 3698 Comm: syz.1.66 Not tainted syzkaller #0 PREEMPT(voluntary) [ 41.853405][ T3698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 41.863640][ T3698] RIP: 0010:ext4_xattr_inode_update_ref+0x305/0x320 [ 41.871036][ T3698] Code: 71 e2 9c ff 4c 8d 2d 3a ed 20 05 49 8d 7e 40 e8 11 6d b8 ff 49 8b 6e 40 4c 89 e7 e8 25 68 b8 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 2b ff ff ff e8 7c 9b ba 03 66 66 66 2e 0f 1f 84 [ 41.891864][ T3698] RSP: 0018:ffffc9001010b5a0 EFLAGS: 00010246 [ 41.898111][ T3698] RAX: ffff88811b261b10 RBX: ffff888105c13af0 RCX: ffffffff81bb1e8b [ 41.906622][ T3698] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff86dc0bb0 [ 41.914910][ T3698] RBP: 000000000000000b R08: 0001888105c13aa3 R09: 0000000000000000 [ 41.923418][ T3698] R10: ffffc9001010b4d0 R11: 0001c9001010b4d0 R12: ffff888105c13aa0 [ 41.931547][ T3698] R13: ffffffff86dc0bb0 R14: ffff888105c13a58 R15: 0000000000000001 [ 41.939868][ T3698] FS: 00007f6e1227f6c0(0000) GS:ffff8882aedc5000(0000) knlGS:0000000000000000 [ 41.949397][ T3698] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 41.956691][ T3698] CR2: 00007f50c3766000 CR3: 000000011b5e2000 CR4: 00000000003506f0 [ 41.965221][ T3698] Call Trace: [ 41.969001][ T3698] [ 41.972240][ T3698] ext4_xattr_set_entry+0x77f/0x1020 [ 41.977825][ T3698] ext4_xattr_ibody_set+0x184/0x3c0 [ 41.983264][ T3698] ext4_expand_extra_isize_ea+0xcbb/0x11f0 [ 41.989577][ T3698] __ext4_expand_extra_isize+0x246/0x280 [ 41.995707][ T3698] __ext4_mark_inode_dirty+0x29d/0x3f0 [ 42.001692][ T3698] ext4_evict_inode+0x7c4/0xd40 [ 42.006779][ T3698] ? __pfx_ext4_evict_inode+0x10/0x10 [ 42.012300][ T3698] evict+0x2af/0x510 [ 42.016864][ T3698] ? __dquot_initialize+0x146/0x7c0 [ 42.023069][ T3698] iput+0x4bd/0x650 [ 42.027177][ T3698] ext4_process_orphan+0x1a9/0x1c0 [ 42.032823][ T3698] ext4_orphan_cleanup+0x6a8/0xa00 [ 42.038219][ T3698] ext4_fill_super+0x3411/0x37a0 [ 42.043212][ T3698] ? set_blocksize+0x1a8/0x310 [ 42.048225][ T3698] ? sb_set_blocksize+0xfc/0x170 [ 42.053319][ T3698] ? setup_bdev_super+0x30e/0x370 [ 42.058872][ T3698] ? __pfx_ext4_fill_super+0x10/0x10 [ 42.064484][ T3698] get_tree_bdev_flags+0x291/0x300 [ 42.069820][ T3698] ? __pfx_ext4_fill_super+0x10/0x10 [ 42.075559][ T3698] get_tree_bdev+0x1f/0x30 [ 42.080278][ T3698] ext4_get_tree+0x1c/0x30 [ 42.084836][ T3698] vfs_get_tree+0x57/0x1d0 [ 42.089448][ T3698] do_new_mount+0x24d/0x6a0 [ 42.094122][ T3698] path_mount+0x4ab/0xb80 [ 42.098769][ T3698] ? user_path_at+0xbf/0x130 [ 42.103448][ T3698] __se_sys_mount+0x28c/0x2e0 [ 42.108347][ T3698] __x64_sys_mount+0x67/0x80 [ 42.113039][ T3698] x64_sys_call+0x2cca/0x3000 [ 42.117993][ T3698] do_syscall_64+0xca/0x2b0 [ 42.122961][ T3698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.129166][ T3698] RIP: 0033:0x7f6e13820eea [ 42.133899][ T3698] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 42.154639][ T3698] RSP: 002b:00007f6e1227ee68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 42.163358][ T3698] RAX: ffffffffffffffda RBX: 00007f6e1227eef0 RCX: 00007f6e13820eea [ 42.171587][ T3698] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f6e1227eeb0 [ 42.180057][ T3698] RBP: 0000200000000180 R08: 00007f6e1227eef0 R09: 0000000000800700 [ 42.188247][ T3698] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 42.196393][ T3698] R13: 00007f6e1227eeb0 R14: 000000000000046f R15: 000000000000002c [ 42.205169][ T3698] [ 42.208439][ T3698] ---[ end trace 0000000000000000 ]--- [ 42.214661][ T3698] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #18: comm syz.1.66: iget: bad extra_isize 90 (inode size 256) [ 42.231644][ T3698] EXT4-fs (loop1): Remounting filesystem read-only [ 42.247193][ T3698] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -30) [ 42.265567][ T3698] EXT4-fs (loop1): 1 orphan inode deleted [ 42.276132][ T3698] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.335873][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.380205][ T3717] netlink: 'syz.2.71': attribute type 7 has an invalid length. [ 42.448307][ T37] Bluetooth: hci1: Frame reassembly failed (-84) [ 42.504626][ T3729] netlink: 96 bytes leftover after parsing attributes in process `syz.0.75'. [ 43.356208][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 43.372036][ T3743] netlink: 44 bytes leftover after parsing attributes in process `syz.4.77'. [ 43.577185][ T3747] netlink: 'syz.0.79': attribute type 7 has an invalid length. [ 43.606609][ T3747] netlink: 'syz.0.79': attribute type 13 has an invalid length. [ 43.626277][ T3747] gretap0: refused to change device tx_queue_len [ 43.633671][ T3747] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 43.677570][ T3749] syzkaller0: entered promiscuous mode [ 43.683248][ T3749] syzkaller0: entered allmulticast mode [ 43.839739][ T3753] lo speed is unknown, defaulting to 1000 [ 43.846695][ T3753] lo speed is unknown, defaulting to 1000 [ 43.853640][ T3753] lo speed is unknown, defaulting to 1000 [ 43.860440][ T3753] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 43.869055][ T3753] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 43.880714][ T3753] lo speed is unknown, defaulting to 1000 [ 43.889717][ T3753] lo speed is unknown, defaulting to 1000 [ 43.897541][ T3753] lo speed is unknown, defaulting to 1000 [ 43.905024][ T3753] lo speed is unknown, defaulting to 1000 [ 43.912852][ T3753] lo speed is unknown, defaulting to 1000 [ 43.920264][ T3753] lo speed is unknown, defaulting to 1000 [ 43.933442][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.939970][ T3753] lo speed is unknown, defaulting to 1000 [ 44.006548][ T3758] netlink: 'syz.3.82': attribute type 7 has an invalid length. [ 44.176680][ T3761] loop3: detected capacity change from 0 to 512 [ 44.205621][ T3761] EXT4-fs (loop3): orphan cleanup on readonly fs [ 44.277151][ T3761] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.83: bg 0: block 127: padding at end of block bitmap is not set [ 44.327790][ T3761] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.83: corrupted inode contents [ 44.366472][ T3761] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 44.384490][ T3761] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.83: corrupted inode contents [ 44.409420][ T3761] EXT4-fs error (device loop3): ext4_evict_inode:301: inode #15: comm syz.3.83: mark_inode_dirty error [ 44.431573][ T3761] EXT4-fs (loop3): 1 orphan inode deleted [ 44.448910][ T3761] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 44.465861][ T3568] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 44.548536][ T3768] syzkaller0: entered promiscuous mode [ 44.554450][ T3768] syzkaller0: entered allmulticast mode [ 44.662788][ T3770] Zero length message leads to an empty skb [ 44.737195][ T3772] netlink: 'syz.2.88': attribute type 7 has an invalid length. [ 44.769086][ T3775] loop4: detected capacity change from 0 to 512 [ 44.779109][ T3775] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #18: comm syz.4.89: iget: bad extra_isize 90 (inode size 256) [ 44.796263][ T3775] EXT4-fs (loop4): Remounting filesystem read-only [ 44.803287][ T3775] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -30) [ 44.814243][ T3775] EXT4-fs (loop4): 1 orphan inode deleted [ 44.814960][ T3778] netlink: 'syz.2.90': attribute type 10 has an invalid length. [ 44.829134][ T3775] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.857957][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.893374][ T3782] netlink: 'syz.2.92': attribute type 10 has an invalid length. [ 44.930112][ T3785] loop4: detected capacity change from 0 to 128 [ 44.959315][ T3784] gretap0: refused to change device tx_queue_len [ 44.967642][ T3784] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 45.024722][ T3787] loop1: detected capacity change from 0 to 1024 [ 45.027682][ T37] Bluetooth: hci0: Frame reassembly failed (-84) [ 45.034346][ T3787] EXT4-fs: Ignoring removed orlov option [ 45.051579][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.052545][ T3787] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.140933][ T3794] siw: device registration error -23 [ 45.152147][ T3796] loop4: detected capacity change from 0 to 512 [ 45.159916][ T3796] msdos: Unknown parameter 'ÿÿÿÿ' [ 45.357379][ T3807] syzkaller0: entered promiscuous mode [ 45.364097][ T3807] syzkaller0: entered allmulticast mode [ 45.373412][ T3807] 0: reclassify loop, rule prio 0, protocol 800 [ 45.495587][ T29] kauditd_printk_skb: 219 callbacks suppressed [ 45.495609][ T29] audit: type=1326 audit(1768393475.132:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3808 comm="syz.4.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc02514f749 code=0x7ffc0000 [ 45.527218][ T29] audit: type=1326 audit(1768393475.142:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3808 comm="syz.4.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc02514f749 code=0x7ffc0000 [ 45.551537][ T29] audit: type=1326 audit(1768393475.142:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3808 comm="syz.4.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc02514f749 code=0x7ffc0000 [ 45.575746][ T29] audit: type=1326 audit(1768393475.142:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3808 comm="syz.4.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc02514f749 code=0x7ffc0000 [ 45.600821][ T29] audit: type=1326 audit(1768393475.142:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3808 comm="syz.4.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc02514f749 code=0x7ffc0000 [ 45.625759][ T29] audit: type=1326 audit(1768393475.142:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3808 comm="syz.4.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc02514f749 code=0x7ffc0000 [ 45.650564][ T29] audit: type=1326 audit(1768393475.142:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3808 comm="syz.4.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc02514f749 code=0x7ffc0000 [ 45.675285][ T29] audit: type=1326 audit(1768393475.142:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3808 comm="syz.4.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc02514f749 code=0x7ffc0000 [ 45.699433][ T29] audit: type=1326 audit(1768393475.142:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3808 comm="syz.4.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc02514f749 code=0x7ffc0000 [ 45.724747][ T29] audit: type=1326 audit(1768393475.142:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3808 comm="syz.4.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc02514f749 code=0x7ffc0000 [ 45.773977][ T3812] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 45.809532][ T3814] loop4: detected capacity change from 0 to 1024 [ 45.816865][ T3814] EXT4-fs: Ignoring removed orlov option [ 45.827817][ T3814] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.868643][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.891038][ T37] Bluetooth: hci1: Frame reassembly failed (-84) [ 45.967105][ T3820] loop4: detected capacity change from 0 to 1024 [ 45.974739][ T3820] EXT4-fs: Ignoring removed orlov option [ 46.010504][ T3820] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.062684][ T3443] Bluetooth: hci2: Frame reassembly failed (-84) [ 46.077286][ T3824] loop3: detected capacity change from 0 to 1024 [ 46.084340][ T3824] EXT4-fs: Ignoring removed orlov option [ 46.094700][ T3824] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.189744][ T3828] lo speed is unknown, defaulting to 1000 [ 46.526059][ T3834] loop2: detected capacity change from 0 to 128 [ 46.704801][ T3836] validate_nla: 4 callbacks suppressed [ 46.704819][ T3836] netlink: 'syz.2.108': attribute type 10 has an invalid length. [ 47.035854][ T3724] Bluetooth: hci0: command 0x1003 tx timeout [ 47.065934][ T3608] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 47.367044][ T9] ================================================================== [ 47.376069][ T9] BUG: KCSAN: data-race in __mod_timer / __mod_timer [ 47.383341][ T9] [ 47.385815][ T9] write to 0xffff88811ab02ab0 of 8 bytes by task 3398 on cpu 1: [ 47.394230][ T9] __mod_timer+0x5a1/0x840 [ 47.399005][ T9] mod_timer+0x1f/0x30 [ 47.403230][ T9] wg_timers_any_authenticated_packet_traversal+0xd0/0x100 [ 47.410854][ T9] wg_packet_rx_poll+0x7f5/0x1160 [ 47.416021][ T9] __napi_poll+0x5f/0x300 [ 47.420684][ T9] napi_threaded_poll_loop+0x1ac/0x630 [ 47.427168][ T9] napi_threaded_poll+0x164/0x200 [ 47.432600][ T9] kthread+0x489/0x510 [ 47.437136][ T9] ret_from_fork+0x149/0x290 [ 47.442160][ T9] ret_from_fork_asm+0x1a/0x30 [ 47.447194][ T9] [ 47.449639][ T9] read to 0xffff88811ab02ab0 of 8 bytes by task 9 on cpu 0: [ 47.457325][ T9] __mod_timer+0x69/0x840 [ 47.461866][ T9] mod_timer+0x1f/0x30 [ 47.465967][ T9] wg_timers_any_authenticated_packet_traversal+0xd0/0x100 [ 47.473569][ T9] wg_packet_tx_worker+0xeb/0x330 [ 47.479427][ T9] process_scheduled_works+0x4ce/0x9d0 [ 47.485035][ T9] worker_thread+0x582/0x770 [ 47.490159][ T9] kthread+0x489/0x510 [ 47.494533][ T9] ret_from_fork+0x149/0x290 [ 47.499271][ T9] ret_from_fork_asm+0x1a/0x30 [ 47.504525][ T9] [ 47.507313][ T9] value changed: 0x00000000ffffa16c -> 0x00000000ffffa476 [ 47.515842][ T9] [ 47.518532][ T9] Reported by Kernel Concurrency Sanitizer on: [ 47.525234][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 47.536746][ T9] Tainted: [W]=WARN [ 47.540565][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 47.551250][ T9] Workqueue: wg-crypt-wg2 wg_packet_tx_worker [ 47.557883][ T9] ================================================================== [ 47.667938][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.916384][ T3608] Bluetooth: hci1: command 0x1003 tx timeout [ 47.917141][ T3568] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 48.065876][ T44] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 48.440522][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.088832][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.