last executing test programs: 9m13.502662964s ago: executing program 0 (id=1299): syz_open_dev$hidraw(&(0x7f0000000440), 0x243c2917, 0x14a042) socket$nl_route(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet(0xa, 0x801, 0x84) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) 9m13.479919997s ago: executing program 0 (id=1300): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x102, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$selinux_attr(r1, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000070000000000000000000000850000000500000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', 0x0, 0x3200841, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x200000000000014f, 0x1000000, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014800000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r5, 0xffffffffffffffff, 0x10, 0x0, @void}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073794f310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) sendmsg$NFT_MSG_GETOBJ(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03f5"], 0x34}, 0x1, 0x0, 0x0, 0x66df5cfbe53006d1}, 0x0) 9m12.569328187s ago: executing program 0 (id=1312): getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x310) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4c001) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000400)=0xa) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d00000004"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) sendmsg$AUDIT_SET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800003}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x3c, 0x3e9, 0x806, 0x70bd26, 0x25dfdbfd, {0x2, 0x0, 0x1, 0x0, 0xe, 0x9, 0x6, 0xffffffff, 0x0, 0x7fff, 0x9}, ["", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) socket$inet6(0xa, 0x80002, 0x0) socket(0x2, 0x3, 0xff) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x2000, 0x103) 9m11.640427048s ago: executing program 0 (id=1327): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000380)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@discard}]}, 0xfd, 0x269, &(0x7f0000000a00)="$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") r0 = syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x1809049, 0x0, 0xfe, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x4010030, 0xffffffffffffffff, 0x8000000) r2 = mmap$IORING_OFF_SQES(&(0x7f0000afa000/0x3000)=nil, 0x3000, 0x1000000, 0x4010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SYMLINKAT={0x26, 0x60, 0x0, r0, &(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00'}) r3 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r4, 0xfffffe74, &(0x7f0000005440)}, 0x5) ptrace(0x10, r3) waitid(0x0, 0x0, 0xfffffffffffffffd, 0x2, &(0x7f0000002600)) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4) 9m10.361263315s ago: executing program 0 (id=1336): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) r3 = dup2(r2, r2) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) ioctl$BLKTRACESETUP(r3, 0x1276, 0x0) 9m9.403384559s ago: executing program 0 (id=1347): readlinkat(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000780)=""/198, 0xc6) 9m9.402991159s ago: executing program 32 (id=1347): readlinkat(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000780)=""/198, 0xc6) 5m19.335387541s ago: executing program 2 (id=4681): r0 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sigaltstack(0x0, 0x0) fchdir(r1) r2 = syz_open_procfs(r0, &(0x7f0000000000)='map_files\x00') fchdir(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r3, &(0x7f00000000c0)=""/41, 0x29) getdents64(r3, &(0x7f0000003640)=""/4096, 0x1000) 5m19.264266277s ago: executing program 2 (id=4682): r0 = socket$inet_sctp(0x2, 0x5, 0x84) pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r1, &(0x7f00000000c0)=ANY=[], 0xffffff6a) vmsplice(r1, &(0x7f00000003c0)=[{&(0x7f0000000040)="18", 0x1}], 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5m19.094420154s ago: executing program 2 (id=4686): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000040)=ANY=[@ANYRES16=r0, @ANYRES8=r0], 0x8) r1 = socket$pppoe(0x18, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x3, 0x5, 0x0, &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x2, @local, 'tunl0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000002340), 0x3e8, 0x0) 5m18.969311716s ago: executing program 2 (id=4691): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) close(0xffffffffffffffff) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r6, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 5m18.043750908s ago: executing program 2 (id=4707): shutdown(0xffffffffffffffff, 0x1) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800000010003904000000000000000000173a83", @ANYRES32, @ANYBLOB="01980000000000001800128008000100677265000c00028008000700ac"], 0x38}}, 0x20000080) sendto$packet(r1, &(0x7f0000000180)="892c", 0x2, 0x40, &(0x7f0000000200)={0x11, 0x8100, 0x0, 0x1, 0x9, 0x6, @broadcast}, 0x14) 5m17.139015787s ago: executing program 2 (id=4710): write$binfmt_misc(0xffffffffffffffff, &(0x7f00000007c0)="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", 0xc31) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a5f000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) ptrace(0x10, 0x1) 5m9.819866399s ago: executing program 1 (id=4786): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000000000020ac050f0222000182830109022400010100000009040000020301020009210005000122000009058103", @ANYRESHEX], 0x0) r1 = syz_open_dev$evdev(0x0, 0x4, 0x0) syz_usb_disconnect(r0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000040)={0x8}) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 5m9.051210625s ago: executing program 1 (id=4794): socket$packet(0x11, 0x3, 0x300) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000640)=[{0x6, 0x0, 0x0, 0xea}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000cc0)="b0c650b7c71804200122f8fb5dd5c5538e7daadfceb2a401d44f21958799ad2fb12df6e1453fd2ae43c45039e56bde138fd2fa0b81c7bd88841f0ebbfdf4d9fb60c6b5e6e2a60d073aa9a539e6d1da52768d1f37bd5f372da58af5c9b4b7f01e56bee169a7bd08d55fb8cae8d71d0cb1995079af84248e5212da1699ad218612cbfb7a65c79c40bfa482187fffffffeb5fd617811de787dc0100ab762ec65bce7fdd5ec04ac1be2a8ef38410b1a3197af136a6868634bab7c0c6e4ffcaed7e07d017ea91c648705e1e903d", 0xcb, 0x4004000, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000700)="09268a60fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88ff4f90b1a7511bf746bec66ba1fe92e8615fc3f7af9c3310b39cc2dc3616dcdfaebc65ca325fd99357ed9d11b266a7c88722db6e38df1089394f438cb9fbc08e62754c233cced4a4d4d05a3e5029a01298d3ee87d8a0803a2d26906f42f5b5aaf47d2752a8b23954f309cae13ef250cf76775ddfd153eef2b1a8458a3cb6dc764f19b41c8c61c7305a51a4bfa0c897c7c1f438a851222a5560c0e77b0b5934296bc6f28af87d651f7348a2ba2ca67f930cc655afe0220cbeb79a2a87bba6be2de3e756e674c405bcc51843b4cc75ff7ec38a34d1a2a61f0a1223e69484b5d922b5590758c33317df18c401ff910f9b3f0eaef8b9d928392097a025b0459", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93) 5m8.732104216s ago: executing program 1 (id=4796): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000080), 0x4) sendmsg$802154_dgram(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, @long={0x3, 0x3}}, 0x14, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x810) 5m8.731489656s ago: executing program 1 (id=4798): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x0, {0x0, 0xff, 0x2}, 0x6621350e9d60fd79}, 0x18) connect$can_j1939(r3, &(0x7f0000000080)={0x1d, r4, 0x0, {0x1, 0xf0}, 0x1}, 0x18) sendmsg$can_j1939(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5m7.411944417s ago: executing program 1 (id=4824): socket$phonet_pipe(0x23, 0x5, 0x2) openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) epoll_create1(0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) writev(r0, 0x0, 0x0) 5m7.286692379s ago: executing program 1 (id=4828): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, 0x0) ptrace(0x10, 0x1) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) 5m2.095698031s ago: executing program 33 (id=4710): write$binfmt_misc(0xffffffffffffffff, &(0x7f00000007c0)="609dda50318ce177f2f00aacf32390f2c82ac74b88fff43870291a6e3885810b86fff473e0748b6e62843f50c36f52144bb65ab956bde40f9e80b774397cab0739d233bbb43b00779592ebc7f4f99c73e66a28a3372c770f8eeb3f4150683b737d36eff8dd16e2905a42dd44d1230f449be19afc5b7a61fc793bc61577c67793dafc87e1caf3de2fd4ff294f8770aeb179c962187d46a837e754fd2e6826fde111d9df37c67c2c759666d2c92edd27618bd294c14f337780ebb696a28c47db2f27248718070af740ceb529c2509340c4ab36dd0d5abf639800d3205e66dbb91eb7152d2018b4b8f731aca51124ecc5e8e259d476862d7ebe5443bc79b9f4da4bba748f8dd4bae331397598efc02be198d133c50cf031253effec6d5b586fc3b8fc244be4b450eae06f9e28161634c1526fcc89b6ca6987cd6fe827c117baea6a4c8a7f0db9d034fd062825990e712371dcf823a4651a96ded2ab8a08ced411d86539ffb7a917e2568947832d0cbbb97a6fde10bd51d2a4290b727ebaeee0dee9150620ef060cab5385a22d386ee3c6fcc9a9e6cdcbca55b5a51928981b8ad058e649dbd995c90a6a3a9952e1af71fb1c5bcd4a8ccf635a08c1835b52aec49dd8f7bc44e2d427aea733b95ffd1c8763cccf75d31bb9cce53f60b62c45f87b29b800fb05b8a3ab3f79ce6cf42ba73087b6936c07d2b18dbff14db0ec39b82b4237b00786e4e86b6da6e879bfbd680a1f0d77bffa7f1b2bdaa80f6f81aac4fc653efe1b494b07c396f4c60fcbc776e820849455a5c4df1768a53ac3602f19cd2e7d1deff135a4029b13167f5b942b85dda6527674735e1e86084dc57f51a7fd23840fb6495530479289cfdc587d2b5fc6d9022c8488b69e505380a4b6bbb38dc63f7a6452f132dd4007ad4bc2412940f52a9f70c076adeb1b4ad33d1666b41aebffcffc659a08cc41eb4890e01c91b7feb7c20fed13060cd998567adba349eae578534ac628a3b1f4b44a9ec82c76bd0838ba91b9a05d352428e2f9cfd7c4941a3ec957569d0f97fbba3f8905b4b6a62ca282631382fe4be227cdcc9b5d51a512998f73a3ce4ede0255571f791b17df8dcd0a44c9d6185fec585d7e1b4b04443a4631ffd7028a136ca95e3832d23e05c01074dc28a40a6b5b97c8e66d31a33006d89ac275be79980e9a51e0d5851cdeb511d7f266776322c1ef57d3f9148906d0981be203492d4150bf7de6b43f7d8995f4b8d4c33a86568691763d37b1edef17c3fe4e1138d8a17fbff1a8baccf074e0350c031a1d5ab9aab0efd40cd9fc14aa41b41f7d7947e1e92272f9d625d8d88cc7f8f3a0cbb59faa1397d399aff1a38f63f0c2c6962ae86363dfd9a8e75e02655557630817fb47db0026c959b60d55a61d3eda81c0ac0988a9ca10323eba8a91e4e8af242267654da1d36721203f86fe13ec5e3da94c08b61dc120ad4ace4dc16d67da007332a8e6c4d9b37228dfb4b8848a4f279dfdc6071f12bc7c38d368110abb041b91ce6f53cc5f8a7e2a4d68bec10b7a94cb4f4ae42a03bc1115622ae69a44a294274c38895c4a3e198db05e1665195ed64ee3d0c9a9681690611fa813485715611f7507ea602fff91793ce3c8940f011fcbfd1d4a4ca04104ad990e74ac18a412f1504047b98252d8d4991ff2fd25fe38bf20f6cdc12f4a69385fdabafdb82992db98cde937e7f24b7e22fb5d9b7e4148d11247297af0ef50c40eb87c9290754a7d347b3ce40795955c752542dfb9aa553af43b4f884be90b82f7027f468dfe512eabc8535ce7e177e658a58a61e04d492deea8509632b384b3d83d3ec123d97143b626a00c979cc3f734b4c615b82d02a325265c3163a1e0e8e5e7ed721643ef84d322eee919e19340cdeda6da6112a12a28ca2a9256653f34d07a0b40251ffd92163271b2f69e1963ba74c4760de870e2064f8de17bc459306c3d2c21aae234efaed0292728846294a559ef45482f18ec32e1b0499961d1d07ffdf33d7038a62a3659b413320e73a7dd9fe60e6e8e628b895fda999958d7f4b24e30caef8b759be2e1e52494285ff33f3072d5dfbc72bf1de88d671e9c32c807b8f01570427bcf2798d89fb727a03eb3267b7be0a1ae221fb33b2e8dc26285d1555b4fe3d4c8b0f49feb3e5d58c30796a24434660b78990f95eac556be074fbfe46d82548118fecd99bce769cb63755667a12f83e9709c2c1a8980e6408422f999091e78c045fdeb002783fbbc58ed3d8c052c4c97039b8e5cccb9fa4b1f4ecb5fd28e8986350990766cfdf978857fbbcf8df79f63c9499bcd5033d2a4e9e8b07ce22b500d5ba28aec146794edec38e524c2b670d18032b5b5f03be4a4bd35fdb663ab4963c0e75b86ae10d3178b1e383dbfffb70503f6741b83b8d04423d5d2c43a2ab003b6afc313bb25d7b3e58853c9b44929c6da596cab8a4e3a248a7e9c5278caeb41dbe8c70848bc66af156eabcf4d00178f0d79ec72e579e1bcd5394c28d2931ff293fe63666dbe806596fba4c353804d1b93e8a6c1601b89c79123e2519ffc5df9e61067f9ccd2b8a13c294b1c80ebc49d532b46f614acd7b98f712dd3fa32a4cd67a51769fe90167c9cfa473c79c3c8cefb39393a89726d063f4fefbcd3932b9ec6af63e1b8b39b713278f455c0b2dcd3b323b2e00c9eb17d2b5ebdfa90b0d110a67f703cdae8cf969b1d9d76919a5852b181c9e71e780974d5d220d397d9fa60565355a49f091c78e58a23a390c5bdeb8ee9b286180475134c5c98437ee41eb4981a29e5ce7a57eaa7de4a963a481320e5bcff51f436e930e452c67fea5e2c5eb5882995d3b3d29cb92fd88c97c0f9032d0ec97851e11e3780946b9f0cbe38bdb944d2a18618875563b3d932364122827e1c5d3e000716585a494ad58e420cc3b775c98be5f444e9bad05354267fb8d0b904f9f460ea6eea6a43e23c31f02e406c7bc41e96ccd477f84398a94edad353f0875953978c5278016d50a38b5c97907eefd82479e6cb310ed6f234f13a9ea437d5444ea70e71a2c0f25c61d81434f5d280bd6ec8756914f382c55e29149a41add399f9bcc02854b895b7a6940a5b9d4f9c81f06a19356161135f2500e371fdfbe4af215e99553cc7b0e9f5321a4bf2f51e601e83127cfb93082c263b1d47e8fe33e77919a01e40d3585b2cc18a566ec270a813b88824d569ca7788355b30ac906b3d19d0b7578fd1b6e63b37e124baeb8994778925f9aa55b8d22b9fc3c33cb42e605659565caa2a3577145de645d832412f1963d7bbfbe1ae12fe1fb709e71c242154d91f19ce675723cb1e11c194b8810d41b1c69a845916132f3c48803bb959eea9977788a9b1446c6b3c6dcd675254eec71118f2e873a631a324d8782b7924b0394002ae5c54f02792304e3385b59ece10205fb0adcc0c0edd4d9cb187201877d11a9f2ff9852155bf90cee102e7c53c9889d33dc44e00d1306a5dd957d788d70a63d71f74b151d032b92c8237ad5fc668d4f90a88b4bb06a9a70eedfe16a7ff6cbd3490a8595002bcd70c2eee676e6fc161e836ba5e70cfedc71adc07ef8c57c78bc1fcfaa7899e0e612fbb8700e510dc23ed303d1af55a7700f5cdb2a49d10ac7cfe394606eefc500fbd785b56dd142ed1b040048974ccb25c70062b943193244f4c08a04da72dfd5d4b15be6f46b9f507acbcd2fe3fe3bb8c1815efa281f95e23d0fd1a19c5b51fed740639808cfb74c11ecceb5d8b77a2ac5ef04c84b092eece27704c32be7bbfe6309b30a143b0962e85eb692ca7444d12e91fec8aae932efb8f4a1af1ae4840cd7bdc1e02e4360d9dee17273d1ecaa39a6421d2894018d424dc4b3e319ea35c8d01ee5746b0ad50f12e092e4aa385c16d58d0ba0cf2ae6d77469bca7a101ddebedb03bf7fd315c7e22749832a1faf2cd0724edbc201672c828a3cef4f151763f823b82ca4717cc2e0c1235e0d06af9ef2d22db76caf076e757929f7ed03ea8c914ce8c3d104bc93bef9facc4e3314376e57a5768f3e572dcef0f1135de4a18e3cb3dfc99b3d444bac7422726ac52f63588df8a62aad608aac5f3c8e88e47b1b9cb1d3007936f983841c7a53d3ebf054e3b1b1ba67e0e254ca1ec9f721d59fd588f237228db3c9f5c58a2352fb44bc9a77ef17b854c2978ab5475353c04f73635fd37ed76e97f045f59513a33005de84884db79678f18ece842598c86ca989071168cc7426770729ec16c5bfe56241c735052d677cf7e9ee539f8a5d1e7235b610a0dd8559db03cecc27f367d788ee6a7b706324d8f6a430661121cfa480df40fab27436a0ff9af1ffc04e8bef204681c1d17a90b57b7bdf9a0035d4b0dd3969cb7409db163218db688001ddb2f4ad929b7f4bfe6ad07179c84ea1541c51efeb449c46", 0xc31) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a5f000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) ptrace(0x10, 0x1) 4m52.308284717s ago: executing program 34 (id=4828): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, 0x0) ptrace(0x10, 0x1) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) 2.758500648s ago: executing program 7 (id=9223): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f40)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYRES16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x800000000006}, 0x18) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0xb, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bind$packet(r3, &(0x7f00000001c0)={0x11, 0x11, r4, 0x1, 0xf, 0x6, @broadcast}, 0x14) sendto$packet(r3, &(0x7f0000000180), 0x0, 0x88a8ffff, &(0x7f0000000140)={0x11, 0x3, r4}, 0x14) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000400)={@random="810456feed48", @dev, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x2, 0x5, 0x24, 0x64, 0x0, 0xff, 0x2, 0x0, @private=0xa010100, @loopback}, {0x22, 0x40, 0x0, @remote, "8cd62d35e77c4994"}}}}}, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000600)={0x28, r6, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0xc004}, 0x4020) r7 = socket$nl_rdma(0x10, 0x3, 0x14) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYRESHEX=r5, @ANYRESOCT=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9, 0x0, 0x1}, 0x18) r10 = syz_open_dev$loop(&(0x7f0000000140), 0x7, 0x18803) r11 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r11, 0x0, 0x80000000, 0x0) ioctl$BLKTRACESETUP(r10, 0xc0481273, &(0x7f0000000380)={'\x00', 0x2, 0x3, 0x7, 0x7ff, 0x1000, r11}) r12 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r12, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0213f803030000002cbd7000fddbdf25010018"], 0x18}}, 0x2000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000080)={0x0, 0x12, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd29, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newsa={0x138, 0x1a, 0x713, 0x0, 0x0, {{@in6=@local, @in=@rand_addr=0x64010102, 0x0, 0xfffe, 0x0, 0x2}, {@in=@local, 0x0, 0x33}, @in=@dev, {0x0, 0x0, 0x0, 0x1, 0xb4, 0x0, 0x0, 0x20000000}, {0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x60}, [@algo_auth={0x48, 0x1, {{'sha1\x00'}}}]}, 0x138}}, 0x0) 2.601829963s ago: executing program 7 (id=9229): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57) setsockopt$inet_mreqsrc(r2, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 2.542806709s ago: executing program 7 (id=9231): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x43c02, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0x240}], 0x1) 2.425015261s ago: executing program 7 (id=9234): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x15, 0xb, &(0x7f0000000640)=ANY=[@ANYRES8=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000b8ffffffb702000004"], &(0x7f0000000680)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000005c0), 0x10) sendmsg$can_raw(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000380)={&(0x7f000000a000)=@canfd={{0x5}, 0x2, 0x2, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000094e2f9663a918fa1efd9b0b"}, 0x48}, 0x2}, 0x24000895) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES64=r0], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b7"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4a, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r4, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x810) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0xa85, 0xf) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x26, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) r7 = gettid() r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r8, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)=0x0) timer_settime(r9, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fcntl$addseals(r1, 0x409, 0x5) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x26, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) 1.646794548s ago: executing program 3 (id=9249): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000040000000000000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='kfree\x00', r1}, 0x18) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0xfe8e, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) munlockall() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000002c0)=0x1) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x2) ioprio_get$uid(0x3, 0xee01) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f00000000c0)=""/160, 0xa0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x10040045}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r2, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f0000000300)='%pI4 \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x0, 0x13, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @ldst={0x2, 0x1, 0x3, 0x2, 0xb, 0x18, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x69c}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x24, &(0x7f0000000080)=""/36, 0x40f00, 0x60, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000180)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x2, 0x8, 0xff, 0x10000}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000480)=[r2, r2, r2, r2, r6], &(0x7f00000004c0)=[{0x0, 0x3, 0xd, 0x2}, {0x1, 0x2, 0x4, 0xa}], 0x10, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) 1.561675896s ago: executing program 7 (id=9250): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x15, 0xb, &(0x7f0000000640)=ANY=[@ANYRES8=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000b8ffffffb702000004"], &(0x7f0000000680)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000005c0), 0x10) sendmsg$can_raw(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000380)={&(0x7f000000a000)=@canfd={{0x5}, 0x2, 0x2, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000094e2f9663a918fa1efd9b0b"}, 0x48}, 0x2}, 0x24000895) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES64=r0], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4a, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r4, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x810) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0xa85, 0xf) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x26, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) r7 = gettid() r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r8, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)=0x0) timer_settime(r9, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x26, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) 1.366868445s ago: executing program 5 (id=9252): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_clone(0x6a00003a, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x16, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "1e4e1557a609bff6a596dea0fb0503f22231b15d27fce60137b6c6cbf512f89b435f5dd9b4ae337bbf37b108c1ec26276567359e079abe967f5d8aad34301a48", 0x13}, 0x48, 0xfffffffffffffffc) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000006b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring) 1.30957713s ago: executing program 6 (id=9253): r0 = syz_io_uring_setup(0x14dd, &(0x7f0000000300)={0x0, 0x5121, 0x0, 0x3, 0x258}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYMLINKAT={0x26, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)='./file1\x00'}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 1.282477053s ago: executing program 3 (id=9254): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x15, 0xb, &(0x7f0000000640)=ANY=[@ANYRES8=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000b8ffffffb702000004"], &(0x7f0000000680)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000005c0), 0x10) sendmsg$can_raw(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000380)={&(0x7f000000a000)=@canfd={{0x5}, 0x2, 0x2, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000094e2f9663a918fa1efd9b0b"}, 0x48}, 0x2}, 0x24000895) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES64=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b700000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4a, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0xa85, 0xf) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x26, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) r4 = gettid() r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r5, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.193865632s ago: executing program 5 (id=9255): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f40)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYRES16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x800000000006}, 0x18) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0xb, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bind$packet(r3, &(0x7f00000001c0)={0x11, 0x11, r4, 0x1, 0xf, 0x6, @broadcast}, 0x14) sendto$packet(r3, &(0x7f0000000180)="0b0312002e0064000200475400", 0xd, 0x88a8ffff, &(0x7f0000000140)={0x11, 0x3, r4}, 0x14) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000400)={@random="810456feed48", @dev, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x2, 0x5, 0x24, 0x64, 0x0, 0xff, 0x2, 0x0, @private=0xa010100, @loopback}, {0x22, 0x40, 0x0, @remote, "8cd62d35e77c4994"}}}}}, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000600)={0x28, r6, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0xc004}, 0x4020) r7 = socket$nl_rdma(0x10, 0x3, 0x14) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYRESHEX=r5, @ANYRESOCT=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9, 0x0, 0x1}, 0x18) r10 = syz_open_dev$loop(&(0x7f0000000140), 0x7, 0x18803) r11 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r11, 0x0, 0x80000000, 0x0) ioctl$BLKTRACESETUP(r10, 0xc0481273, &(0x7f0000000380)={'\x00', 0x2, 0x3, 0x7, 0x7ff, 0x1000, r11}) r12 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r12, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0213f803030000002cbd7000fddbdf25010018"], 0x18}}, 0x2000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000080)={0x0, 0x12, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd29, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newsa={0x138, 0x1a, 0x713, 0x0, 0x0, {{@in6=@local, @in=@rand_addr=0x64010102, 0x0, 0xfffe, 0x0, 0x2}, {@in=@local, 0x0, 0x33}, @in=@dev, {0x0, 0x0, 0x0, 0x1, 0xb4, 0x0, 0x0, 0x20000000}, {0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x60}, [@algo_auth={0x48, 0x1, {{'sha1\x00'}}}]}, 0x138}}, 0x0) 1.165907845s ago: executing program 6 (id=9256): r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000004000000000000008100d00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0xe, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) uname(&(0x7f0000002080)=""/137) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000440)={{}, {0x1, 0x6}, [], {}, [{0x8, 0x1}], {0x10, 0x3}, {0x20, 0x7}}, 0x2c, 0x1) 1.140923167s ago: executing program 6 (id=9257): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x43c02, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0x240}], 0x1) 1.100497841s ago: executing program 4 (id=9259): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_clone(0x6a00003a, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x16, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "1e4e1557a609bff6a596dea0fb0503f22231b15d27fce60137b6c6cbf512f89b435f5dd9b4ae337bbf37b108c1ec26276567359e079abe967f5d8aad34301a48", 0x13}, 0x48, 0xfffffffffffffffc) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000006b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000740)='jbd2_submit_inode_data\x00', r3, 0x0, 0x800}, 0x18) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = io_uring_setup(0x6c7, &(0x7f0000000080)={0x0, 0x4075, 0x18, 0x1, 0x40010f}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x27}, 0x74) r7 = add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring={'key_or_keyring:', r7}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(r5, &(0x7f0000000700)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, 0x0, 0x300, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xff, 0x28}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 996.553872ms ago: executing program 6 (id=9260): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x15, 0xb, &(0x7f0000000640)=ANY=[@ANYRES8=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000b8ffffffb702000004"], &(0x7f0000000680)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000005c0), 0x10) sendmsg$can_raw(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000380)={&(0x7f000000a000)=@canfd={{0x5}, 0x2, 0x2, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000094e2f9663a918fa1efd9b0b"}, 0x48}, 0x2}, 0x24000895) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES64=r0], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b700000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4a, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r4, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x810) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0xa85, 0xf) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x26, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) r7 = gettid() r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r8, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)=0x0) timer_settime(r9, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fcntl$addseals(r1, 0x409, 0x5) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x26, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) 987.705492ms ago: executing program 5 (id=9261): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$tipc(0x1e, 0x5, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x200000005c831, 0xffffffffffffffff, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x14, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r3 = syz_io_uring_complete(0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000180)={'wg2\x00'}) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r3, 0x0, 0x20000801) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@usrquota}, {@errors_remount}, {@dioread_lock}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0xc) write$P9_RREADLINK(r5, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) fadvise64(r5, 0x807f, 0x1000000, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', 0xffffffffffffffff, 0x0, 0x8000002}, 0x18) sendmsg$tipc(r2, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@prjquota}, {@bsdgroups}, {@oldalloc}, {@errors_continue}]}, 0x2, 0x45d, &(0x7f0000000ac0)="$eJzs3M1vFOUfAPDvzLaFH2/tD/EFRG1CDI0vLS2oHLxoNPGA0UQPeKzbQggLNbQmQohUY/BiYoh6Nh5N/Ce8GPVk4lXvhoQoF9BTzczOwHbZLSxddiv7+SQDz7PzdJ/n22eemWfm2W0AA2s8+yeJ2BYRv0XEaD27usB4/b/rV89X/756vprEyspbfyZ5uWtXz1fLouXPbS0yE2lE+klSVLLa4tlzJ2drtfkzRX5q6dR7U4tnzz174tTs8fnj86dnDh8+dHD6hednnutKnFlc1/Z8uLB392vvXHq9evTSuz99l7V3W7G/MY5uGc8C/2sl17zvyW5X1mfbG9LJUB8bQkcqEZF113A+/kejEjc7bzRe/bivjQPuqezatKn97uUV4D6WRL9bAPRHeaHP7n/LrUdTjw3hykv1G6As7uvFVt8zFGlRZrjp/rabxiPi6PI/X2db3KPnEAAAjT6rfnUknmk1/0vjoYZyO4o1lLGI+H9E7IyIByJiV0Q8GJGXfTgiHumw/ualoVvnP+nluwrsDmXzvxeLta3V879y9hdjlSK3PY9/ODl2ojZ/oPidTMTwpiw/vUYd37/y6+ft9jXO/7Itq7+cCxbtuDzU9IBubnZpNp+UdsGVjyL2DLWKP7mxEpBExO6I2NPZW+8oEyee+nZvu0K3j38NXVhnWvkmYn+9/5ejKf5Ssvb65NTmqM0fmCqPilv9/MvFN9vVv674uyDr/y2rj//mImNJ43rtYud1XPz907b3NHd7/I8kb+fno7KjPphdWjozHTGSHMlfHCnK5q/P3PzZMl+Wz+Kf2Nd6/O+MmxU8GhHZQfxYRDweEU8UbS+Pkn1rxP/jy+33bYT+n2t5/rtx/Df1f+eJyskfYnOb+u+s/w/lqYnilfz8dxt32sB1/fIAAADgPyLNPwOfpJM30mk6OVn/DP+u2JLWFhaXnj628P7pufpn5cdiOC2fdI02PA+dTpaLd6znZ4pnxeX+g8Vz4y8r/8vzk9WF2lyfY4dBt7XN+M/8Uel364B7rtU62sxIHxoC9Fzz+E9XZy+80cvGAD3l+9owuG4z/tNetQPoPdd/GFytxv+Fpry1ALg/uf7D4DL+YXAZ/zC4jH8YSOv5Xv8gJco/krpR2tP/RKQbohmdJcor3UZpT/cT+7+oR7juN+znWQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKB7/g0AAP//0TLrKA==") 802.794891ms ago: executing program 4 (id=9262): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_clone(0x6a00003a, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x16, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "1e4e1557a609bff6a596dea0fb0503f22231b15d27fce60137b6c6cbf512f89b435f5dd9b4ae337bbf37b108c1ec26276567359e079abe967f5d8aad34301a48", 0x13}, 0x48, 0xfffffffffffffffc) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000006b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000740)='jbd2_submit_inode_data\x00', r3, 0x0, 0x800}, 0x18) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = io_uring_setup(0x6c7, &(0x7f0000000080)={0x0, 0x4075, 0x18, 0x1, 0x40010f}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x27}, 0x74) r7 = add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring={'key_or_keyring:', r7}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(r5, &(0x7f0000000700)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, 0x0, 0x300, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xff, 0x28}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 703.03962ms ago: executing program 7 (id=9263): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x5) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) sendto$packet(r1, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847fe7bf05ddc63ff512d4074687760a5fbd1fc97772c6f5027dcea15b6658de3b024a6ea22baafb445bf8427c8055d00", 0xffffff3d, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000340)=""/235, 0xeb}, {&(0x7f00000004c0)=""/178, 0xb2}, {&(0x7f0000000580)=""/104, 0x68}, {&(0x7f0000000680)=""/179, 0xb3}, {&(0x7f0000000740)=""/45, 0x2d}], 0x5}, 0x2) 642.244396ms ago: executing program 5 (id=9264): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="700000001200030200"/56, @ANYRES32=0x0, @ANYBLOB="816900000000080000000000000000002100010008081c000a"], 0x70}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="eb9700080300d200000000000000", @ANYRES32=r3, @ANYBLOB="0500f60013000000"], 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x80) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)={0x3c, r6, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x300}]}]}]}, 0x3c}}, 0x20000810) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='netlink_extack\x00'}, 0x18) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)=ANY=[@ANYBLOB="a0010000100001000000000000000000fe880000000000000000000000000101ac1414bb00000000000000000000000000000000000000000a00000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ac14050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000800000000000200000000000000000000000000000200000000000000000000000a000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000000000000000000000002abd700028bd7000000000004c001400636d61632861657329000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000"], 0x1a0}}, 0x0) r8 = socket(0x10, 0x2, 0x0) write(r8, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r8, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 572.132043ms ago: executing program 5 (id=9265): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000040000000000000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='kfree\x00', r1}, 0x18) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0xfe8e, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000002c0)=0x1) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x2) ioprio_get$uid(0x3, 0xee01) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f00000000c0)=""/160, 0xa0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x10040045}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r2, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f0000000300)='%pI4 \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x0, 0x13, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @ldst={0x2, 0x1, 0x3, 0x2, 0xb, 0x18, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x69c}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x24, &(0x7f0000000080)=""/36, 0x40f00, 0x60, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000180)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x2, 0x8, 0xff, 0x10000}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000480)=[r2, r2, r2, r2, r6], &(0x7f00000004c0)=[{0x0, 0x3, 0xd, 0x2}, {0x1, 0x2, 0x4, 0xa}], 0x10, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) 522.057968ms ago: executing program 4 (id=9266): r0 = syz_io_uring_setup(0x14dd, &(0x7f0000000300)={0x0, 0x5121, 0x0, 0x3, 0x258}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYMLINKAT={0x26, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)='./file1\x00'}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 414.200979ms ago: executing program 3 (id=9267): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x190, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x0, 0xff0000ff], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x29, 0x1ff, 0x6, 0xb0e6, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x18, 0x800, 0x93, 0x6, 'netbios-ns\x00', 'syz0\x00', {0x6}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x1f8, 0x260, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@recent0={{0xf8}, {0xffff, 0x40, 0x10, 0x1, 'syz0\x00', 0xa}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x8, 0x2, 0x8, 'pptp\x00', 'syz1\x00', {0x5a}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4f8) 376.850023ms ago: executing program 3 (id=9268): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57) setsockopt$inet_mreqsrc(r2, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 375.731452ms ago: executing program 4 (id=9269): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000940)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000900)={&(0x7f0000003800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSET={0x148, 0x9, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x9}, @NFTA_SET_EXPRESSIONS={0xf8, 0x12, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x81}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0x48, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_FIB_FLAGS={0x8}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x7}]}}}]}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xb0}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3b}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x8}]}, @NFT_MSG_DELSET={0x3a4, 0xb, 0xa, 0x807, 0x0, 0x0, {0x9, 0x0, 0x3}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_DESC={0x224, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x154, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xcf5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc71e}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ed}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffeffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4336cabb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xbfc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_DESC_CONCAT={0x44, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffff801}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}]}, @NFTA_SET_DESC_CONCAT={0x78, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xff}]}, @NFTA_SET_EXPRESSIONS={0x120, 0x12, 0x0, 0x1, [{0x64, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_TPROXY_REG_PORT={0x8}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x17}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_TYPE={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x54, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}]}}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x9}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3c}]}, @NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0xb8, 0x16, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x6c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSETELEM={0x7b0, 0xe, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x79c, 0x3, 0x0, 0x1, [{0x2b0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x100000001}, @NFTA_SET_ELEM_USERDATA={0x18, 0x6, 0x1, 0x0, "20ad51030e173fee3e23325855cdac85c3ccd1f9"}, @NFTA_SET_ELEM_KEY_END={0x130, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc0, 0x1, "f49f44f81841ab7476dd2a781aac2da44b326c9e8fcc2c9dea860cf869c425bdd2706ce5a91708591e977f68cb029385ec3aba2bf6b46d5d0d1d55943312155b204b30d7afcd27fc143d96b4fc4228dc21d31a8a66d84432e29900b64f1946533920a5c1e7e5c2cb74301c9a5d22c5d436a9e28a8bee106d1c045cc09864018804dfcf8c0008d6eb1db32a4c56f112f893972f1622fd827274a4a90575ac843f60e54412d86481cf2981eed1fa2e3bc6a5bceb92876f9c8eaf8c8f04"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x3c, 0x1, "6806d20d9a3fe7250d62e9c49e0e859220c69a409686bedf01a8393665fa45cc0823811b67f0b71535d8fc55906ff74e5fa0c64e6da2f467"}]}, @NFTA_SET_ELEM_EXPR={0x20, 0x7, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, @NFTA_SET_ELEM_DATA={0x64, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_EXPR={0x44, 0x7, 0x0, 0x1, @meta={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x22}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1f}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x13}]}}}, @NFTA_SET_ELEM_KEY_END={0x84, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x4e49402042afa9ec}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x22, 0x1, "4a07bbf821c88e43f2dec9b123316ac1e3e2029b46df5e8f554104ce9133"}]}]}, {0x444, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x80000000}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @target={{0xb}, @void}}, @NFTA_SET_ELEM_KEY_END={0xf0, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x60, 0x1, "90a586d7165d2290965cfd16366395a9fd9d7b36cf419b5580af724a0402b64f0e81c43010cb7143b01ecfd55e23a8b8cf06b2df5fd55315ec3bc149d4e0d4dbb8a97f54c82a290abce6b3bcb70670141de2e6669dc985fe904c63c8"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xe4, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x5c, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2dc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffffa}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x101}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}]}}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x1c, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LOG_PREFIX={0xa, 0x2, 0x1, 0x0, '\xbb\xbb\xbb\xbb\xbb\xbb'}]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x1c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_ELEM_USERDATA={0x59, 0x6, 0x1, 0x0, "1c842f9b8b096fbc3d38cb91ec5c98ed690e956e4153c753a469d2564a6689840dfce627670ab165803e487c995e29d5be9981580cf891653deea55e9249412c602bbfd9947201a32698fe47bfc7e36d116a8e2be6"}, @NFTA_SET_ELEM_KEY={0x178, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xd5, 0x1, "e5cd03914fb39425b6f077ada964a391a9ff3cb88d2f3c41c9b12c1c0330bcada25cb5d6db663ea6ef8f98eadf30c0418beed4b3260786edd38ca08fa296e25121ebfb1f636001796cd989c72bb77c39c1f3bb6dc8eb94580e13a9ed1d6f9f72b60f0aed7c1e27b5cbb59d9e183d544bc7ef28a63f43968f558292107cdaf6d99a9d3f7756b8166d447bf4b9da41a0108d946655dcffc60376fd764311e5ca348cae9521d9c548278d02b098304acac9ad53c578a95b38c1144548964c9362e613789999cd62c361796a67b5e55933ca95"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_USERDATA={0x7b, 0x6, 0x1, 0x0, "af03fc5ce109609705425e94e3768e2114a42aa043380c4c9022c4f173260a11d96b0ee615e121ab3b8e4520d2137c5708569f187760b1be74d578722db693ac0b1cc1c8a457389428aafdcc9ffb2097dc4725416df002faac81d70a12cca543096e041be5d434da63691e811a7ba6fbbe7d300ef27071"}]}, {0xa4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY_END={0x88, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0xe, 0x1, "f7c0834dc9beb66f4df4"}, @NFTA_DATA_VALUE={0x69, 0x1, "e448b046bebbed95e52f06c772c016998de2deba5e385f6e00da7dd6ea1561e6d6f730f402146ecc4b63c2e356d9d7558807281256d025ac532a6ab718849ed43570656f94e996c2c6b3bd2c47e452b2bfc1a6356a3c6c5abbe63a021ae6216cfa402fb887"}, @NFTA_DATA_VALUE={0x4}]}]}]}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x37}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x831}, @NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @dup={{0x8}, @void}}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x6c, 0x2, 0xa, 0x0, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x42, 0x6, "50c122ca9f75bfb6a0af147d9b8eff2d61e198739492743faa450543b5819c73493877684310ed82002177f01b68fb89356932dbca5f50b15d3d7ab86a08"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xe64}, 0x1, 0x0, 0x0, 0xc000}, 0xc8010) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x22048854, &(0x7f0000000200)={0x2, 0x4e23, @empty}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001340)={0x6dc, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x1f, 0xfa, "95aacbd682460b766bc128e8dbd585972ed2078b8c524c98f944b8"}, @NL80211_ATTR_FILS_ERP_REALM={0x39, 0xfa, "fab995992e2579bb67a96be7b863fd424e78c16d3c998d61a41436ef23588a26e74274bc1d7c4288d1b96ada0c2fbea32dcfcf3040"}], @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x29, 0xfc, "ea7e7874a47ac296ce1646be8645613805ba8f49e28edf84a78c37b12aa6729b5b649302f3"}, @NL80211_ATTR_FILS_ERP_RRK={0x63d, 0xfc, "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"}]]}, 0x6dc}, 0x1, 0x0, 0x0, 0x8004}, 0x80) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x1000000, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xfff}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}]}}]}, 0x48}}, 0x0) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@local}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0xd000, 0x11, 0x0, 0x27) 295.623161ms ago: executing program 4 (id=9270): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x43c02, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b'], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0x240}], 0x1) 285.797542ms ago: executing program 3 (id=9271): socket(0x10, 0x3, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) openat(0xffffffffffffffff, 0x0, 0x541040, 0xc8) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000340)='host1x_syncpt_load_min\x00', r1}, 0x18) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYRESHEX=r3]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r5}, 0x10) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) set_mempolicy(0x3, &(0x7f0000000040)=0x2, 0x6) syz_emit_ethernet(0x165, &(0x7f0000000980)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x2b, 0x4, 0x0, 0x26, 0x157, 0x66, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x54, 0x89, 0x3, 0xf, [{@rand_addr=0x64010101, 0x6}, {@remote, 0x1}, {@multicast2, 0x3}, {@remote, 0x9b24}, {@remote, 0x3}, {@multicast1, 0xffff}, {@empty, 0xa}, {@private=0xa010101, 0x40}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7f}, {@rand_addr=0x64010100, 0x7}]}, @timestamp_prespec={0x44, 0x34, 0xca, 0x3, 0xf, [{@dev={0xac, 0x14, 0x14, 0x1c}, 0x5}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0x3000}, {@empty, 0x2}, {@rand_addr=0x64010102, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xe4}, {@loopback, 0x10}]}, @timestamp_prespec={0x44, 0xc, 0x28, 0x3, 0xe, [{@remote, 0x3}]}, @noop]}}, @echo={0x8, 0x0, 0x0, 0x1, 0x7, "1c7432473d779f8fe4a3ffa7d4d9c0d4702f3ce68fa38e2ed8c98878ebf82835221693c14e696fd37b17282191f61f9e09b66e104c97baa3d9a514598ac0d234f37fcf786662afe7a1c9fec8d23b6d5fa0012b3370810c5abdfddb95090590867fce31034494a20cdca9551a39947060d5253a5d1ea3909f54335ee0c35d99ceaaeeede359682c1f1e8ed18bd5f199baf2767e26e86b3b2b6557d386251a75ca16e649"}}}}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x0, 0x0, 0xfa, 0x5, 0x8, 0x7}, &(0x7f0000000200)=0x20) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffff"], 0x48) r8 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(0x0, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xfffe, r8, 0x0}]) ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f0000000780)=ANY=[@ANYBLOB="8f00000008000000030004000fd7bb09cb72d286997abc424cf6218fa647fa27d4951daadc0ca559cf2101e82e44b0ab3eee8df57f38707eb19805fa4ed45c109f55f73e6c03cdd4a226abd0c80a26b1c14cfb20808e04d3c36767e3e597eb6daad2c7cd5b5a3bb229b9c424cc4ad70768558b49810f35c8741430f079ca291b46774aae082d5391b52d7aa624f2484a91fec765294513b61fee02bdc344ebc45b8b3e095a"]) 169.319023ms ago: executing program 3 (id=9272): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="1b0000001e005f0214fffffffffffff80700000001000000000000", 0x1b) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0xbe, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000b000000000002f9078ac1e0001e00000018ec23477518cc7fc4961ff998d572001880b009c90780100000000000000dbdd9ede7e2313a7a23925f03dbbcf5cde982cab6b38bf7b463ae5f42c35dd1d6a7710ebcf55344ae76b375fa62e3502b74659d7dbde072d61b6238412ad5f1a0a4f358515e45cea781c9e9b26806f68ddf0ffffff0f6ebd662f8cd823dfd0d952970deffa6d030081599e7cbb90dd16672f6f76d2b54e3b930034c945e4"], 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000ac0)={[{@delalloc}, {@noload}, {@nomblk_io_submit}, {@dioread_lock}, {@resgid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8000}}, {@data_err_ignore}, {@grpquota}, {@inlinecrypt}, {@user_xattr}, {@dioread_nolock}, {@dioread_nolock}, {@nomblk_io_submit}]}, 0x1, 0x55e, &(0x7f0000000e80)="$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") r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) sendfile(r2, r1, 0x0, 0xfffa83) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x1b, &(0x7f0000000980)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffa}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xf}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @jmp={0x5, 0x1, 0x0, 0x7, 0xb, 0x10}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000540)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e22, @rand_addr=0x64010101}]}, &(0x7f00000002c0)=0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000e00)=[{{0x3, 0x0, 0x1}, {0x3, 0x1, 0x0, 0x1}}, {{0x0, 0x1}, {0x0, 0x0, 0x1}}, {{0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}}, {{0x3, 0x0, 0x0, 0x1}, {0x4, 0x1}}, {{0x1, 0x0, 0x1, 0x1}, {0x1, 0x1, 0x1}}, {{0x4, 0x0, 0x1, 0x1}, {0x3}}, {{0x4, 0x1, 0x0, 0x1}, {0x1, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x4, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3, 0x1}}, {{0x1, 0x0, 0x1, 0x1}, {0x3, 0x0, 0x1}}], 0x50) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000080)={r8, 0x1ff}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000d00)={r8, 0x64, &(0x7f0000000c80)=[@in6={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, @in6={0xa, 0x4e20, 0x1ff, @private2, 0x3}, @in={0x2, 0x4e22, @private=0xa010102}, @in6={0xa, 0x4e21, 0x100, @local}]}, &(0x7f0000000d40)=0x10) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r5, &(0x7f0000000dc0)={0x10, 0x30, 0xfa00, {&(0x7f0000000d80), 0x3, {0xa, 0x4e21, 0x80000001, @empty, 0x8001}}}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x10007b0f, 0x96f0, 0x20, 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020a0000020000000000000000000400"], 0x10}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}}, 0x20}}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000940)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x48000}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0x88, r10, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x0, 0x13}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x88}}, 0x40000) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000c40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x18, 0x140c, 0x10, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4084900}, 0xc001) 125.257767ms ago: executing program 6 (id=9273): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDSKBLED(r1, 0x4b65, 0x5) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xf, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x2c, 0x1, 0x0, 0x0, {{0x800, 0x7, 0x1}, {{0xfff2, 0x0, 0x1}, {0x3, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xe85, 0x1, 0xc}, {0x4, 0x80000000, 0x3, 0x1, 0xf, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x0) 113.901438ms ago: executing program 4 (id=9274): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$tipc(0x1e, 0x5, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x200000005c831, 0xffffffffffffffff, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x14, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r3 = syz_io_uring_complete(0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000180)={'wg2\x00'}) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r3, 0x0, 0x20000801) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@usrquota}, {@errors_remount}, {@dioread_lock}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0xc) write$P9_RREADLINK(r5, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) fadvise64(r5, 0x807f, 0x1000000, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', 0xffffffffffffffff, 0x0, 0x8000002}, 0x18) sendmsg$tipc(r2, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@prjquota}, {@bsdgroups}, {@oldalloc}, {@errors_continue}]}, 0x2, 0x45d, &(0x7f0000000ac0)="$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") 781.56µs ago: executing program 6 (id=9275): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000180)={0x0, 0xa6, 0x10}, 0xc) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x7, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="ac", 0x1}], 0x1}, 0x4048043) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000340)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r5 = open(&(0x7f0000000140)='./bus\x00', 0x143bc2, 0x1c0) fcntl$setlease(r5, 0x400, 0x1) close_range(r4, r4, 0x0) close(r5) r6 = dup(r0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000007c0)='wg2\x00', 0x10) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000840)={0x0, 0x3}, &(0x7f0000000880)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000400)={r7, @in6={{0xa, 0x4e20, 0x9, @mcast1, 0x400}}, 0x8001, 0xbffc, 0xe652, 0x4, 0x4, 0x7, 0xff}, 0x9c) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c756e695f786c6174653d312c757466383d312c757466383d312c646973636172642c757466383d302c756e695f786c6174653d302c666c7573682c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c646f733178666c6f7070792c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c757466382c0014697a7960fb374b723f64329787434c6c9f891d2e309efaf1d4e529e1ba0f697fedffb095592bc19d5a8f8141ee9bf46262f3a2b1452bf206c0e2ae8a465e6e1be6eeb5d588035a24458d476fc1f9a234cdc4ba352a4185614ce67df4870bff796357ee95fffb99cde9"], 0xfe, 0x2b7, &(0x7f0000001340)="$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") truncate(&(0x7f00000002c0)='./file1\x00', 0x1000001) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r9, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r8, 0x0, r0, 0x0, 0xfff, 0x2) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={r1, 0x20, &(0x7f0000000640)={&(0x7f00000003c0)=""/26, 0x1a, 0x0, &(0x7f00000005c0)=""/71, 0x47}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x19, 0x17, &(0x7f00000008c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@alu={0x7, 0x0, 0xb, 0x0, 0x7, 0x20}, @map_fd={0x18, 0xa, 0x1, 0x0, r5}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x1000009}, @initr0={0x18, 0x0, 0x0, 0x0, 0xbcf, 0x0, 0x0, 0x0, 0x1}, @generic={0x7, 0x5, 0x0, 0x4, 0xfff}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='syzkaller\x00', 0x2, 0xf9, &(0x7f00000004c0)=""/249, 0x1e00, 0x4, '\x00', 0x0, @fallback=0x19, r6, 0x8, &(0x7f0000000300)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x8, 0xfffffffb, 0x8001}, 0x10, r10, r6, 0x0, &(0x7f00000006c0)=[r6], 0x0, 0x10, 0x6}, 0x94) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x3b, 0x8}}, 0x20) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="68000000290003050000", @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa0000080005"], 0x68}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000e80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c00)={0xe0, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x9}, @ETHTOOL_A_LINKMODES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKMODES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_LINKMODES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @ETHTOOL_A_LINKMODES_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20004800}, 0x20000041) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 0s ago: executing program 5 (id=9276): epoll_create1(0x0) link(0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000cc0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000000, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x101}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="2c00951a51ff0100003af1e59ded3a000739", @ANYRES16=r2, @ANYRES32=0x0, @ANYBLOB="0c009900070000004e00000004001d80"], 0x2c}, 0x1, 0x0, 0x0, 0x95}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f0000000440)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000680)=ANY=[@ANYRES16=r4, @ANYRES32=r4, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) sendto$unix(r5, &(0x7f0000000a00)="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", 0x26d, 0x40090, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r6}, 0x18) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0x14) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x4000, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) kernel console output (not intermixed with test programs): 5: 00007ffe13890128 [ 693.753603][T28971] [ 695.172455][T29031] loop4: detected capacity change from 0 to 256 [ 695.181946][T29031] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 695.670901][T29051] tipc: Enabled bearer , priority 0 [ 695.679181][T29050] tipc: Resetting bearer [ 695.697364][T29050] tipc: Disabling bearer [ 696.223068][T29064] tipc: Enabled bearer , priority 0 [ 696.232901][T29063] tipc: Resetting bearer [ 696.247622][T29063] tipc: Disabling bearer [ 696.308906][T29075] netlink: 'syz.5.8597': attribute type 4 has an invalid length. [ 696.341556][T29075] netlink: 'syz.5.8597': attribute type 4 has an invalid length. [ 696.426646][T29079] loop3: detected capacity change from 0 to 2048 [ 696.440463][T29079] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 696.453032][T29079] ext4 filesystem being mounted at /496/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 696.539866][T29092] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.8598: bg 0: block 345: padding at end of block bitmap is not set [ 696.554431][T29092] EXT4-fs (loop3): Remounting filesystem read-only [ 696.652074][T21544] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 696.709941][T29098] netlink: 'syz.3.8604': attribute type 4 has an invalid length. [ 696.732532][T29098] netlink: 'syz.3.8604': attribute type 4 has an invalid length. [ 696.771638][T29102] siw: device registration error -23 [ 696.908362][T29105] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 697.214802][T29111] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 697.219902][T29108] __nla_validate_parse: 60 callbacks suppressed [ 697.219925][T29108] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8607'. [ 697.239740][T29108] netlink: 348 bytes leftover after parsing attributes in process `syz.7.8607'. [ 697.248836][T29108] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8607'. [ 697.257842][T29108] netlink: 348 bytes leftover after parsing attributes in process `syz.7.8607'. [ 697.266953][T29108] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8607'. [ 697.313330][T29108] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8607'. [ 697.322435][T29108] netlink: 348 bytes leftover after parsing attributes in process `syz.7.8607'. [ 697.331578][T29108] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8607'. [ 697.340658][T29108] netlink: 348 bytes leftover after parsing attributes in process `syz.7.8607'. [ 697.349909][T29108] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8607'. [ 698.078832][T29121] syz.5.8611 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 698.093529][T29121] CPU: 0 UID: 0 PID: 29121 Comm: syz.5.8611 Not tainted syzkaller #0 PREEMPT(voluntary) [ 698.093564][T29121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 698.093582][T29121] Call Trace: [ 698.093590][T29121] [ 698.093600][T29121] __dump_stack+0x1d/0x30 [ 698.093673][T29121] dump_stack_lvl+0xe8/0x140 [ 698.093693][T29121] dump_stack+0x15/0x1b [ 698.093713][T29121] dump_header+0x81/0x220 [ 698.093795][T29121] oom_kill_process+0x342/0x400 [ 698.093836][T29121] out_of_memory+0x979/0xb80 [ 698.093887][T29121] try_charge_memcg+0x610/0xa10 [ 698.093930][T29121] obj_cgroup_charge_pages+0xa6/0x150 [ 698.094018][T29121] __memcg_kmem_charge_page+0x9f/0x170 [ 698.094063][T29121] __alloc_frozen_pages_noprof+0x188/0x360 [ 698.094147][T29121] alloc_pages_mpol+0xb3/0x260 [ 698.094166][T29121] ? alloc_pages_noprof+0xf4/0x130 [ 698.094245][T29121] alloc_pages_noprof+0x90/0x130 [ 698.094323][T29121] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 698.094377][T29121] ? mas_max_gap+0x2b4/0x390 [ 698.094440][T29121] __kvmalloc_node_noprof+0x483/0x670 [ 698.094482][T29121] ? ip_set_alloc+0x24/0x30 [ 698.094511][T29121] ? ip_set_alloc+0x24/0x30 [ 698.094668][T29121] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 698.094703][T29121] ip_set_alloc+0x24/0x30 [ 698.094730][T29121] hash_netiface_create+0x282/0x740 [ 698.094783][T29121] ? __pfx_hash_netiface_create+0x10/0x10 [ 698.094899][T29121] ip_set_create+0x3cc/0x970 [ 698.094955][T29121] ? __nla_parse+0x40/0x60 [ 698.095037][T29121] nfnetlink_rcv_msg+0x4c6/0x590 [ 698.095086][T29121] netlink_rcv_skb+0x123/0x220 [ 698.095189][T29121] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 698.095222][T29121] nfnetlink_rcv+0x167/0x16c0 [ 698.095252][T29121] ? kmem_cache_free+0xe4/0x3d0 [ 698.095372][T29121] ? __kfree_skb+0x109/0x150 [ 698.095407][T29121] ? nlmon_xmit+0x4f/0x60 [ 698.095432][T29121] ? consume_skb+0x49/0x150 [ 698.095533][T29121] ? nlmon_xmit+0x4f/0x60 [ 698.095639][T29121] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 698.095684][T29121] ? __dev_queue_xmit+0x1200/0x2000 [ 698.095717][T29121] ? __dev_queue_xmit+0x182/0x2000 [ 698.095827][T29121] ? __rcu_read_unlock+0x4f/0x70 [ 698.095893][T29121] ? ref_tracker_free+0x37d/0x3e0 [ 698.095954][T29121] ? __netlink_deliver_tap+0x4dc/0x500 [ 698.096000][T29121] netlink_unicast+0x5c0/0x690 [ 698.096040][T29121] netlink_sendmsg+0x58b/0x6b0 [ 698.096144][T29121] ? __pfx_netlink_sendmsg+0x10/0x10 [ 698.096228][T29121] __sock_sendmsg+0x145/0x180 [ 698.096257][T29121] ____sys_sendmsg+0x31e/0x4e0 [ 698.096298][T29121] ___sys_sendmsg+0x17b/0x1d0 [ 698.096352][T29121] __x64_sys_sendmsg+0xd4/0x160 [ 698.096434][T29121] x64_sys_call+0x191e/0x3000 [ 698.096460][T29121] do_syscall_64+0xd2/0x200 [ 698.096491][T29121] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 698.096608][T29121] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 698.096636][T29121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.096735][T29121] RIP: 0033:0x7f363370efc9 [ 698.096759][T29121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 698.096778][T29121] RSP: 002b:00007f363216f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 698.096853][T29121] RAX: ffffffffffffffda RBX: 00007f3633965fa0 RCX: 00007f363370efc9 [ 698.096870][T29121] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 000000000000000b [ 698.096888][T29121] RBP: 00007f3633791f91 R08: 0000000000000000 R09: 0000000000000000 [ 698.096904][T29121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 698.096971][T29121] R13: 00007f3633966038 R14: 00007f3633965fa0 R15: 00007ffffa59c8b8 [ 698.096995][T29121] [ 698.097004][T29121] memory: usage 307200kB, limit 307200kB, failcnt 607 [ 698.436967][ T29] kauditd_printk_skb: 1987 callbacks suppressed [ 698.436986][ T29] audit: type=1326 audit(1760902296.315:71323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29117 comm="syz.7.8610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa94e185e67 code=0x7ffc0000 [ 698.442579][T29121] memory+swap: usage 323776kB, limit 9007199254740988kB, failcnt 0 [ 698.454940][ T29] audit: type=1326 audit(1760902296.325:71324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29124 comm="syz.3.8612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9cdf115e67 code=0x7ffc0000 [ 698.460542][T29121] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 698.460563][T29121] Memory cgroup stats for /syz5: [ 698.463280][T29121] cache 0 [ 698.466967][ T29] audit: type=1326 audit(1760902296.325:71325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29124 comm="syz.3.8612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9cdf0bb099 code=0x7ffc0000 [ 698.490463][T29121] rss 0 [ 698.490478][T29121] shmem 0 [ 698.498369][ T29] audit: type=1326 audit(1760902296.325:71326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29124 comm="syz.3.8612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f9cdf11efc9 code=0x7ffc0000 [ 698.498406][ T29] audit: type=1326 audit(1760902296.325:71327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29117 comm="syz.7.8610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa94e12b099 code=0x7ffc0000 [ 698.498439][ T29] audit: type=1326 audit(1760902296.325:71328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29117 comm="syz.7.8610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa94e185e67 code=0x7ffc0000 [ 698.498525][ T29] audit: type=1326 audit(1760902296.325:71329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29117 comm="syz.7.8610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa94e12b099 code=0x7ffc0000 [ 698.498552][ T29] audit: type=1326 audit(1760902296.325:71330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29117 comm="syz.7.8610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa94e18efc9 code=0x7ffc0000 [ 698.522083][T29121] mapped_file 0 [ 698.522095][T29121] dirty 0 [ 698.522104][T29121] writeback 0 [ 698.533327][ T29] audit: type=1326 audit(1760902296.335:71331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29124 comm="syz.3.8612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9cdf115e67 code=0x7ffc0000 [ 698.534388][T29121] workingset_refault_anon 17457 [ 698.534403][T29121] workingset_refault_file 96 [ 698.537358][ T29] audit: type=1326 audit(1760902296.335:71332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29124 comm="syz.3.8612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9cdf0bb099 code=0x7ffc0000 [ 698.560895][T29121] swap 16973824 [ 698.755373][T29121] swapcached 0 [ 698.758795][T29121] pgpgin 985140 [ 698.762336][T29121] pgpgout 985138 [ 698.765892][T29121] pgfault 794825 [ 698.769600][T29121] pgmajfault 2447 [ 698.773276][T29121] inactive_anon 0 [ 698.776923][T29121] active_anon 0 [ 698.780491][T29121] inactive_file 0 [ 698.784175][T29121] active_file 8192 [ 698.787952][T29121] unevictable 0 [ 698.791701][T29121] hierarchical_memory_limit 314572800 [ 698.797175][T29121] hierarchical_memsw_limit 9223372036854771712 [ 698.803525][T29121] total_cache 0 [ 698.807025][T29121] total_rss 0 [ 698.809466][T29142] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 698.810370][T29121] total_shmem 0 [ 698.823325][T29121] total_mapped_file 0 [ 698.827402][T29121] total_dirty 0 [ 698.830939][T29121] total_writeback 0 [ 698.834755][T29121] total_workingset_refault_anon 17457 [ 698.840281][T29121] total_workingset_refault_file 96 [ 698.845479][T29121] total_swap 16973824 [ 698.849505][T29121] total_swapcached 0 [ 698.853502][T29121] total_pgpgin 985140 [ 698.857572][T29121] total_pgpgout 985138 [ 698.861735][T29121] total_pgfault 794827 [ 698.865816][T29121] total_pgmajfault 2447 [ 698.870046][T29121] total_inactive_anon 0 [ 698.874214][T29121] total_active_anon 0 [ 698.878235][T29121] total_inactive_file 0 [ 698.882586][T29121] total_active_file 8192 [ 698.886841][T29121] total_unevictable 0 [ 698.890884][T29121] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.8611,pid=29120,uid=0 [ 698.905776][T29121] Memory cgroup out of memory: Killed process 29120 (syz.5.8611) total-vm:93956kB, anon-rss:1136kB, file-rss:22568kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 699.193438][T29172] siw: device registration error -23 [ 699.508458][T29190] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 699.937381][T29221] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 700.455648][T29236] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 700.725488][T29237] tipc: Enabled bearer , priority 0 [ 700.806688][T29228] tipc: Resetting bearer [ 700.880009][T29228] tipc: Disabling bearer [ 701.598325][T29268] tipc: Enabled bearer , priority 0 [ 701.610307][T29267] tipc: Resetting bearer [ 701.694560][T29267] tipc: Disabling bearer [ 701.996295][T29273] FAULT_INJECTION: forcing a failure. [ 701.996295][T29273] name failslab, interval 1, probability 0, space 0, times 0 [ 702.009043][T29273] CPU: 1 UID: 0 PID: 29273 Comm: syz.5.8660 Not tainted syzkaller #0 PREEMPT(voluntary) [ 702.009080][T29273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 702.009093][T29273] Call Trace: [ 702.009169][T29273] [ 702.009180][T29273] __dump_stack+0x1d/0x30 [ 702.009218][T29273] dump_stack_lvl+0xe8/0x140 [ 702.009290][T29273] dump_stack+0x15/0x1b [ 702.009315][T29273] should_fail_ex+0x265/0x280 [ 702.009357][T29273] should_failslab+0x8c/0xb0 [ 702.009385][T29273] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 702.009466][T29273] ? __alloc_skb+0x101/0x320 [ 702.009493][T29273] __alloc_skb+0x101/0x320 [ 702.009565][T29273] netlink_alloc_large_skb+0xbf/0xf0 [ 702.009599][T29273] netlink_sendmsg+0x3cf/0x6b0 [ 702.009641][T29273] ? __pfx_netlink_sendmsg+0x10/0x10 [ 702.009674][T29273] __sock_sendmsg+0x145/0x180 [ 702.009753][T29273] ____sys_sendmsg+0x31e/0x4e0 [ 702.009794][T29273] ___sys_sendmsg+0x17b/0x1d0 [ 702.009849][T29273] __x64_sys_sendmsg+0xd4/0x160 [ 702.009935][T29273] x64_sys_call+0x191e/0x3000 [ 702.009967][T29273] do_syscall_64+0xd2/0x200 [ 702.010001][T29273] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 702.010043][T29273] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 702.010076][T29273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.010101][T29273] RIP: 0033:0x7f363370efc9 [ 702.010117][T29273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 702.010135][T29273] RSP: 002b:00007f363216f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 702.010176][T29273] RAX: ffffffffffffffda RBX: 00007f3633965fa0 RCX: 00007f363370efc9 [ 702.010275][T29273] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000005 [ 702.010293][T29273] RBP: 00007f363216f090 R08: 0000000000000000 R09: 0000000000000000 [ 702.010305][T29273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 702.010318][T29273] R13: 00007f3633966038 R14: 00007f3633965fa0 R15: 00007ffffa59c8b8 [ 702.010337][T29273] [ 702.263516][T29278] __nla_validate_parse: 1 callbacks suppressed [ 702.263532][T29278] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8663'. [ 702.278758][T29278] netlink: 348 bytes leftover after parsing attributes in process `syz.7.8663'. [ 702.287809][T29278] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8663'. [ 702.296892][T29278] netlink: 348 bytes leftover after parsing attributes in process `syz.7.8663'. [ 702.384432][T29284] netlink: 'syz.3.8665': attribute type 4 has an invalid length. [ 702.413671][T29284] netlink: 'syz.3.8665': attribute type 4 has an invalid length. [ 702.510324][T29295] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 702.524710][T29292] tipc: Enabled bearer , priority 0 [ 702.527489][T29296] siw: device registration error -23 [ 702.536876][T29291] tipc: Resetting bearer [ 702.609476][T29291] tipc: Disabling bearer [ 703.279333][T29309] rdma_op ffff8881724bcd80 conn xmit_rdma 0000000000000000 [ 703.327709][T29323] siw: device registration error -23 [ 703.485618][ T29] kauditd_printk_skb: 7685 callbacks suppressed [ 703.485637][ T29] audit: type=1326 audit(1760902301.355:79018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29340 comm="syz.3.8681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdf11efc9 code=0x7ffc0000 [ 703.540439][ T29] audit: type=1326 audit(1760902301.395:79019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29340 comm="syz.3.8681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9cdf11efc9 code=0x7ffc0000 [ 703.564485][ T29] audit: type=1326 audit(1760902301.395:79020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29340 comm="syz.3.8681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdf11efc9 code=0x7ffc0000 [ 703.588224][ T29] audit: type=1326 audit(1760902301.395:79021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29340 comm="syz.3.8681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdf11efc9 code=0x7ffc0000 [ 703.612000][ T29] audit: type=1326 audit(1760902301.395:79022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29340 comm="syz.3.8681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9cdf11efc9 code=0x7ffc0000 [ 703.635786][ T29] audit: type=1326 audit(1760902301.395:79023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29340 comm="syz.3.8681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdf11efc9 code=0x7ffc0000 [ 703.659587][ T29] audit: type=1326 audit(1760902301.395:79024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29340 comm="syz.3.8681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdf11efc9 code=0x7ffc0000 [ 703.683450][ T29] audit: type=1326 audit(1760902301.395:79025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29340 comm="syz.3.8681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9cdf11efc9 code=0x7ffc0000 [ 703.707198][ T29] audit: type=1326 audit(1760902301.395:79026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29340 comm="syz.3.8681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdf11efc9 code=0x7ffc0000 [ 703.730982][ T29] audit: type=1326 audit(1760902301.395:79027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29340 comm="syz.3.8681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdf11efc9 code=0x7ffc0000 [ 703.789585][T29355] netlink: 348 bytes leftover after parsing attributes in process `syz.7.8686'. [ 703.798730][T29355] netlink: 348 bytes leftover after parsing attributes in process `syz.7.8686'. [ 703.807816][T29355] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8686'. [ 703.823194][T29346] tipc: Enabled bearer , priority 0 [ 703.831463][T29345] tipc: Resetting bearer [ 703.879468][T29345] tipc: Disabling bearer [ 703.945190][T29362] loop5: detected capacity change from 0 to 256 [ 704.122150][T29362] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 704.170603][T29362] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8689'. [ 704.302324][T29367] netlink: 'syz.5.8691': attribute type 4 has an invalid length. [ 704.337461][T29367] netlink: 'syz.5.8691': attribute type 4 has an invalid length. [ 704.413715][T29375] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 704.884450][T29390] netlink: 348 bytes leftover after parsing attributes in process `syz.4.8699'. [ 704.893636][T29390] netlink: 348 bytes leftover after parsing attributes in process `syz.4.8699'. [ 704.928556][T29388] tipc: Enabled bearer , priority 0 [ 704.936451][T29387] tipc: Resetting bearer [ 705.063291][T29387] tipc: Disabling bearer [ 705.572794][T29412] netlink: 'syz.3.8708': attribute type 3 has an invalid length. [ 705.944370][T29444] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 706.067539][T29448] siw: device registration error -23 [ 706.174622][T29454] netlink: 'syz.3.8719': attribute type 4 has an invalid length. [ 706.264698][T29458] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 706.298901][T29454] netlink: 'syz.3.8719': attribute type 4 has an invalid length. [ 706.557855][T29461] loop3: detected capacity change from 0 to 2048 [ 706.565863][T29449] rdma_op ffff8881469b1180 conn xmit_rdma 0000000000000000 [ 706.583136][T29461] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 706.618400][T29461] ext4 filesystem being mounted at /528/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 706.777906][T29461] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.8722: bg 0: block 345: padding at end of block bitmap is not set [ 706.792594][T29461] EXT4-fs (loop3): Remounting filesystem read-only [ 706.894396][T21544] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 706.962505][T29458] rdma_op ffff88814bc0c180 conn xmit_rdma 0000000000000000 [ 706.977645][T29477] syû: rxe_newlink: already configured on bond_slave_0 [ 707.051696][T29485] netlink: 'syz.3.8730': attribute type 3 has an invalid length. [ 707.284676][T29514] loop3: detected capacity change from 0 to 256 [ 707.293992][T29514] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 707.324584][T29510] loop6: detected capacity change from 0 to 2048 [ 707.340709][T29510] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 707.353459][T29510] ext4 filesystem being mounted at /237/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 707.357591][T29516] tipc: Enabled bearer , priority 0 [ 707.370794][T29519] __nla_validate_parse: 4 callbacks suppressed [ 707.370849][T29519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8739'. [ 707.393183][T29515] tipc: Disabling bearer [ 707.400300][T29510] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.8737: bg 0: block 345: padding at end of block bitmap is not set [ 707.416231][T29510] EXT4-fs (loop6): Remounting filesystem read-only [ 707.444876][T25654] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 707.450059][T29523] netlink: 'syz.7.8742': attribute type 4 has an invalid length. [ 707.470364][T29523] netlink: 'syz.7.8742': attribute type 4 has an invalid length. [ 707.546801][T29532] netlink: 19 bytes leftover after parsing attributes in process `syz.6.8746'. [ 708.149759][T29548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8752'. [ 708.162901][T29548] netlink: 660 bytes leftover after parsing attributes in process `syz.3.8752'. [ 708.185861][T29548] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 708.443463][T29558] siw: device registration error -23 [ 708.485032][T29562] netlink: 'syz.6.8758': attribute type 3 has an invalid length. [ 708.543915][T29566] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8759'. [ 708.597903][ T29] kauditd_printk_skb: 1604 callbacks suppressed [ 708.597919][ T29] audit: type=1326 audit(1760902306.465:80632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29568 comm="syz.6.8760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fa914efc9 code=0x7ffc0000 [ 708.633020][T29569] tipc: Enabled bearer , priority 0 [ 708.640873][ T29] audit: type=1326 audit(1760902306.495:80633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29568 comm="syz.6.8760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fa914efc9 code=0x7ffc0000 [ 708.664876][ T29] audit: type=1326 audit(1760902306.495:80634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29568 comm="syz.6.8760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9fa914efc9 code=0x7ffc0000 [ 708.688494][ T29] audit: type=1326 audit(1760902306.505:80635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29568 comm="syz.6.8760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fa914efc9 code=0x7ffc0000 [ 708.712239][ T29] audit: type=1326 audit(1760902306.505:80636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29568 comm="syz.6.8760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fa914efc9 code=0x7ffc0000 [ 708.735941][ T29] audit: type=1326 audit(1760902306.505:80637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29568 comm="syz.6.8760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9fa914efc9 code=0x7ffc0000 [ 708.759750][ T29] audit: type=1326 audit(1760902306.505:80638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29568 comm="syz.6.8760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fa914efc9 code=0x7ffc0000 [ 708.783500][ T29] audit: type=1326 audit(1760902306.505:80639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29568 comm="syz.6.8760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9fa914efc9 code=0x7ffc0000 [ 708.807396][ T29] audit: type=1326 audit(1760902306.505:80640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29568 comm="syz.6.8760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fa914efc9 code=0x7ffc0000 [ 708.831114][ T29] audit: type=1326 audit(1760902306.505:80641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29568 comm="syz.6.8760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9fa914efc9 code=0x7ffc0000 [ 708.857149][T29568] tipc: Disabling bearer [ 708.867241][T29574] loop7: detected capacity change from 0 to 256 [ 708.874467][T29574] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 708.937624][T29578] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8762'. [ 708.949141][T29579] siw: device registration error -23 [ 708.994197][T29588] netlink: 'syz.4.8765': attribute type 4 has an invalid length. [ 709.006978][T29588] netlink: 'syz.4.8765': attribute type 4 has an invalid length. [ 709.122168][T29610] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 709.140575][T29606] loop4: detected capacity change from 0 to 512 [ 709.153670][T29606] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 709.285035][T29606] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.8771: bg 0: block 104: invalid block bitmap [ 709.303166][T29606] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 709.313409][T29606] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.8771: invalid indirect mapped block 1 (level 1) [ 709.327094][T29606] EXT4-fs (loop4): 1 truncate cleaned up [ 709.333385][T29606] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 709.350517][T29621] tipc: Enabling of bearer rejected, failed to enable media [ 709.399010][T21080] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 709.542077][T29639] netlink: 'syz.4.8778': attribute type 4 has an invalid length. [ 709.554150][T29639] netlink: 'syz.4.8778': attribute type 4 has an invalid length. [ 709.584185][T29641] netlink: 19 bytes leftover after parsing attributes in process `syz.4.8779'. [ 709.681115][T29610] rdma_op ffff88814d5f2d80 conn xmit_rdma 0000000000000000 [ 709.908408][T29653] loop7: detected capacity change from 0 to 2048 [ 709.935876][T29653] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 709.988891][T29653] ext4 filesystem being mounted at /162/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 710.055054][T29664] tipc: Enabled bearer , priority 0 [ 710.063928][T29663] tipc: Disabling bearer [ 710.080284][T29665] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.8783: bg 0: block 345: padding at end of block bitmap is not set [ 710.095046][T29665] EXT4-fs (loop7): Remounting filesystem read-only [ 710.289564][T26873] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 710.392047][T29670] loop3: detected capacity change from 0 to 2048 [ 710.410695][T29670] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 710.423422][T29670] ext4 filesystem being mounted at /543/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 710.563359][T29679] loop7: detected capacity change from 0 to 256 [ 710.580506][T29679] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 710.663208][T29680] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8792'. [ 710.739093][T29673] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.8789: bg 0: block 345: padding at end of block bitmap is not set [ 710.774032][T29683] loop5: detected capacity change from 0 to 2048 [ 710.781867][T29673] EXT4-fs (loop3): Remounting filesystem read-only [ 710.825404][T29683] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 710.860967][T26004] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 710.899279][T21544] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 711.026890][T29695] tipc: Enabled bearer , priority 0 [ 711.035499][T29694] tipc: Disabling bearer [ 711.266628][T29703] netlink: 19 bytes leftover after parsing attributes in process `syz.6.8801'. [ 711.966381][T29715] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8806'. [ 712.112666][T29723] tipc: Enabled bearer , priority 0 [ 712.123451][T29722] tipc: Disabling bearer [ 712.263855][T29743] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 712.737981][T29743] rdma_op ffff888176e70980 conn xmit_rdma 0000000000000000 [ 713.165935][T29778] netlink: 'syz.5.8827': attribute type 4 has an invalid length. [ 713.173839][T29778] netlink: 152 bytes leftover after parsing attributes in process `syz.5.8827'. [ 713.190238][T29778] .`: renamed from bond0 (while UP) [ 713.208494][T29781] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 713.224451][T29783] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 713.296403][T29785] netlink: 19 bytes leftover after parsing attributes in process `syz.7.8830'. [ 713.399553][T29791] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8833'. [ 713.453385][T29796] syz_tun: entered allmulticast mode [ 713.493637][T29791] loop7: detected capacity change from 0 to 1024 [ 713.521798][T29791] EXT4-fs: Ignoring removed oldalloc option [ 713.527814][T29791] EXT4-fs: Ignoring removed bh option [ 713.554504][T29798] siw: device registration error -23 [ 713.595502][T29791] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 713.610162][ T29] kauditd_printk_skb: 1381 callbacks suppressed [ 713.610180][ T29] audit: type=1326 audit(1760902311.485:82023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29763 comm="syz.3.8822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9cdf115e67 code=0x7ffc0000 [ 713.640250][ T29] audit: type=1326 audit(1760902311.485:82024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29763 comm="syz.3.8822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9cdf0bb099 code=0x7ffc0000 [ 713.663904][ T29] audit: type=1326 audit(1760902311.485:82025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29763 comm="syz.3.8822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f9cdf11efc9 code=0x7ffc0000 [ 713.714817][ T29] audit: type=1326 audit(1760902311.565:82026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29763 comm="syz.3.8822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9cdf115e67 code=0x7ffc0000 [ 713.738504][ T29] audit: type=1326 audit(1760902311.565:82027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29763 comm="syz.3.8822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9cdf0bb099 code=0x7ffc0000 [ 713.762060][ T29] audit: type=1326 audit(1760902311.565:82028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29763 comm="syz.3.8822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f9cdf11efc9 code=0x7ffc0000 [ 713.785681][ T29] audit: type=1326 audit(1760902311.575:82029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29763 comm="syz.3.8822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9cdf115e67 code=0x7ffc0000 [ 713.809406][ T29] audit: type=1326 audit(1760902311.575:82030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29763 comm="syz.3.8822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9cdf0bb099 code=0x7ffc0000 [ 713.833152][ T29] audit: type=1326 audit(1760902311.575:82031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29763 comm="syz.3.8822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f9cdf11efc9 code=0x7ffc0000 [ 713.856890][ T29] audit: type=1326 audit(1760902311.575:82032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29763 comm="syz.3.8822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9cdf115e67 code=0x7ffc0000 [ 713.899217][T29790] syz_tun: left allmulticast mode [ 713.927791][T29807] FAULT_INJECTION: forcing a failure. [ 713.927791][T29807] name failslab, interval 1, probability 0, space 0, times 0 [ 713.940839][T29807] CPU: 0 UID: 0 PID: 29807 Comm: syz.3.8836 Not tainted syzkaller #0 PREEMPT(voluntary) [ 713.940877][T29807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 713.940966][T29807] Call Trace: [ 713.940973][T29807] [ 713.940982][T29807] __dump_stack+0x1d/0x30 [ 713.941010][T29807] dump_stack_lvl+0xe8/0x140 [ 713.941035][T29807] dump_stack+0x15/0x1b [ 713.941086][T29807] should_fail_ex+0x265/0x280 [ 713.941133][T29807] should_failslab+0x8c/0xb0 [ 713.941171][T29807] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 713.941262][T29807] ? __alloc_skb+0x101/0x320 [ 713.941298][T29807] __alloc_skb+0x101/0x320 [ 713.941334][T29807] netlink_alloc_large_skb+0xbf/0xf0 [ 713.941445][T29807] netlink_sendmsg+0x3cf/0x6b0 [ 713.941480][T29807] ? __pfx_netlink_sendmsg+0x10/0x10 [ 713.941521][T29807] __sock_sendmsg+0x145/0x180 [ 713.941543][T29807] ____sys_sendmsg+0x31e/0x4e0 [ 713.941581][T29807] ___sys_sendmsg+0x17b/0x1d0 [ 713.941662][T29807] __x64_sys_sendmsg+0xd4/0x160 [ 713.941759][T29807] x64_sys_call+0x191e/0x3000 [ 713.941788][T29807] do_syscall_64+0xd2/0x200 [ 713.941873][T29807] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 713.941909][T29807] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 713.941939][T29807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.941962][T29807] RIP: 0033:0x7f9cdf11efc9 [ 713.941978][T29807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 713.942041][T29807] RSP: 002b:00007f9cddb7f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 713.942066][T29807] RAX: ffffffffffffffda RBX: 00007f9cdf375fa0 RCX: 00007f9cdf11efc9 [ 713.942082][T29807] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 713.942097][T29807] RBP: 00007f9cddb7f090 R08: 0000000000000000 R09: 0000000000000000 [ 713.942112][T29807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 713.942126][T29807] R13: 00007f9cdf376038 R14: 00007f9cdf375fa0 R15: 00007fffa65ac768 [ 713.942149][T29807] [ 714.151145][T29792] rdma_op ffff888155784580 conn xmit_rdma 0000000000000000 [ 714.185096][T26873] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 714.197167][T29783] rdma_op ffff888155784580 conn xmit_rdma 0000000000000000 [ 714.237803][T29813] netlink: 224 bytes leftover after parsing attributes in process `syz.6.8840'. [ 714.252913][T29813] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8840'. [ 714.263108][T29813] netlink: 'syz.6.8840': attribute type 27 has an invalid length. [ 714.327070][T29820] netlink: 52 bytes leftover after parsing attributes in process `syz.6.8840'. [ 714.365437][T29813] vxcan1: left allmulticast mode [ 714.405358][T29813] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 714.417885][T29813] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 714.468436][T14047] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.482330][T14047] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.493459][T14047] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.503779][T14047] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.093226][T29832] tipc: Enabling of bearer rejected, failed to enable media [ 715.126011][T29836] loop3: detected capacity change from 0 to 2048 [ 715.140804][T29836] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 715.297544][T21544] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 715.552975][T29875] siw: device registration error -23 [ 715.955782][T29882] loop4: detected capacity change from 0 to 256 [ 715.964132][T29882] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 716.180886][T29897] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8859'. [ 716.244723][T29897] syz_tun: entered allmulticast mode [ 716.275345][T29896] syz_tun: left allmulticast mode [ 716.405922][T29908] loop5: detected capacity change from 0 to 2048 [ 716.424684][T29908] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 716.462454][T29908] ext4 filesystem being mounted at /241/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 716.601157][T29918] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.8864: bg 0: block 345: padding at end of block bitmap is not set [ 716.641677][T29924] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 716.653865][T29918] EXT4-fs (loop5): Remounting filesystem read-only [ 716.815279][T26004] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 716.875897][T29930] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 717.059886][T29937] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8872'. [ 717.086031][T29937] netlink: 660 bytes leftover after parsing attributes in process `syz.4.8872'. [ 717.113599][T29937] syû: rxe_newlink: already configured on bond_slave_0 [ 717.124516][T29924] rdma_op ffff888168b73580 conn xmit_rdma 0000000000000000 [ 717.334302][T29955] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8875'. [ 717.447068][T29930] rdma_op ffff88814255c980 conn xmit_rdma 0000000000000000 [ 717.501320][T29963] loop5: detected capacity change from 0 to 256 [ 717.557870][T29967] netlink: 'syz.3.8880': attribute type 4 has an invalid length. [ 717.574119][T29967] netlink: 'syz.3.8880': attribute type 4 has an invalid length. [ 717.674736][T29973] netlink: 'syz.5.8883': attribute type 4 has an invalid length. [ 717.686339][T29973] netlink: 'syz.5.8883': attribute type 4 has an invalid length. [ 717.788340][T29987] siw: device registration error -23 [ 717.861954][T29993] loop5: detected capacity change from 0 to 128 [ 717.965231][T29998] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 717.980164][T29997] loop4: detected capacity change from 0 to 256 [ 718.017634][T29997] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 718.041659][T14072] kworker/u8:40: attempt to access beyond end of device [ 718.041659][T14072] loop5: rw=1, sector=145, nr_sectors = 8 limit=128 [ 718.070405][T14072] kworker/u8:40: attempt to access beyond end of device [ 718.070405][T14072] loop5: rw=1, sector=161, nr_sectors = 8 limit=128 [ 718.085833][T14072] kworker/u8:40: attempt to access beyond end of device [ 718.085833][T14072] loop5: rw=1, sector=177, nr_sectors = 8 limit=128 [ 718.099844][T14072] kworker/u8:40: attempt to access beyond end of device [ 718.099844][T14072] loop5: rw=1, sector=193, nr_sectors = 8 limit=128 [ 718.113982][T14072] kworker/u8:40: attempt to access beyond end of device [ 718.113982][T14072] loop5: rw=1, sector=209, nr_sectors = 8 limit=128 [ 718.128052][T14072] kworker/u8:40: attempt to access beyond end of device [ 718.128052][T14072] loop5: rw=1, sector=225, nr_sectors = 8 limit=128 [ 718.142139][T14072] kworker/u8:40: attempt to access beyond end of device [ 718.142139][T14072] loop5: rw=1, sector=241, nr_sectors = 8 limit=128 [ 718.156451][T14072] kworker/u8:40: attempt to access beyond end of device [ 718.156451][T14072] loop5: rw=1, sector=257, nr_sectors = 8 limit=128 [ 718.170527][T14072] kworker/u8:40: attempt to access beyond end of device [ 718.170527][T14072] loop5: rw=1, sector=273, nr_sectors = 8 limit=128 [ 718.195917][T14072] kworker/u8:40: attempt to access beyond end of device [ 718.195917][T14072] loop5: rw=1, sector=289, nr_sectors = 8 limit=128 [ 718.338135][T30017] rdma_op ffff8881758cad80 conn xmit_rdma 0000000000000000 [ 718.406784][T30020] siw: device registration error -23 [ 718.449398][T30028] __nla_validate_parse: 2 callbacks suppressed [ 718.449419][T30028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8895'. [ 718.626835][ T29] kauditd_printk_skb: 2571 callbacks suppressed [ 718.626847][ T29] audit: type=1326 audit(1760902316.495:84604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30019 comm="syz.5.8894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3633705e67 code=0x7ffc0000 [ 718.657335][ T29] audit: type=1326 audit(1760902316.495:84605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30019 comm="syz.5.8894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f36336ab099 code=0x7ffc0000 [ 718.680994][ T29] audit: type=1326 audit(1760902316.495:84606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30019 comm="syz.5.8894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f363370efc9 code=0x7ffc0000 [ 718.704614][ T29] audit: type=1326 audit(1760902316.525:84607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30019 comm="syz.5.8894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3633705e67 code=0x7ffc0000 [ 718.728355][ T29] audit: type=1326 audit(1760902316.525:84608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30019 comm="syz.5.8894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f36336ab099 code=0x7ffc0000 [ 718.752026][ T29] audit: type=1326 audit(1760902316.525:84609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30019 comm="syz.5.8894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f363370efc9 code=0x7ffc0000 [ 718.799226][ T29] audit: type=1326 audit(1760902316.555:84610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30019 comm="syz.5.8894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3633705e67 code=0x7ffc0000 [ 718.822842][ T29] audit: type=1326 audit(1760902316.555:84611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30019 comm="syz.5.8894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f36336ab099 code=0x7ffc0000 [ 718.846357][ T29] audit: type=1326 audit(1760902316.555:84612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30019 comm="syz.5.8894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f363370efc9 code=0x7ffc0000 [ 718.869987][ T29] audit: type=1326 audit(1760902316.585:84613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30019 comm="syz.5.8894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3633705e67 code=0x7ffc0000 [ 718.924411][T30049] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 718.944854][T30052] loop3: detected capacity change from 0 to 128 [ 718.959243][T30044] tipc: Enabling of bearer rejected, failed to enable media [ 719.225000][T30066] bond0: entered promiscuous mode [ 719.230293][T30066] bond0: entered allmulticast mode [ 719.242965][T30067] rdma_op ffff88814d2ba180 conn xmit_rdma 0000000000000000 [ 719.261504][T30066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 719.269974][T30070] loop3: detected capacity change from 0 to 256 [ 719.277683][T30070] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 719.289676][T30066] bond0 (unregistering): Released all slaves [ 719.367453][T30074] tipc: Enabled bearer , priority 0 [ 719.386239][T30072] tipc: Resetting bearer [ 719.403398][T30080] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 719.418684][T30072] tipc: Disabling bearer [ 719.458369][T30084] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8920'. [ 719.511086][T30086] syz_tun: entered allmulticast mode [ 719.556774][T30084] loop5: detected capacity change from 0 to 1024 [ 719.568191][T30084] EXT4-fs: Ignoring removed oldalloc option [ 719.574306][T30084] EXT4-fs: Ignoring removed bh option [ 719.626327][T30084] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 719.697480][T30098] tipc: Enabled bearer , priority 0 [ 719.730799][T30083] syz_tun: left allmulticast mode [ 719.749080][T26004] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 719.772782][T30097] tipc: Resetting bearer [ 719.798208][T30097] tipc: Disabling bearer [ 719.807324][T30100] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 719.879074][T30092] rdma_op ffff888168b73580 conn xmit_rdma 0000000000000000 [ 719.990888][T30109] netlink: 19 bytes leftover after parsing attributes in process `syz.3.8929'. [ 720.040450][T30111] siw: device registration error -23 [ 720.217049][T30121] netlink: 'syz.3.8932': attribute type 2 has an invalid length. [ 720.231463][T30117] rdma_op ffff888168178980 conn xmit_rdma 0000000000000000 [ 720.284407][T30123] loop3: detected capacity change from 0 to 1024 [ 720.308328][T30123] EXT4-fs (loop3): unsupported inode size: 143 [ 720.314697][T30123] EXT4-fs (loop3): blocksize: 1024 [ 720.362209][T30123] FAULT_INJECTION: forcing a failure. [ 720.362209][T30123] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 720.375630][T30123] CPU: 1 UID: 0 PID: 30123 Comm: syz.3.8934 Not tainted syzkaller #0 PREEMPT(voluntary) [ 720.375660][T30123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 720.375673][T30123] Call Trace: [ 720.375681][T30123] [ 720.375752][T30123] __dump_stack+0x1d/0x30 [ 720.375778][T30123] dump_stack_lvl+0xe8/0x140 [ 720.375823][T30123] dump_stack+0x15/0x1b [ 720.375840][T30123] should_fail_ex+0x265/0x280 [ 720.375909][T30123] should_fail_alloc_page+0xf2/0x100 [ 720.375949][T30123] __alloc_frozen_pages_noprof+0xff/0x360 [ 720.376043][T30123] alloc_pages_mpol+0xb3/0x260 [ 720.376070][T30123] folio_alloc_mpol_noprof+0x39/0x80 [ 720.376093][T30123] shmem_get_folio_gfp+0x3cf/0xd60 [ 720.376212][T30123] shmem_fault+0xf6/0x250 [ 720.376293][T30123] __do_fault+0xbc/0x200 [ 720.376319][T30123] handle_mm_fault+0xd69/0x2be0 [ 720.376351][T30123] ? check_vma_flags+0x315/0x340 [ 720.376383][T30123] __get_user_pages+0x102a/0x1ed0 [ 720.376417][T30123] faultin_page_range+0x107/0x4e0 [ 720.376493][T30123] madvise_do_behavior+0x197/0x970 [ 720.376599][T30123] ? 0xffffffff81000000 [ 720.376618][T30123] ? __rcu_read_unlock+0x4f/0x70 [ 720.376651][T30123] do_madvise+0x10e/0x190 [ 720.376696][T30123] __x64_sys_madvise+0x64/0x80 [ 720.376760][T30123] x64_sys_call+0x1f1a/0x3000 [ 720.376784][T30123] do_syscall_64+0xd2/0x200 [ 720.376864][T30123] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 720.376894][T30123] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 720.376947][T30123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 720.376970][T30123] RIP: 0033:0x7f9cdf11efc9 [ 720.376986][T30123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 720.377022][T30123] RSP: 002b:00007f9cddb7f038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 720.377042][T30123] RAX: ffffffffffffffda RBX: 00007f9cdf375fa0 RCX: 00007f9cdf11efc9 [ 720.377056][T30123] RDX: 0000000000000017 RSI: 0000000000800000 RDI: 00002000000ec000 [ 720.377081][T30123] RBP: 00007f9cddb7f090 R08: 0000000000000000 R09: 0000000000000000 [ 720.377095][T30123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 720.377107][T30123] R13: 00007f9cdf376038 R14: 00007f9cdf375fa0 R15: 00007fffa65ac768 [ 720.377129][T30123] [ 720.610518][T30126] loop5: detected capacity change from 0 to 128 [ 720.673369][T30134] loop4: detected capacity change from 0 to 512 [ 720.689686][T30134] EXT4-fs: Ignoring removed nobh option [ 720.697324][T30134] EXT4-fs (loop4): failed to initialize system zone (-117) [ 720.705977][T30134] EXT4-fs (loop4): mount failed [ 720.720951][T30134] loop4: detected capacity change from 0 to 512 [ 720.733079][T30134] EXT4-fs (loop4): #blocks per group too big: 65535 [ 720.793368][T30144] loop3: detected capacity change from 0 to 128 [ 720.819819][T30144] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 720.841513][T30144] ext4 filesystem being mounted at /590/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 720.842011][T30143] FAULT_INJECTION: forcing a failure. [ 720.842011][T30143] name failslab, interval 1, probability 0, space 0, times 0 [ 720.886163][T30143] CPU: 0 UID: 0 PID: 30143 Comm: syz.7.8941 Not tainted syzkaller #0 PREEMPT(voluntary) [ 720.886193][T30143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 720.886208][T30143] Call Trace: [ 720.886245][T30143] [ 720.886256][T30143] __dump_stack+0x1d/0x30 [ 720.886283][T30143] dump_stack_lvl+0xe8/0x140 [ 720.886306][T30143] dump_stack+0x15/0x1b [ 720.886324][T30143] should_fail_ex+0x265/0x280 [ 720.886427][T30143] ? bdi_split_work_to_wbs+0x2db/0x640 [ 720.886466][T30143] should_failslab+0x8c/0xb0 [ 720.886507][T30143] __kmalloc_cache_noprof+0x4c/0x4a0 [ 720.886547][T30143] bdi_split_work_to_wbs+0x2db/0x640 [ 720.886625][T30143] sync_inodes_sb+0xff/0x440 [ 720.886662][T30143] ? down_read+0x77/0xe0 [ 720.886696][T30143] sync_inodes_one_sb+0x3d/0x50 [ 720.886722][T30143] __iterate_supers+0x110/0x220 [ 720.886812][T30143] ? __pfx_sync_inodes_one_sb+0x10/0x10 [ 720.886842][T30143] ? __pfx_sync_inodes_one_sb+0x10/0x10 [ 720.886907][T30143] iterate_supers+0x1f/0x30 [ 720.886931][T30143] ksys_sync+0x5c/0xe0 [ 720.886960][T30143] __ia32_sys_sync+0xe/0x20 [ 720.887020][T30143] x64_sys_call+0x2d1f/0x3000 [ 720.887048][T30143] do_syscall_64+0xd2/0x200 [ 720.887082][T30143] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 720.887119][T30143] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 720.887180][T30143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 720.887202][T30143] RIP: 0033:0x7fa94e18efc9 [ 720.887218][T30143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 720.887284][T30143] RSP: 002b:00007fa94cbef038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 720.887305][T30143] RAX: ffffffffffffffda RBX: 00007fa94e3e5fa0 RCX: 00007fa94e18efc9 [ 720.887318][T30143] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 720.887330][T30143] RBP: 00007fa94cbef090 R08: 0000000000000000 R09: 0000000000000000 [ 720.887342][T30143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 720.887357][T30143] R13: 00007fa94e3e6038 R14: 00007fa94e3e5fa0 R15: 00007ffe3f6e7698 [ 720.887382][T30143] [ 721.114560][T30144] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8942'. [ 721.165779][T30155] SELinux: Context system_u:object_r:unconfined_exec_t:s0 is not valid (left unmapped). [ 721.192460][T30154] loop6: detected capacity change from 0 to 2048 [ 721.210161][T30154] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 721.222895][T30154] ext4 filesystem being mounted at /276/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 721.262111][T21544] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 721.306566][T14085] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm kworker/u8:51: bg 0: block 345: padding at end of block bitmap is not set [ 721.322597][T14085] EXT4-fs (loop6): Remounting filesystem read-only [ 721.389428][T25654] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 721.407564][T30164] FAULT_INJECTION: forcing a failure. [ 721.407564][T30164] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 721.420747][T30164] CPU: 0 UID: 0 PID: 30164 Comm: syz.6.8947 Not tainted syzkaller #0 PREEMPT(voluntary) [ 721.420781][T30164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 721.420795][T30164] Call Trace: [ 721.420801][T30164] [ 721.420809][T30164] __dump_stack+0x1d/0x30 [ 721.420888][T30164] dump_stack_lvl+0xe8/0x140 [ 721.420912][T30164] dump_stack+0x15/0x1b [ 721.420930][T30164] should_fail_ex+0x265/0x280 [ 721.421060][T30164] should_fail+0xb/0x20 [ 721.421147][T30164] should_fail_usercopy+0x1a/0x20 [ 721.421171][T30164] _copy_from_iter+0xd2/0xe80 [ 721.421222][T30164] ? __build_skb_around+0x1ab/0x200 [ 721.421252][T30164] ? __alloc_skb+0x223/0x320 [ 721.421347][T30164] netlink_sendmsg+0x471/0x6b0 [ 721.421383][T30164] ? __pfx_netlink_sendmsg+0x10/0x10 [ 721.421417][T30164] __sock_sendmsg+0x145/0x180 [ 721.421440][T30164] ____sys_sendmsg+0x31e/0x4e0 [ 721.421544][T30164] ___sys_sendmsg+0x17b/0x1d0 [ 721.421592][T30164] __x64_sys_sendmsg+0xd4/0x160 [ 721.421630][T30164] x64_sys_call+0x191e/0x3000 [ 721.421755][T30164] do_syscall_64+0xd2/0x200 [ 721.421783][T30164] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 721.421813][T30164] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 721.421838][T30164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.421978][T30164] RIP: 0033:0x7f9fa914efc9 [ 721.421995][T30164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 721.422015][T30164] RSP: 002b:00007f9fa7baf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 721.422035][T30164] RAX: ffffffffffffffda RBX: 00007f9fa93a5fa0 RCX: 00007f9fa914efc9 [ 721.422049][T30164] RDX: 0000000000044080 RSI: 0000200000000040 RDI: 0000000000000003 [ 721.422122][T30164] RBP: 00007f9fa7baf090 R08: 0000000000000000 R09: 0000000000000000 [ 721.422135][T30164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 721.422149][T30164] R13: 00007f9fa93a6038 R14: 00007f9fa93a5fa0 R15: 00007ffeedc44608 [ 721.422187][T30164] [ 722.165878][T30187] FAULT_INJECTION: forcing a failure. [ 722.165878][T30187] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 722.179200][T30187] CPU: 0 UID: 0 PID: 30187 Comm: syz.4.8956 Not tainted syzkaller #0 PREEMPT(voluntary) [ 722.179236][T30187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 722.179306][T30187] Call Trace: [ 722.179315][T30187] [ 722.179326][T30187] __dump_stack+0x1d/0x30 [ 722.179352][T30187] dump_stack_lvl+0xe8/0x140 [ 722.179372][T30187] dump_stack+0x15/0x1b [ 722.179388][T30187] should_fail_ex+0x265/0x280 [ 722.179495][T30187] should_fail+0xb/0x20 [ 722.179593][T30187] should_fail_usercopy+0x1a/0x20 [ 722.179622][T30187] strncpy_from_user+0x25/0x230 [ 722.179653][T30187] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 722.179742][T30187] __se_sys_memfd_create+0x1ff/0x590 [ 722.179775][T30187] __x64_sys_memfd_create+0x31/0x40 [ 722.179804][T30187] x64_sys_call+0x2ac2/0x3000 [ 722.179827][T30187] do_syscall_64+0xd2/0x200 [ 722.179934][T30187] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 722.179970][T30187] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 722.180002][T30187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.180024][T30187] RIP: 0033:0x7f72b1a6efc9 [ 722.180039][T30187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 722.180104][T30187] RSP: 002b:00007f72b04cee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 722.180129][T30187] RAX: ffffffffffffffda RBX: 0000000000000699 RCX: 00007f72b1a6efc9 [ 722.180144][T30187] RDX: 00007f72b04ceef0 RSI: 0000000000000000 RDI: 00007f72b1af2960 [ 722.180158][T30187] RBP: 0000200000000140 R08: 00007f72b04cebb7 R09: 00007f72b04cee40 [ 722.180174][T30187] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000800 [ 722.180211][T30187] R13: 00007f72b04ceef0 R14: 00007f72b04ceeb0 R15: 0000200000001140 [ 722.180287][T30187] [ 722.436166][T30191] SELinux: failed to load policy [ 722.513924][T30193] vlan2: entered allmulticast mode [ 722.519124][T30193] bridge_slave_0: entered allmulticast mode [ 722.540337][T30195] loop3: detected capacity change from 0 to 512 [ 722.568083][T30197] loop4: detected capacity change from 0 to 164 [ 722.577874][T30197] iso9660: Unknown parameter '00000000000000000000000ÿ0xffffffffffffffff' [ 722.593214][T30195] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 722.607316][T30195] ext4 filesystem being mounted at /593/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 722.948764][T30215] tipc: Enabled bearer , priority 0 [ 723.060112][T30205] tipc: Resetting bearer [ 723.078435][T30205] tipc: Disabling bearer [ 723.096373][T30220] tipc: Enabling of bearer rejected, failed to enable media [ 723.315999][T30227] loop4: detected capacity change from 0 to 1024 [ 723.349377][T30227] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 723.392012][T30227] EXT4-fs error (device loop4): ext4_quota_enable:7136: comm syz.4.8971: inode #3584: comm syz.4.8971: iget: illegal inode # [ 723.415264][T30227] EXT4-fs error (device loop4): ext4_quota_enable:7139: comm syz.4.8971: Bad quota inode: 3584, type: 2 [ 723.438778][T30227] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=2, err=-117, ino=3584). Please run e2fsck to fix. [ 723.481268][T30227] EXT4-fs (loop4): mount failed [ 723.552337][T30239] tipc: Enabled bearer , priority 0 [ 723.561114][T30227] netlink: 'syz.4.8971': attribute type 1 has an invalid length. [ 723.569715][T30227] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8971'. [ 723.621120][T14078] tipc: Resetting bearer [ 723.666873][T30235] tipc: Resetting bearer [ 723.689257][T30235] tipc: Disabling bearer [ 723.712164][T21544] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 723.720601][ T29] kauditd_printk_skb: 1291 callbacks suppressed [ 723.720633][ T29] audit: type=1326 audit(1760902321.585:85905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30246 comm="syz.4.8978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b1a6efc9 code=0x7ffc0000 [ 723.751069][ T29] audit: type=1326 audit(1760902321.585:85906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30246 comm="syz.4.8978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f72b1a6efc9 code=0x7ffc0000 [ 723.774835][ T29] audit: type=1326 audit(1760902321.585:85907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30246 comm="syz.4.8978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b1a6efc9 code=0x7ffc0000 [ 723.798487][ T29] audit: type=1326 audit(1760902321.585:85908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30246 comm="syz.4.8978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f72b1a6efc9 code=0x7ffc0000 [ 723.822156][ T29] audit: type=1326 audit(1760902321.585:85909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30246 comm="syz.4.8978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b1a6efc9 code=0x7ffc0000 [ 723.845897][ T29] audit: type=1326 audit(1760902321.585:85910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30246 comm="syz.4.8978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f72b1a6efc9 code=0x7ffc0000 [ 723.869512][ T29] audit: type=1326 audit(1760902321.585:85911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30246 comm="syz.4.8978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b1a6efc9 code=0x7ffc0000 [ 723.893218][ T29] audit: type=1326 audit(1760902321.585:85912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30246 comm="syz.4.8978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f72b1a6efc9 code=0x7ffc0000 [ 723.916998][ T29] audit: type=1326 audit(1760902321.585:85913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30246 comm="syz.4.8978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b1a6efc9 code=0x7ffc0000 [ 723.940711][ T29] audit: type=1326 audit(1760902321.585:85914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30246 comm="syz.4.8978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f72b1a6efc9 code=0x7ffc0000 [ 724.028150][T30250] tipc: Enabled bearer , priority 0 [ 724.035684][T30249] tipc: Resetting bearer [ 724.047665][T30249] tipc: Disabling bearer [ 724.091786][T30256] loop7: detected capacity change from 0 to 1024 [ 724.098488][T30256] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 724.129954][T30260] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 724.264465][T30263] loop6: detected capacity change from 0 to 256 [ 724.272175][T30263] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 724.340427][T30266] netlink: 68 bytes leftover after parsing attributes in process `syz.6.8985'. [ 724.431160][T30260] rdma_op ffff88814312c980 conn xmit_rdma 0000000000000000 [ 724.460203][T30270] loop5: detected capacity change from 0 to 256 [ 724.468055][T30270] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 724.601451][T30286] loop7: detected capacity change from 0 to 512 [ 724.608558][T30286] EXT4-fs: Ignoring removed i_version option [ 724.614830][T30286] EXT4-fs: Ignoring removed bh option [ 724.631905][T30286] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 724.669097][T30286] ext4 filesystem being mounted at /196/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 724.781396][T30297] tipc: Enabled bearer , priority 0 [ 724.793290][T30296] tipc: Disabling bearer [ 724.892088][T30304] 9pnet_fd: Insufficient options for proto=fd [ 724.954646][T30306] lo speed is unknown, defaulting to 1000 [ 724.960571][T30306] lo speed is unknown, defaulting to 1000 [ 724.966606][T30306] lo speed is unknown, defaulting to 1000 [ 724.973902][T30306] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 724.985491][T30306] lo speed is unknown, defaulting to 1000 [ 724.991858][T30306] lo speed is unknown, defaulting to 1000 [ 724.998025][T30306] lo speed is unknown, defaulting to 1000 [ 725.004197][T30306] lo speed is unknown, defaulting to 1000 [ 725.010538][T30306] lo speed is unknown, defaulting to 1000 [ 725.016732][T30306] lo speed is unknown, defaulting to 1000 [ 725.022887][T30306] lo speed is unknown, defaulting to 1000 [ 725.029133][T30306] lo speed is unknown, defaulting to 1000 [ 725.035279][T30306] lo speed is unknown, defaulting to 1000 [ 725.041395][T30306] lo speed is unknown, defaulting to 1000 [ 725.047421][T30306] lo speed is unknown, defaulting to 1000 [ 725.053690][T30306] lo speed is unknown, defaulting to 1000 [ 725.059846][T30306] lo speed is unknown, defaulting to 1000 [ 725.066089][T30306] lo speed is unknown, defaulting to 1000 [ 725.072219][T30306] lo speed is unknown, defaulting to 1000 [ 725.078356][T30306] lo speed is unknown, defaulting to 1000 [ 725.089255][T30306] lo speed is unknown, defaulting to 1000 [ 725.099165][T30306] lo speed is unknown, defaulting to 1000 [ 725.105296][T30306] lo speed is unknown, defaulting to 1000 [ 725.112776][T30306] lo speed is unknown, defaulting to 1000 [ 725.118976][T30306] lo speed is unknown, defaulting to 1000 [ 725.125257][T30306] lo speed is unknown, defaulting to 1000 [ 725.133101][T30306] lo speed is unknown, defaulting to 1000 [ 725.143190][T30310] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 725.153247][T30306] lo speed is unknown, defaulting to 1000 [ 725.159479][T30306] lo speed is unknown, defaulting to 1000 [ 725.163585][T30309] tipc: Enabled bearer , priority 0 [ 725.177817][T30307] tipc: Disabling bearer [ 725.188720][T30306] lo speed is unknown, defaulting to 1000 [ 725.195123][T30306] lo speed is unknown, defaulting to 1000 [ 725.201853][T30306] lo speed is unknown, defaulting to 1000 [ 725.208303][T30306] lo speed is unknown, defaulting to 1000 [ 725.214934][T30306] lo speed is unknown, defaulting to 1000 [ 725.221457][T30306] lo speed is unknown, defaulting to 1000 [ 725.227840][T30306] lo speed is unknown, defaulting to 1000 [ 725.244410][T30306] lo speed is unknown, defaulting to 1000 [ 725.256509][T30306] lo speed is unknown, defaulting to 1000 [ 725.263466][T30306] lo speed is unknown, defaulting to 1000 [ 725.269833][T30312] FAULT_INJECTION: forcing a failure. [ 725.269833][T30312] name failslab, interval 1, probability 0, space 0, times 0 [ 725.282581][T30312] CPU: 0 UID: 0 PID: 30312 Comm: syz.3.9000 Not tainted syzkaller #0 PREEMPT(voluntary) [ 725.282619][T30312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 725.282637][T30312] Call Trace: [ 725.282646][T30312] [ 725.282663][T30312] __dump_stack+0x1d/0x30 [ 725.282747][T30312] dump_stack_lvl+0xe8/0x140 [ 725.282773][T30312] dump_stack+0x15/0x1b [ 725.282794][T30312] should_fail_ex+0x265/0x280 [ 725.282839][T30312] should_failslab+0x8c/0xb0 [ 725.282913][T30312] kmem_cache_alloc_noprof+0x50/0x480 [ 725.282985][T30312] ? prepare_creds+0x37/0x4c0 [ 725.283022][T30312] prepare_creds+0x37/0x4c0 [ 725.283056][T30312] lookup_user_key+0x1fa/0xd10 [ 725.283118][T30312] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 725.283182][T30312] __se_sys_add_key+0x268/0x350 [ 725.283227][T30312] __x64_sys_add_key+0x67/0x80 [ 725.283309][T30312] x64_sys_call+0x28c8/0x3000 [ 725.283378][T30312] do_syscall_64+0xd2/0x200 [ 725.283413][T30312] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 725.283448][T30312] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 725.283472][T30312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.283540][T30312] RIP: 0033:0x7f9cdf11efc9 [ 725.283582][T30312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 725.283601][T30312] RSP: 002b:00007f9cddb7f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 725.283627][T30312] RAX: ffffffffffffffda RBX: 00007f9cdf375fa0 RCX: 00007f9cdf11efc9 [ 725.283640][T30312] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000200000000100 [ 725.283652][T30312] RBP: 00007f9cddb7f090 R08: fffffffffffffffe R09: 0000000000000000 [ 725.283676][T30312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 725.283692][T30312] R13: 00007f9cdf376038 R14: 00007f9cdf375fa0 R15: 00007fffa65ac768 [ 725.283718][T30312] [ 725.286662][T30306] lo speed is unknown, defaulting to 1000 [ 725.442188][T30315] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9001'. [ 725.447236][T30306] lo speed is unknown, defaulting to 1000 [ 725.511220][T26873] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 725.527706][T30315] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 725.559729][T30306] lo speed is unknown, defaulting to 1000 [ 725.565901][T30306] lo speed is unknown, defaulting to 1000 [ 725.572281][T30306] lo speed is unknown, defaulting to 1000 [ 725.578461][T30306] lo speed is unknown, defaulting to 1000 [ 725.584658][T30306] lo speed is unknown, defaulting to 1000 [ 725.599050][T30306] lo speed is unknown, defaulting to 1000 [ 725.605149][T30318] loop3: detected capacity change from 0 to 2048 [ 725.605516][T30306] lo speed is unknown, defaulting to 1000 [ 725.611964][T30318] EXT4-fs: Ignoring removed bh option [ 725.625950][T30306] lo speed is unknown, defaulting to 1000 [ 725.632142][T30306] lo speed is unknown, defaulting to 1000 [ 725.642393][T30306] lo speed is unknown, defaulting to 1000 [ 725.649163][T30306] lo speed is unknown, defaulting to 1000 [ 725.655890][T30306] lo speed is unknown, defaulting to 1000 [ 725.655869][T30318] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 725.677445][T30306] lo speed is unknown, defaulting to 1000 [ 725.684012][T30313] rdma_op ffff88811e79b980 conn xmit_rdma 0000000000000000 [ 725.684473][T30306] lo speed is unknown, defaulting to 1000 [ 725.744555][T30328] tipc: Enabled bearer , priority 0 [ 725.751754][T30306] lo speed is unknown, defaulting to 1000 [ 725.757901][T30306] lo speed is unknown, defaulting to 1000 [ 725.764029][T30306] lo speed is unknown, defaulting to 1000 [ 725.770416][T30306] lo speed is unknown, defaulting to 1000 [ 725.779529][T30327] tipc: Disabling bearer [ 725.788041][T30306] lo speed is unknown, defaulting to 1000 [ 725.886875][T30336] loop4: detected capacity change from 0 to 256 [ 725.894526][T30336] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 725.922807][T30306] lo speed is unknown, defaulting to 1000 [ 725.931708][T30306] lo speed is unknown, defaulting to 1000 [ 725.938927][T30306] lo speed is unknown, defaulting to 1000 [ 725.944864][T30338] loop7: detected capacity change from 0 to 256 [ 725.948401][T30306] lo speed is unknown, defaulting to 1000 [ 725.958047][T30338] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 725.966291][T30306] lo speed is unknown, defaulting to 1000 [ 725.979605][T30306] lo speed is unknown, defaulting to 1000 [ 725.987685][T30306] lo speed is unknown, defaulting to 1000 [ 725.994009][T30331] lo speed is unknown, defaulting to 1000 [ 726.000389][T30306] lo speed is unknown, defaulting to 1000 [ 726.013109][T30306] lo speed is unknown, defaulting to 1000 [ 726.030431][T30341] netlink: 68 bytes leftover after parsing attributes in process `syz.7.9009'. [ 726.039521][T30306] lo speed is unknown, defaulting to 1000 [ 726.045571][T30306] lo speed is unknown, defaulting to 1000 [ 726.051857][T30306] lo speed is unknown, defaulting to 1000 [ 726.058277][T30306] lo speed is unknown, defaulting to 1000 [ 726.064783][T30306] lo speed is unknown, defaulting to 1000 [ 726.071080][T30306] lo speed is unknown, defaulting to 1000 [ 726.077322][T30306] lo speed is unknown, defaulting to 1000 [ 726.085577][T30306] lo speed is unknown, defaulting to 1000 [ 726.244793][T30349] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9012'. [ 726.256018][T30349] netlink: 660 bytes leftover after parsing attributes in process `syz.5.9012'. [ 726.280481][T21544] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 726.291348][T30349] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 726.337073][T21544] syz_tun (unregistering): left allmulticast mode [ 726.466874][T30351] lo speed is unknown, defaulting to 1000 [ 726.524578][T30351] chnl_net:caif_netlink_parms(): no params data found [ 726.563564][T30351] bridge0: port 1(bridge_slave_0) entered blocking state [ 726.570764][T30351] bridge0: port 1(bridge_slave_0) entered disabled state [ 726.578110][T30351] bridge_slave_0: entered allmulticast mode [ 726.584876][T30351] bridge_slave_0: entered promiscuous mode [ 726.591745][T30351] bridge0: port 2(bridge_slave_1) entered blocking state [ 726.598928][T30351] bridge0: port 2(bridge_slave_1) entered disabled state [ 726.606275][T30351] bridge_slave_1: entered allmulticast mode [ 726.614314][T30351] bridge_slave_1: entered promiscuous mode [ 726.633795][T30351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 726.644748][T30351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 726.665886][T30351] team0: Port device team_slave_0 added [ 726.672756][T30351] team0: Port device team_slave_1 added [ 726.689457][T30351] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 726.696445][T30351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 726.722542][T30351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 726.747780][T30351] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 726.754851][T30351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 726.780830][T30351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 726.845435][T30351] hsr_slave_0: entered promiscuous mode [ 726.851340][T30374] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9017'. [ 726.852502][T30351] hsr_slave_1: entered promiscuous mode [ 726.866406][T30351] debugfs: 'hsr0' already exists in 'hsr' [ 726.872231][T30351] Cannot create hsr debugfs directory [ 726.886575][T30376] siw: device registration error -23 [ 726.922045][T30374] syz_tun: entered allmulticast mode [ 726.967614][T30351] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.012440][T30374] loop7: detected capacity change from 0 to 1024 [ 727.024467][T30374] EXT4-fs: Ignoring removed oldalloc option [ 727.030493][T30374] EXT4-fs: Ignoring removed bh option [ 727.041242][T30351] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.063269][T30374] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 727.065060][T30386] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9021'. [ 727.085482][T30388] loop4: detected capacity change from 0 to 512 [ 727.097312][T30351] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.111282][T30388] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 727.124305][T30388] ext4 filesystem being mounted at /602/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 727.135031][T30373] syz_tun: left allmulticast mode [ 727.142597][T30386] syz_tun: entered allmulticast mode [ 727.164630][T30386] loop6: detected capacity change from 0 to 1024 [ 727.171526][T30386] EXT4-fs: Ignoring removed oldalloc option [ 727.177648][T30386] EXT4-fs: Ignoring removed bh option [ 727.192663][T30351] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.224979][T30386] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 727.249677][T26873] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 727.261237][T30385] syz_tun: left allmulticast mode [ 727.288383][T25654] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 727.332294][T30351] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 727.342324][T30401] loop6: detected capacity change from 0 to 256 [ 727.351527][T30351] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 727.359772][T30401] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 727.372979][T30351] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 727.380022][T30394] loop5: detected capacity change from 0 to 2048 [ 727.389430][T30351] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 727.411615][T30394] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 727.428588][T30388] xt_CT: You must specify a L4 protocol and not use inversions on it [ 727.436951][T30394] ext4 filesystem being mounted at /272/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 727.452323][T30411] netlink: 68 bytes leftover after parsing attributes in process `syz.6.9025'. [ 727.467060][T30351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 727.492220][T30351] 8021q: adding VLAN 0 to HW filter on device team0 [ 727.511707][T27067] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.518976][T27067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 727.542966][T27067] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.550080][T27067] bridge0: port 2(bridge_slave_1) entered forwarding state [ 727.563456][T30412] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.9023: bg 0: block 345: padding at end of block bitmap is not set [ 727.579240][T21080] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 727.596285][T30412] EXT4-fs (loop5): Remounting filesystem read-only [ 727.600166][T30351] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 727.626024][T30415] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9026'. [ 727.681691][T30415] loop4: detected capacity change from 0 to 1024 [ 727.688398][T30415] EXT4-fs: Ignoring removed oldalloc option [ 727.694484][T30415] EXT4-fs: Ignoring removed bh option [ 727.696883][T30351] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 727.711569][T30415] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 727.743232][T21080] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 727.811073][T26004] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 727.822566][T30351] veth0_vlan: entered promiscuous mode [ 727.832645][T30351] veth1_vlan: entered promiscuous mode [ 727.851482][T30351] veth0_macvtap: entered promiscuous mode [ 727.860119][T30351] veth1_macvtap: entered promiscuous mode [ 727.873861][T30351] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 727.889685][T30351] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 727.903308][T14041] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.921628][T14041] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.938564][T14041] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.210895][T30436] loop5: detected capacity change from 0 to 2048 [ 728.262425][T30436] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 728.277659][T30436] ext4 filesystem being mounted at /275/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 728.368234][T30438] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.9030: bg 0: block 345: padding at end of block bitmap is not set [ 728.382995][T28776] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.391543][T30438] EXT4-fs (loop5): Remounting filesystem read-only [ 728.442569][T30451] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 728.463309][T30447] tipc: Started in network mode [ 728.468232][T30447] tipc: Node identity 3a2f5c6f7d6, cluster identity 4711 [ 728.475913][T30447] tipc: Enabled bearer , priority 0 [ 728.487274][T30449] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 728.495193][T30446] tipc: Resetting bearer [ 728.510242][T30446] tipc: Disabling bearer [ 728.588856][T30453] syz_tun: entered allmulticast mode [ 728.595844][T26004] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 728.620955][T30453] loop3: detected capacity change from 0 to 1024 [ 728.627849][T30453] EXT4-fs: Ignoring removed oldalloc option [ 728.633879][T30453] EXT4-fs: Ignoring removed bh option [ 728.695433][T30453] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 728.779408][T30452] syz_tun: left allmulticast mode [ 728.836376][T30351] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 728.988130][ T29] kauditd_printk_skb: 1825 callbacks suppressed [ 728.988147][ T29] audit: type=1326 audit(1760902326.855:87740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30478 comm="syz.3.9041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc43e1defc9 code=0x7ffc0000 [ 729.064836][ T29] audit: type=1326 audit(1760902326.895:87741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30478 comm="syz.3.9041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc43e1defc9 code=0x7ffc0000 [ 729.088531][ T29] audit: type=1326 audit(1760902326.895:87742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30478 comm="syz.3.9041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc43e1defc9 code=0x7ffc0000 [ 729.112261][ T29] audit: type=1326 audit(1760902326.905:87743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30478 comm="syz.3.9041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc43e1defc9 code=0x7ffc0000 [ 729.136296][ T29] audit: type=1326 audit(1760902326.905:87744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30478 comm="syz.3.9041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc43e1defc9 code=0x7ffc0000 [ 729.160010][ T29] audit: type=1326 audit(1760902326.905:87745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30478 comm="syz.3.9041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc43e1defc9 code=0x7ffc0000 [ 729.183770][ T29] audit: type=1326 audit(1760902326.905:87746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30478 comm="syz.3.9041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc43e1defc9 code=0x7ffc0000 [ 729.193098][T30451] rdma_op ffff88814a18e580 conn xmit_rdma 0000000000000000 [ 729.207526][ T29] audit: type=1326 audit(1760902326.905:87747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30478 comm="syz.3.9041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fc43e1defc9 code=0x7ffc0000 [ 729.238318][ T29] audit: type=1326 audit(1760902326.905:87748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30478 comm="syz.3.9041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc43e1defc9 code=0x7ffc0000 [ 729.262018][ T29] audit: type=1326 audit(1760902326.905:87749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30478 comm="syz.3.9041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fc43e1defc9 code=0x7ffc0000 [ 729.274772][T30467] lo speed is unknown, defaulting to 1000 [ 729.376875][T30465] lo speed is unknown, defaulting to 1000 [ 729.487543][T30491] tipc: Enabled bearer , priority 0 [ 729.498326][T30490] tipc: Resetting bearer [ 729.511622][T30490] tipc: Disabling bearer [ 729.519620][T30465] chnl_net:caif_netlink_parms(): no params data found [ 729.534887][T30495] netlink: 'syz.6.9045': attribute type 4 has an invalid length. [ 729.549919][T30495] netlink: 'syz.6.9045': attribute type 4 has an invalid length. [ 729.578267][T30500] loop7: detected capacity change from 0 to 128 [ 729.585137][T30465] bridge0: port 1(bridge_slave_0) entered blocking state [ 729.592274][T30465] bridge0: port 1(bridge_slave_0) entered disabled state [ 729.599661][T30500] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 729.600703][T30465] bridge_slave_0: entered allmulticast mode [ 729.618854][T30465] bridge_slave_0: entered promiscuous mode [ 729.625399][T30500] ext4 filesystem being mounted at /206/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 729.631822][T30465] bridge0: port 2(bridge_slave_1) entered blocking state [ 729.664500][T30465] bridge0: port 2(bridge_slave_1) entered disabled state [ 729.672148][T30500] __nla_validate_parse: 4 callbacks suppressed [ 729.672162][T30500] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9046'. [ 729.673079][T30465] bridge_slave_1: entered allmulticast mode [ 729.695496][T30465] bridge_slave_1: entered promiscuous mode [ 729.721274][T30465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 729.732622][T30465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 729.753545][T30465] team0: Port device team_slave_0 added [ 729.760605][T30465] team0: Port device team_slave_1 added [ 729.783853][T30465] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 729.790900][T30465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 729.816881][T30465] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 729.829570][T30465] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 729.836543][T30465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 729.838224][T26873] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 729.862638][T30465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 729.926521][T30465] hsr_slave_0: entered promiscuous mode [ 729.938403][T30465] hsr_slave_1: entered promiscuous mode [ 729.950671][T30465] debugfs: 'hsr0' already exists in 'hsr' [ 729.956494][T30465] Cannot create hsr debugfs directory [ 730.021328][T30515] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 730.114916][T30465] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.191692][T30465] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.241736][T30465] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.295078][T30465] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.368096][T30524] tipc: Enabled bearer , priority 0 [ 730.376251][T30523] tipc: Resetting bearer [ 730.389584][T30523] tipc: Disabling bearer [ 730.419526][T30465] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 730.434795][T30465] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 730.450263][T30465] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 730.469994][T30465] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 730.527468][T30465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 730.543037][T30465] 8021q: adding VLAN 0 to HW filter on device team0 [ 730.553831][T14072] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.561107][T14072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 730.565165][T30537] siw: device registration error -23 [ 730.576999][T14072] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.584123][T14072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 730.631082][T30521] rdma_op ffff88814a18f980 conn xmit_rdma 0000000000000000 [ 730.678159][T30465] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 730.762007][T30548] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9059'. [ 730.906778][T30465] veth0_vlan: entered promiscuous mode [ 730.915653][T30465] veth1_vlan: entered promiscuous mode [ 730.934892][T30465] veth0_macvtap: entered promiscuous mode [ 730.942937][T30465] veth1_macvtap: entered promiscuous mode [ 730.954577][T30465] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 730.954614][T30583] loop5: detected capacity change from 0 to 512 [ 730.964126][T30465] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 730.985715][T14078] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.995133][T14078] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.004804][T14078] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.014904][T14078] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.032497][T30583] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 731.069634][T30583] ext4 filesystem being mounted at /288/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 731.139343][T26004] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 731.158542][T30596] siw: device registration error -23 [ 731.167119][T30593] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9037'. [ 731.178413][T30593] netlink: 56 bytes leftover after parsing attributes in process `syz.4.9037'. [ 731.205697][ T12] unregister_netdevice: waiting for batadv_slave_0 to become free. Usage count = 2 [ 731.215496][ T12] ref_tracker: netdev@ffff88811a268550 has 1/1 users at [ 731.215496][ T12] batadv_hard_if_event+0x6c1/0xf10 [ 731.215496][ T12] raw_notifier_call_chain+0x6f/0x1b0 [ 731.215496][ T12] call_netdevice_notifiers_info+0xae/0x100 [ 731.215496][ T12] register_netdevice+0xd48/0xf00 [ 731.215496][ T12] veth_newlink+0x49b/0x770 [ 731.215496][ T12] rtnl_newlink_create+0x1bc/0x620 [ 731.215496][ T12] rtnl_newlink+0xf29/0x12d0 [ 731.215496][ T12] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 731.215496][ T12] netlink_rcv_skb+0x123/0x220 [ 731.215496][ T12] rtnetlink_rcv+0x1c/0x30 [ 731.215496][ T12] netlink_unicast+0x5c0/0x690 [ 731.215496][ T12] netlink_sendmsg+0x58b/0x6b0 [ 731.215496][ T12] __sock_sendmsg+0x145/0x180 [ 731.215496][ T12] __sys_sendto+0x268/0x330 [ 731.215496][ T12] __x64_sys_sendto+0x76/0x90 [ 731.215496][ T12] x64_sys_call+0x2d14/0x3000 [ 731.215496][ T12] [ 731.318230][T30597] sch_tbf: peakrate 2 is lower than or equals to rate 7 ! [ 731.335826][T30600] tipc: Enabled bearer , priority 0 [ 731.350636][T30598] tipc: Resetting bearer [ 731.365378][T30598] tipc: Disabling bearer [ 731.624739][T30628] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9075'. [ 731.654757][T30628] syz_tun: entered allmulticast mode [ 731.668822][T30627] syz_tun: left allmulticast mode [ 731.739582][T30636] tipc: Enabled bearer , priority 0 [ 731.747511][T30635] tipc: Resetting bearer [ 731.760837][T30635] tipc: Disabling bearer [ 731.826280][T30638] netlink: 332 bytes leftover after parsing attributes in process `syz.5.9079'. [ 731.852078][T30640] support for the xor transformation has been removed. [ 732.290363][T30662] lo speed is unknown, defaulting to 1000 [ 732.427603][T30667] netlink: 'syz.3.9088': attribute type 4 has an invalid length. [ 732.470937][T30667] netlink: 'syz.3.9088': attribute type 4 has an invalid length. [ 732.490048][T30671] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9090'. [ 732.533313][T30675] netlink: 'syz.3.9092': attribute type 4 has an invalid length. [ 732.554430][T30675] netlink: 'syz.3.9092': attribute type 4 has an invalid length. [ 732.564950][T30677] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9093'. [ 732.599914][T30677] syz_tun: entered allmulticast mode [ 732.608051][T30676] syz_tun: left allmulticast mode [ 732.737985][T30685] tipc: Enabled bearer , priority 0 [ 732.749647][T30680] tipc: Resetting bearer [ 732.764320][T30680] tipc: Disabling bearer [ 732.994359][T30699] netlink: 'syz.6.9098': attribute type 1 has an invalid length. [ 733.101775][T30703] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9098'. [ 733.194556][T30699] 8021q: adding VLAN 0 to HW filter on device bond1 [ 733.215509][T30700] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 733.225290][T30700] bond1: (slave batadv1): making interface the new active one [ 733.243811][T30700] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 733.255117][T30703] bond1 (unregistering): (slave batadv1): Releasing active interface [ 733.265737][T30703] bond1 (unregistering): Released all slaves [ 733.269781][T30707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9100'. [ 733.303121][T30707] syz_tun: entered allmulticast mode [ 733.318919][T30707] loop3: detected capacity change from 0 to 1024 [ 733.325704][T30707] EXT4-fs: Ignoring removed oldalloc option [ 733.331885][T30707] EXT4-fs: Ignoring removed bh option [ 733.340706][T30707] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 733.359928][T30706] syz_tun: left allmulticast mode [ 733.383010][T30351] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 733.493981][T30719] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 733.601453][T30715] loop3: detected capacity change from 0 to 2048 [ 733.624911][T30715] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 733.637894][T30715] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 733.731853][T30717] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.9103: bg 0: block 345: padding at end of block bitmap is not set [ 733.789462][T30717] EXT4-fs (loop3): Remounting filesystem read-only [ 733.857404][T30724] lo speed is unknown, defaulting to 1000 [ 733.898928][T30351] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 734.000424][ T29] kauditd_printk_skb: 1567 callbacks suppressed [ 734.000445][ T29] audit: type=1326 audit(1760902331.875:89315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30718 comm="syz.4.9104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f583bfcefc9 code=0x7ffc0000 [ 734.048704][ T29] audit: type=1326 audit(1760902331.875:89316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30718 comm="syz.4.9104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f583bfcefc9 code=0x7ffc0000 [ 734.072423][ T29] audit: type=1326 audit(1760902331.875:89317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30718 comm="syz.4.9104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f583bfcefc9 code=0x7ffc0000 [ 734.096257][ T29] audit: type=1326 audit(1760902331.875:89318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30718 comm="syz.4.9104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f583bfcefc9 code=0x7ffc0000 [ 734.119818][ T29] audit: type=1326 audit(1760902331.875:89319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30718 comm="syz.4.9104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f583bfcefc9 code=0x7ffc0000 [ 734.123905][T30729] lo speed is unknown, defaulting to 1000 [ 734.143555][ T29] audit: type=1326 audit(1760902331.875:89320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30718 comm="syz.4.9104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f583bfcefc9 code=0x7ffc0000 [ 734.143592][ T29] audit: type=1326 audit(1760902331.875:89321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30718 comm="syz.4.9104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f583bfcefc9 code=0x7ffc0000 [ 734.143667][ T29] audit: type=1326 audit(1760902331.875:89322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30718 comm="syz.4.9104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f583bfcefc9 code=0x7ffc0000 [ 734.174048][T30743] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 734.196909][ T29] audit: type=1326 audit(1760902331.875:89323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30718 comm="syz.4.9104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f583bfcefc9 code=0x7ffc0000 [ 734.250850][ T29] audit: type=1326 audit(1760902331.905:89324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30718 comm="syz.4.9104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f583bfcefc9 code=0x7ffc0000 [ 734.275995][T30719] rdma_op ffff88810d1c2580 conn xmit_rdma 0000000000000000 [ 734.367641][T30751] loop6: detected capacity change from 0 to 2048 [ 734.377905][T30758] netlink: 'syz.7.9115': attribute type 4 has an invalid length. [ 734.412958][T30758] netlink: 'syz.7.9115': attribute type 4 has an invalid length. [ 734.430233][T30751] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 734.451169][T30751] ext4 filesystem being mounted at /311/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 734.496980][T30768] FAULT_INJECTION: forcing a failure. [ 734.496980][T30768] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 734.510137][T30768] CPU: 0 UID: 0 PID: 30768 Comm: syz.7.9119 Not tainted syzkaller #0 PREEMPT(voluntary) [ 734.510173][T30768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 734.510190][T30768] Call Trace: [ 734.510199][T30768] [ 734.510210][T30768] __dump_stack+0x1d/0x30 [ 734.510261][T30768] dump_stack_lvl+0xe8/0x140 [ 734.510294][T30768] dump_stack+0x15/0x1b [ 734.510316][T30768] should_fail_ex+0x265/0x280 [ 734.510400][T30768] should_fail+0xb/0x20 [ 734.510442][T30768] should_fail_usercopy+0x1a/0x20 [ 734.510490][T30768] _copy_from_user+0x1c/0xb0 [ 734.510600][T30768] ___sys_sendmsg+0xc1/0x1d0 [ 734.510720][T30768] __x64_sys_sendmsg+0xd4/0x160 [ 734.510837][T30768] x64_sys_call+0x191e/0x3000 [ 734.510862][T30768] do_syscall_64+0xd2/0x200 [ 734.510888][T30768] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 734.510979][T30768] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 734.511005][T30768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.511029][T30768] RIP: 0033:0x7fa94e18efc9 [ 734.511049][T30768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 734.511148][T30768] RSP: 002b:00007fa94cbef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 734.511214][T30768] RAX: ffffffffffffffda RBX: 00007fa94e3e5fa0 RCX: 00007fa94e18efc9 [ 734.511232][T30768] RDX: 0000000008000002 RSI: 0000200000000000 RDI: 0000000000000006 [ 734.511248][T30768] RBP: 00007fa94cbef090 R08: 0000000000000000 R09: 0000000000000000 [ 734.511318][T30768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 734.511335][T30768] R13: 00007fa94e3e6038 R14: 00007fa94e3e5fa0 R15: 00007ffe3f6e7698 [ 734.511363][T30768] [ 734.729539][T30775] __nla_validate_parse: 4 callbacks suppressed [ 734.729556][T30775] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9122'. [ 734.737662][T30751] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.9112: bg 0: block 345: padding at end of block bitmap is not set [ 734.759161][T30751] EXT4-fs (loop6): Remounting filesystem read-only [ 734.768600][T30775] syz_tun: entered allmulticast mode [ 734.781957][T30774] syz_tun: left allmulticast mode [ 734.811168][T30778] loop3: detected capacity change from 0 to 256 [ 734.823199][T30778] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 734.940672][T25654] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 734.951263][T30797] netlink: 43 bytes leftover after parsing attributes in process `syz.5.9128'. [ 734.981639][T30801] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 734.997103][T30802] siw: device registration error -23 [ 735.020509][T30806] netlink: 19 bytes leftover after parsing attributes in process `syz.6.9131'. [ 735.139909][T30813] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9134'. [ 735.202481][T30813] syz_tun: entered allmulticast mode [ 735.226504][T30812] syz_tun: left allmulticast mode [ 735.259888][T30818] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9136'. [ 735.298734][T30818] netlink: 660 bytes leftover after parsing attributes in process `syz.7.9136'. [ 735.325297][T30818] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 735.362971][T30801] rdma_op ffff888112808180 conn xmit_rdma 0000000000000000 [ 735.467622][T30832] macvtap1: entered promiscuous mode [ 735.473067][T30832] macvtap1: entered allmulticast mode [ 735.551992][T30842] netlink: 43 bytes leftover after parsing attributes in process `syz.5.9141'. [ 735.593473][T30848] netlink: 19 bytes leftover after parsing attributes in process `syz.4.9144'. [ 735.667287][T30856] siw: device registration error -23 [ 735.798809][T30859] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 736.225728][T30868] FAULT_INJECTION: forcing a failure. [ 736.225728][T30868] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 736.238932][T30868] CPU: 1 UID: 0 PID: 30868 Comm: syz.6.9152 Not tainted syzkaller #0 PREEMPT(voluntary) [ 736.238964][T30868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 736.238978][T30868] Call Trace: [ 736.238986][T30868] [ 736.239070][T30868] __dump_stack+0x1d/0x30 [ 736.239094][T30868] dump_stack_lvl+0xe8/0x140 [ 736.239117][T30868] dump_stack+0x15/0x1b [ 736.239176][T30868] should_fail_ex+0x265/0x280 [ 736.239216][T30868] should_fail+0xb/0x20 [ 736.239272][T30868] should_fail_usercopy+0x1a/0x20 [ 736.239296][T30868] _copy_from_user+0x1c/0xb0 [ 736.239325][T30868] __sys_bpf+0x183/0x7c0 [ 736.239368][T30868] __x64_sys_bpf+0x41/0x50 [ 736.239463][T30868] x64_sys_call+0x2aee/0x3000 [ 736.239492][T30868] do_syscall_64+0xd2/0x200 [ 736.239522][T30868] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 736.239600][T30868] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 736.239626][T30868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.239649][T30868] RIP: 0033:0x7f9fa914efc9 [ 736.239676][T30868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 736.239712][T30868] RSP: 002b:00007f9fa7baf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 736.239811][T30868] RAX: ffffffffffffffda RBX: 00007f9fa93a5fa0 RCX: 00007f9fa914efc9 [ 736.239827][T30868] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a [ 736.239842][T30868] RBP: 00007f9fa7baf090 R08: 0000000000000000 R09: 0000000000000000 [ 736.239855][T30868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 736.239868][T30868] R13: 00007f9fa93a6038 R14: 00007f9fa93a5fa0 R15: 00007ffeedc44608 [ 736.239889][T30868] [ 736.449152][T30870] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9151'. [ 736.460641][T30859] rdma_op ffff88810d922180 conn xmit_rdma 0000000000000000 [ 736.473691][T30872] netlink: 43 bytes leftover after parsing attributes in process `syz.6.9153'. [ 736.514015][T30873] syz_tun: entered allmulticast mode [ 736.561551][T30869] syz_tun: left allmulticast mode [ 736.663137][T30875] loop4: detected capacity change from 0 to 2048 [ 736.687919][T30875] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 736.746286][T30887] lo speed is unknown, defaulting to 1000 [ 736.752167][T30875] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 736.762781][T30893] siw: device registration error -23 [ 736.789530][T30902] siw: device registration error -23 [ 736.917747][T30885] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.9154: bg 0: block 345: padding at end of block bitmap is not set [ 736.984157][T30885] EXT4-fs (loop4): Remounting filesystem read-only [ 737.044418][T30918] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 737.122182][T30465] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 737.294371][T30925] FAULT_INJECTION: forcing a failure. [ 737.294371][T30925] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 737.307765][T30925] CPU: 0 UID: 0 PID: 30925 Comm: syz.4.9169 Not tainted syzkaller #0 PREEMPT(voluntary) [ 737.307794][T30925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 737.307811][T30925] Call Trace: [ 737.307821][T30925] [ 737.307910][T30925] __dump_stack+0x1d/0x30 [ 737.307932][T30925] dump_stack_lvl+0xe8/0x140 [ 737.307952][T30925] dump_stack+0x15/0x1b [ 737.307970][T30925] should_fail_ex+0x265/0x280 [ 737.308069][T30925] should_fail+0xb/0x20 [ 737.308149][T30925] should_fail_usercopy+0x1a/0x20 [ 737.308175][T30925] _copy_from_user+0x1c/0xb0 [ 737.308208][T30925] __sys_bpf+0x183/0x7c0 [ 737.308260][T30925] __x64_sys_bpf+0x41/0x50 [ 737.308378][T30925] x64_sys_call+0x2aee/0x3000 [ 737.308408][T30925] do_syscall_64+0xd2/0x200 [ 737.308509][T30925] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 737.308538][T30925] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 737.308569][T30925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.308651][T30925] RIP: 0033:0x7f583bfcefc9 [ 737.308668][T30925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 737.308758][T30925] RSP: 002b:00007f583aa16038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 737.308784][T30925] RAX: ffffffffffffffda RBX: 00007f583c226090 RCX: 00007f583bfcefc9 [ 737.308801][T30925] RDX: 0000000000000038 RSI: 00002000000007c0 RDI: 000000000000001a [ 737.308846][T30925] RBP: 00007f583aa16090 R08: 0000000000000000 R09: 0000000000000000 [ 737.308859][T30925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 737.308875][T30925] R13: 00007f583c226128 R14: 00007f583c226090 R15: 00007ffe19570ba8 [ 737.308902][T30925] [ 737.769720][T30918] rdma_op ffff88814a9c0180 conn xmit_rdma 0000000000000000 [ 737.859430][T30944] loop4: detected capacity change from 0 to 2048 [ 737.873976][T30934] lo speed is unknown, defaulting to 1000 [ 737.886186][T30948] loop5: detected capacity change from 0 to 1024 [ 737.893548][T30948] EXT4-fs: Ignoring removed nomblk_io_submit option [ 737.900773][T30948] EXT4-fs: inline encryption not supported [ 737.906666][T30948] EXT4-fs: Ignoring removed nomblk_io_submit option [ 737.915012][T30944] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 737.929368][T30944] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 737.953274][T30948] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 737.970848][T30956] loop6: detected capacity change from 0 to 1024 [ 737.977439][T30956] ext4: Unknown parameter 'smackfsfloor' [ 738.061457][T30948] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4193: comm syz.5.9179: Allocating blocks 449-513 which overlap fs metadata [ 738.075923][T30948] EXT4-fs (loop5): pa ffff888106a9de00: logic 256, phys. 385, len 8 [ 738.084024][T30948] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 738.104755][T30944] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.9177: bg 0: block 345: padding at end of block bitmap is not set [ 738.128405][T30944] EXT4-fs (loop4): Remounting filesystem read-only [ 738.139157][T30963] FAULT_INJECTION: forcing a failure. [ 738.139157][T30963] name failslab, interval 1, probability 0, space 0, times 0 [ 738.151860][T30963] CPU: 1 UID: 0 PID: 30963 Comm: syz.3.9182 Not tainted syzkaller #0 PREEMPT(voluntary) [ 738.151897][T30963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 738.151915][T30963] Call Trace: [ 738.151923][T30963] [ 738.151932][T30963] __dump_stack+0x1d/0x30 [ 738.151960][T30963] dump_stack_lvl+0xe8/0x140 [ 738.152011][T30963] dump_stack+0x15/0x1b [ 738.152029][T30963] should_fail_ex+0x265/0x280 [ 738.152114][T30963] should_failslab+0x8c/0xb0 [ 738.152201][T30963] kmem_cache_alloc_noprof+0x50/0x480 [ 738.152289][T30963] ? getname_flags+0x80/0x3b0 [ 738.152328][T30963] getname_flags+0x80/0x3b0 [ 738.152366][T30963] __se_sys_acct+0x6a/0x530 [ 738.152411][T30963] __x64_sys_acct+0x1f/0x30 [ 738.152513][T30963] x64_sys_call+0x2f3a/0x3000 [ 738.152540][T30963] do_syscall_64+0xd2/0x200 [ 738.152573][T30963] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 738.152686][T30963] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 738.152717][T30963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.152745][T30963] RIP: 0033:0x7fc43e1defc9 [ 738.152765][T30963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 738.152790][T30963] RSP: 002b:00007fc43cc3f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 738.152815][T30963] RAX: ffffffffffffffda RBX: 00007fc43e435fa0 RCX: 00007fc43e1defc9 [ 738.152906][T30963] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 9999999999999999 [ 738.152920][T30963] RBP: 00007fc43cc3f090 R08: 0000000000000000 R09: 0000000000000000 [ 738.152933][T30963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 738.152986][T30963] R13: 00007fc43e436038 R14: 00007fc43e435fa0 R15: 00007ffe938bc238 [ 738.153007][T30963] [ 738.363207][T26004] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 738.411245][T30465] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 738.441493][T30982] netlink: 'syz.4.9188': attribute type 4 has an invalid length. [ 738.458258][T30982] netlink: 'syz.4.9188': attribute type 4 has an invalid length. [ 738.470286][T30986] loop7: detected capacity change from 0 to 128 [ 738.490601][T30986] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 738.527132][T30986] ext4 filesystem being mounted at /237/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 738.659997][T26873] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 738.777589][T31001] loop4: detected capacity change from 0 to 2048 [ 738.790229][T31001] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 738.803055][T31001] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 738.858343][T31001] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.9196: bg 0: block 345: padding at end of block bitmap is not set [ 738.873075][T31001] EXT4-fs (loop4): Remounting filesystem read-only [ 739.034231][T31006] lo speed is unknown, defaulting to 1000 [ 739.104928][T30465] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 739.212250][T31013] loop7: detected capacity change from 0 to 1024 [ 739.218836][ T29] kauditd_printk_skb: 606 callbacks suppressed [ 739.218905][ T29] audit: type=1400 audit(1760902337.075:89931): avc: denied { watch watch_reads } for pid=31012 comm="syz.7.9200" path="/proc/620" dev="proc" ino=99848 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 739.250964][T31013] EXT4-fs (loop7): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 739.344676][ T29] audit: type=1400 audit(1760902337.215:89932): avc: denied { getopt } for pid=31018 comm="syz.5.9203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 739.375705][T31013] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 739.389218][T31019] veth3: entered promiscuous mode [ 739.400426][T31021] netlink: 'syz.6.9202': attribute type 4 has an invalid length. [ 739.411194][T31021] netlink: 'syz.6.9202': attribute type 4 has an invalid length. [ 739.441801][T31013] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: inode #11: comm syz.7.9200: missing EA_INODE flag [ 739.453937][T31013] EXT4-fs (loop7): Remounting filesystem read-only [ 739.475095][T26873] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 739.555321][T31037] siw: device registration error -23 [ 739.561588][ T29] audit: type=1326 audit(1760902337.435:89933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31034 comm="syz.3.9208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc43e1defc9 code=0x7ffc0000 [ 739.603228][ T29] audit: type=1326 audit(1760902337.435:89934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31034 comm="syz.3.9208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc43e1defc9 code=0x7ffc0000 [ 739.626934][ T29] audit: type=1326 audit(1760902337.435:89935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31034 comm="syz.3.9208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc43e1defc9 code=0x7ffc0000 [ 739.650564][ T29] audit: type=1326 audit(1760902337.435:89936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31034 comm="syz.3.9208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc43e1defc9 code=0x7ffc0000 [ 739.674248][ T29] audit: type=1326 audit(1760902337.435:89937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31034 comm="syz.3.9208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc43e1defc9 code=0x7ffc0000 [ 739.698231][ T29] audit: type=1326 audit(1760902337.435:89938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31034 comm="syz.3.9208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc43e1defc9 code=0x7ffc0000 [ 739.722019][ T29] audit: type=1326 audit(1760902337.435:89939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31034 comm="syz.3.9208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc43e1defc9 code=0x7ffc0000 [ 739.745801][ T29] audit: type=1326 audit(1760902337.435:89940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31034 comm="syz.3.9208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fc43e1defc9 code=0x7ffc0000 [ 739.790666][T31039] lo speed is unknown, defaulting to 1000 [ 739.796893][T31040] siw: device registration error -23 [ 739.863874][T31054] __nla_validate_parse: 7 callbacks suppressed [ 739.863894][T31054] netlink: 19 bytes leftover after parsing attributes in process `syz.7.9213'. [ 739.922109][T31060] netlink: 'syz.7.9215': attribute type 4 has an invalid length. [ 739.937680][T31060] netlink: 'syz.7.9215': attribute type 4 has an invalid length. [ 739.970612][T31064] macvtap1: entered promiscuous mode [ 739.975979][T31064] macvtap1: entered allmulticast mode [ 739.982090][T31064] dummy0: entered promiscuous mode [ 739.987327][T31064] dummy0: entered allmulticast mode [ 739.994010][T31064] team0: Device macvtap1 failed to register rx_handler [ 740.001240][T31064] dummy0: left allmulticast mode [ 740.006320][T31064] dummy0: left promiscuous mode [ 740.093038][T31067] IPVS: set_ctl: invalid protocol: 98 224.0.0.1:20003 [ 740.169312][T31071] 9pnet_fd: Insufficient options for proto=fd [ 740.227805][T31072] siw: device registration error -23 [ 740.415667][T31082] siw: device registration error -23 [ 740.437593][T31084] netlink: 19 bytes leftover after parsing attributes in process `syz.3.9225'. [ 740.543575][T31092] netlink: 'syz.7.9229': attribute type 4 has an invalid length. [ 740.560774][T31092] netlink: 'syz.7.9229': attribute type 4 has an invalid length. [ 740.561791][T31094] loop3: detected capacity change from 0 to 512 [ 740.577035][T31094] EXT4-fs: quotafile must be on filesystem root [ 740.634592][T31098] tipc: Enabled bearer , priority 0 [ 740.642533][T31097] tipc: Resetting bearer [ 740.658592][T31097] tipc: Disabling bearer [ 740.886595][T31122] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9242'. [ 740.895874][T31123] siw: device registration error -23 [ 740.940798][T31126] FAULT_INJECTION: forcing a failure. [ 740.940798][T31126] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 740.954028][T31126] CPU: 1 UID: 0 PID: 31126 Comm: syz.3.9243 Not tainted syzkaller #0 PREEMPT(voluntary) [ 740.954064][T31126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 740.954081][T31126] Call Trace: [ 740.954135][T31126] [ 740.954145][T31126] __dump_stack+0x1d/0x30 [ 740.954175][T31126] dump_stack_lvl+0xe8/0x140 [ 740.954201][T31126] dump_stack+0x15/0x1b [ 740.954222][T31126] should_fail_ex+0x265/0x280 [ 740.954266][T31126] should_fail+0xb/0x20 [ 740.954366][T31126] should_fail_usercopy+0x1a/0x20 [ 740.954393][T31126] strncpy_from_user+0x25/0x230 [ 740.954449][T31126] path_setxattrat+0xeb/0x310 [ 740.954505][T31126] __x64_sys_fsetxattr+0x6b/0x80 [ 740.954609][T31126] x64_sys_call+0x1ced/0x3000 [ 740.954633][T31126] do_syscall_64+0xd2/0x200 [ 740.954720][T31126] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 740.954749][T31126] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 740.954775][T31126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.954824][T31126] RIP: 0033:0x7fc43e1defc9 [ 740.954841][T31126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 740.954861][T31126] RSP: 002b:00007fc43cc3f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 740.954881][T31126] RAX: ffffffffffffffda RBX: 00007fc43e435fa0 RCX: 00007fc43e1defc9 [ 740.954895][T31126] RDX: 0000200000000440 RSI: 0000200000000000 RDI: 0000000000000003 [ 740.954909][T31126] RBP: 00007fc43cc3f090 R08: 0000000000000001 R09: 0000000000000000 [ 740.954929][T31126] R10: 000000000000002c R11: 0000000000000246 R12: 0000000000000001 [ 740.954942][T31126] R13: 00007fc43e436038 R14: 00007fc43e435fa0 R15: 00007ffe938bc238 [ 740.954971][T31126] [ 741.190537][T31133] tipc: Enabled bearer , priority 0 [ 741.198395][T31132] tipc: Resetting bearer [ 741.212261][T31132] tipc: Disabling bearer [ 741.339328][T31136] lo speed is unknown, defaulting to 1000 [ 741.455663][T31142] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 741.789668][T31142] rdma_op ffff8881701b3d80 conn xmit_rdma 0000000000000000 [ 741.817682][T31151] lo speed is unknown, defaulting to 1000 [ 742.007471][T31167] netlink: 19 bytes leftover after parsing attributes in process `syz.4.9258'. [ 742.011682][T31168] siw: device registration error -23 [ 742.053186][T31165] tipc: Enabled bearer , priority 0 [ 742.062762][T31164] tipc: Resetting bearer [ 742.076575][T31164] tipc: Disabling bearer [ 742.224233][T31170] lo speed is unknown, defaulting to 1000 [ 742.247445][T31175] loop5: detected capacity change from 0 to 2048 [ 742.262089][T31175] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 742.275636][T31175] ext4 filesystem being mounted at /330/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 742.353704][T31184] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.9261: bg 0: block 345: padding at end of block bitmap is not set [ 742.396084][T31183] lo speed is unknown, defaulting to 1000 [ 742.410764][T31184] EXT4-fs (loop5): Remounting filesystem read-only [ 742.496750][T26004] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 742.520000][T31193] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9264'. [ 742.575783][T31195] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 742.779158][T31202] netlink: 'syz.3.9268': attribute type 4 has an invalid length. [ 742.810750][T31202] netlink: 'syz.3.9268': attribute type 4 has an invalid length. [ 742.872352][T31208] 9pnet_fd: Insufficient options for proto=fd [ 742.914647][T31206] tipc: Started in network mode [ 742.919604][T31206] tipc: Node identity 4ec3e3cf93b4, cluster identity 4711 [ 742.927096][T31206] tipc: Enabled bearer , priority 0 [ 742.937346][T31205] tipc: Resetting bearer [ 742.944890][T31211] siw: device registration error -23 [ 742.970137][T31205] tipc: Disabling bearer [ 742.984959][T31213] loop3: detected capacity change from 0 to 1024 [ 742.992412][T31213] EXT4-fs: Ignoring removed nomblk_io_submit option [ 743.000995][T31213] EXT4-fs: inline encryption not supported [ 743.006993][T31213] EXT4-fs: Ignoring removed nomblk_io_submit option [ 743.032325][T31213] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 743.049580][T31195] rdma_op ffff8881701b1580 conn xmit_rdma 0000000000000000 [ 743.076588][T31213] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.9272: Allocating blocks 449-513 which overlap fs metadata [ 743.090927][T31213] EXT4-fs (loop3): pa ffff8881006f18c0: logic 256, phys. 385, len 8 [ 743.099155][T31213] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 743.130659][T31224] loop6: detected capacity change from 0 to 256 [ 743.149663][T31224] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 743.160436][T31220] loop4: detected capacity change from 0 to 2048 [ 743.181817][T31220] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 743.195909][T31220] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 743.224441][T31230] netlink: 68 bytes leftover after parsing attributes in process `syz.6.9275'. [ 743.248167][T31220] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.9274: bg 0: block 345: padding at end of block bitmap is not set [ 743.262650][T31226] ================================================================== [ 743.262694][T31226] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 743.280595][T31226] [ 743.282925][T31226] read-write to 0xffffffff868099c0 of 8 bytes by interrupt on cpu 0: [ 743.290999][T31226] tick_do_update_jiffies64+0x113/0x1c0 [ 743.296662][T31226] tick_nohz_handler+0x7f/0x2d0 [ 743.301537][T31226] __hrtimer_run_queues+0x20f/0x5a0 [ 743.306751][T31226] hrtimer_interrupt+0x21a/0x460 [ 743.311708][T31226] __sysvec_apic_timer_interrupt+0x5f/0x1d0 [ 743.317623][T31226] sysvec_apic_timer_interrupt+0x6f/0x80 [ 743.323294][T31226] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 743.329294][T31226] console_flush_all+0x51b/0x6a0 [ 743.334248][T31226] console_unlock+0xa1/0x2e0 [ 743.338850][T31226] vprintk_emit+0x3b5/0x580 [ 743.343371][T31226] vprintk_default+0x26/0x30 [ 743.347980][T31226] vprintk+0x1d/0x30 [ 743.351901][T31226] _printk+0x79/0xa0 [ 743.355828][T31226] __ext4_error+0x248/0x320 [ 743.360345][T31226] ext4_validate_block_bitmap+0x547/0x580 [ 743.366092][T31226] ext4_wait_block_bitmap+0xda/0x150 [ 743.371401][T31226] ext4_mb_init_cache+0x2f1/0xba0 [ 743.376455][T31226] ext4_mb_init_group+0x25b/0x3f0 [ 743.381499][T31226] ext4_mb_load_buddy_gfp+0x72a/0x790 [ 743.386897][T31226] ext4_mb_find_by_goal+0xfe/0x710 [ 743.392025][T31226] ext4_mb_regular_allocator+0x9a/0x15e0 [ 743.397717][T31226] ext4_mb_new_blocks+0x800/0x2080 [ 743.402851][T31226] ext4_ext_map_blocks+0xff5/0x38a0 [ 743.408077][T31226] ext4_map_blocks+0x5ee/0xd00 [ 743.412859][T31226] ext4_do_writepages+0xef6/0x2750 [ 743.417998][T31226] ext4_writepages+0x176/0x300 [ 743.422783][T31226] do_writepages+0x1c6/0x310 [ 743.427385][T31226] __filemap_fdatawrite_range+0xfb/0x140 [ 743.433038][T31226] generic_fadvise+0x312/0x430 [ 743.437826][T31226] __x64_sys_fadvise64+0xcb/0x110 [ 743.442871][T31226] x64_sys_call+0x29c5/0x3000 [ 743.447574][T31226] do_syscall_64+0xd2/0x200 [ 743.452090][T31226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.458024][T31226] [ 743.460354][T31226] read to 0xffffffff868099c0 of 8 bytes by task 31226 on cpu 1: [ 743.467993][T31226] mem_cgroup_flush_stats_ratelimited+0x29/0x70 [ 743.474263][T31226] count_shadow_nodes+0x6a/0x230 [ 743.479207][T31226] do_shrink_slab+0x63/0x680 [ 743.483818][T31226] shrink_slab+0x448/0x760 [ 743.488249][T31226] shrink_node+0x6c3/0x2120 [ 743.492771][T31226] do_try_to_free_pages+0x3f6/0xcd0 [ 743.497977][T31226] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 743.503885][T31226] try_charge_memcg+0x383/0xa10 [ 743.508747][T31226] obj_cgroup_charge_pages+0xa6/0x150 [ 743.514145][T31226] __memcg_kmem_charge_page+0x9f/0x170 [ 743.519626][T31226] __alloc_frozen_pages_noprof+0x188/0x360 [ 743.525460][T31226] alloc_pages_mpol+0xb3/0x260 [ 743.530234][T31226] alloc_pages_noprof+0x90/0x130 [ 743.535187][T31226] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 743.541017][T31226] __kvmalloc_node_noprof+0x483/0x670 [ 743.546413][T31226] ip_set_alloc+0x24/0x30 [ 743.550766][T31226] hash_netiface_create+0x282/0x740 [ 743.556422][T31226] ip_set_create+0x3cc/0x970 [ 743.561035][T31226] nfnetlink_rcv_msg+0x4c6/0x590 [ 743.566007][T31226] netlink_rcv_skb+0x123/0x220 [ 743.570801][T31226] nfnetlink_rcv+0x167/0x16c0 [ 743.575490][T31226] netlink_unicast+0x5c0/0x690 [ 743.580273][T31226] netlink_sendmsg+0x58b/0x6b0 [ 743.585060][T31226] __sock_sendmsg+0x145/0x180 [ 743.589748][T31226] ____sys_sendmsg+0x31e/0x4e0 [ 743.594632][T31226] ___sys_sendmsg+0x17b/0x1d0 [ 743.599329][T31226] __x64_sys_sendmsg+0xd4/0x160 [ 743.604199][T31226] x64_sys_call+0x191e/0x3000 [ 743.608890][T31226] do_syscall_64+0xd2/0x200 [ 743.613408][T31226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.619313][T31226] [ 743.621641][T31226] value changed: 0x000000010000ad23 -> 0x000000010000ad25 [ 743.628754][T31226] [ 743.631091][T31226] Reported by Kernel Concurrency Sanitizer on: [ 743.637245][T31226] CPU: 1 UID: 0 PID: 31226 Comm: syz.5.9276 Not tainted syzkaller #0 PREEMPT(voluntary) [ 743.647065][T31226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 743.657132][T31226] ================================================================== [ 743.667656][T31220] EXT4-fs (loop4): Remounting filesystem read-only [ 743.723803][T30465] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 743.823430][T30351] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.