last executing test programs: 3m16.882297272s ago: executing program 32 (id=58): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) tee(r1, r0, 0x7, 0x8) sigaltstack(0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000680)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@lazytime}, {@noload}]}, 0x3, 0x45c, &(0x7f0000002400)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c0000000800124000000000050005000a000000050004000000000010000300686173683a69"], 0x5c}}, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) pause() fcntl$setlease(r5, 0x400, 0x0) fremovexattr(r5, &(0x7f00000000c0)=@known='trusted.overlay.metacopy\x00') pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010200000000000000000a0000010500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) bind$unix(r2, &(0x7f00000003c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 3m3.184574429s ago: executing program 33 (id=263): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000a40), 0x1, 0x55e, &(0x7f0000000a80)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r2, 0x0, 0x5}, 0x18) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) (fail_nth: 2) 3m1.382894137s ago: executing program 34 (id=283): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x7f, 0x0, 0x0, 0xb9ff, 0xa}) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)) syz_open_pts(r0, 0x101000) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x17) 3m0.859944697s ago: executing program 35 (id=287): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r3}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000000)={&(0x7f00000057c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b707000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000080), &(0x7f0000000240)=r6}, 0x20) write$UHID_CREATE(r6, &(0x7f0000000680)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000180)=""/184, 0xb8, 0x0, 0xfffffffc, 0xe5, 0x3, 0x16ca2bc3}}, 0x120) write$selinux_attr(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 2m59.176555986s ago: executing program 36 (id=293): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x5452, &(0x7f0000000a00)={'veth0_to_bridge\x00', @dev}) recvmsg$unix(r1, 0x0, 0x0) close(r0) 2m45.074137345s ago: executing program 37 (id=459): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000f300"/21], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000001811000062f7b95a5aa4db5c0552249e4489dab4e00504db6f07d91c826793d2ac7a30204a36a054236a393559f955dcf40e0700b9557742", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000003e000701fcf7fffffedbdf25017c00000c0004"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x7}, 0x18) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0xa4b00, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x3a) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x3) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f0000000200)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x6f}, 0x94) 2m44.34902646s ago: executing program 38 (id=465): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) 2m43.763347605s ago: executing program 3 (id=474): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) setregid(0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001100)=@nat={'nat\x00', 0x1b, 0x5, 0x6b0, 0xd0, 0xd0, 0xffffffff, 0xd0, 0x2f8, 0x5e0, 0x5e0, 0xffffffff, 0x5e0, 0x5e0, 0x5, &(0x7f0000000240), {[{{@ipv6={@local, @empty, [0xffffffff, 0xffffff00, 0xff000000, 0xff], [0xff000000, 0x0, 0xff, 0xffffff00], 'bridge0\x00', 'veth0_to_bond\x00', {}, {}, 0x2, 0x40, 0x2, 0x45}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x9}}}, {{@ipv6={@loopback, @loopback, [0xff, 0xffffff00, 0xff], [0xffffff00, 0xffffff00, 0xffffff00, 0xff], 'veth0_to_bond\x00', 'hsr0\x00', {0xff}, {}, 0x33, 0x0, 0x0, 0x14}, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x8, [0x1, 0x8a], 0x3, 0x2, 0x3, [@loopback, @remote, @ipv4={'\x00', '\xff\xff', @multicast2}, @remote, @remote, @loopback, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, @mcast1, @empty, @local, @local, @empty], 0x6}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0xa, @ipv6=@loopback, @ipv4=@multicast1, @icmp_id=0x64, @port=0x4e20}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xff000000, 0xffffff00, 0x0, 0xff], [0xff, 0xffffffff, 0xffffff00, 0xff000000], 'bond0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x21, 0x1, 0x0, 0x44}, 0x0, 0xd0, 0x1f8, 0x0, {}, [@common=@ipv6header={{0x28}, {0x4, 0x51, 0x1}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x8000, 'system_u:object_r:unconfined_execmem_exec_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x4, @ipv6=@loopback, @ipv4=@empty, @port=0x4e21, @port=0x4e20}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x710) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e23, @private=0xa010101}]}, &(0x7f0000000180)=0x10) unshare(0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="020000000000000002000000e000000200e70000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000200fffc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x190) socket$nl_rdma(0x10, 0x3, 0x14) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011000000180100002020692500000000002020207b1af8ff00000000bfa110000000be8214b00000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40040, 0x0) ioctl$TUNSETIFF(r4, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) mkdir(&(0x7f0000000580)='./file0\x00', 0x92) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) ioctl$TUNSETIFF(r5, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x411}) 2m42.485868832s ago: executing program 3 (id=481): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)="88", 0x1}], 0x1}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}], 0x10) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000004c0)="99", 0x1}], 0x1}, 0x4048043) r4 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e24, @local}], 0x10) sendto$inet6(r4, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000000)={@mcast2, @dev={0xac, 0x14, 0x14, 0x25}, 0x19, 0xe}}) bind$bt_hci(r5, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_submit(r6, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r5, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 2m41.553337364s ago: executing program 3 (id=484): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kfree\x00', r7, 0x0, 0x40}, 0x18) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c000240"], 0x118}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close_range(r8, 0xffffffffffffffff, 0x200000000000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) 2m40.56513923s ago: executing program 3 (id=489): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x8080, &(0x7f0000000500)={[{@norecovery}, {@grpquota}, {@sysvgroups}, {@lazytime}]}, 0xee, 0x49b, &(0x7f0000000a40)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000019240)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x7c}}, 0x4004944) sendmsg$NFT_BATCH(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a0102000000000000"], 0x64}}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = gettid() bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) read$ptp(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x16}) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x800000, &(0x7f0000019200)=ANY=[@ANYBLOB='{\x00\x00\x00\x00\x00\x00\x00,rfd', @ANYRESHEX, @ANYBLOB=',wfdno', @ANYBLOB]) open(&(0x7f0000000040)='./file2\x00', 0x141042, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) 2m39.953747236s ago: executing program 3 (id=492): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)="88", 0x1}], 0x1}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}], 0x10) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000004c0)="99", 0x1}], 0x1}, 0x4048043) r4 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e24, @local}], 0x10) sendto$inet6(r4, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000000)={@mcast2, @dev={0xac, 0x14, 0x14, 0x25}, 0x19, 0xe}}) bind$bt_hci(r5, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_submit(r6, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r5, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 2m39.568666196s ago: executing program 3 (id=497): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x9) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}}, 0x0) 2m39.555255147s ago: executing program 39 (id=497): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x9) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}}, 0x0) 2m25.864708324s ago: executing program 5 (id=601): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000"], 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_CONTROL(r2, 0x8008551c, &(0x7f0000000180)={0x1, 0x18, 0x0, 0x1, 0x0, 0x0, 0x0}) 2m25.684655638s ago: executing program 5 (id=604): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700fd000400000000010000002800000012ce8f9106dfc500bce930a517d58460cbadb26fb920846721e2c5c37711e5ecab4e5194a5e36ed23e29f4a0f8ede222cdee536d942db4b4d00a5af2bb19939c32458f244d992436d93a69428d5e3bff5846d606fb9986200b592bb47d60938ae8d53bfd20990dc05172c817c4e912aba1fd93d44b10ed", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000006ffffe018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x1, 0x80, 0x8000000, 0x8000021e}, &(0x7f00000001c0), &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xf, 0x0, 0x0, 0x7995}, 0x10007, 0x0, 0x0, 0x48000000, 0x0, 0x40000000, 0x0}) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r5}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) io_setup(0x7f, &(0x7f0000000140)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) 2m25.504730331s ago: executing program 5 (id=612): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@empty}, 0x20) 2m25.406416109s ago: executing program 5 (id=614): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x8080, &(0x7f0000000500)={[{@norecovery}, {@grpquota}, {@sysvgroups}, {@lazytime}]}, 0xee, 0x49b, &(0x7f0000000a40)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000019240)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x7c}}, 0x4004944) r2 = gettid() bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r3, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x16}) timer_settime(r4, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x800000, &(0x7f0000019200)=ANY=[@ANYBLOB='{\x00\x00\x00\x00\x00\x00\x00,rfd', @ANYRESHEX, @ANYBLOB=',wfdno', @ANYBLOB]) open(&(0x7f0000000040)='./file2\x00', 0x141042, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) 2m24.380927787s ago: executing program 5 (id=625): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@empty}, 0x20) 2m24.188596672s ago: executing program 5 (id=628): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3a, 0x1, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$packet(0x11, 0x3, 0x300) bind$packet(r2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRES8=r0, @ANYBLOB="74ed8f5b5c7de41433d509587cfbe4f07be860f5d3e882f9a336b110292e30a8224eb55ce608e64fd0baa35b9231caaf1eccf09415d5b540493d5383223efe231a3f902859635146c954ae7564b8f9e86b9fe92fdf741eef057b5a9127d24d1d4b081c46727b2d45a979dad57a2eb4", @ANYRES16=r1, @ANYRES32=r2, @ANYBLOB="382db23129d4613189c665dd871079c61fbb22c3ba508b4ced25a178838de97070b87182985e4191f4bbd0d7d84c8c9fedcca555a2ba00af9630247b2dd750c0545455e181ccdc43adbbe5deea9ca304bd177e9e9ddd0e6f05d8787f1aa72006ae08afe7acdcdefe6b518b2da807c33b5c24cda7f18eba94cd388e116eac6583d6e3f09b5082194fd1a1b38790436f2f2408e0bba33f8248c989c6215d1d360a0d79b2375821a5e6a87ad9bd9f78fd99f8dc2fabbf86fef5f7af44b9b2290aaad46bfbb313e700977959fd7d35dc67a0ccb4bdffb574cb70d5e185cbe69238e552e73e92cfbf381c843367646cfad02ec9c102dc5f178910"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r6}, 0x10) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r7, 0x400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r5}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r8, &(0x7f00000005c0)={0x9, {"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", 0x1000}}, 0x1006) 2m24.171344883s ago: executing program 40 (id=628): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3a, 0x1, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$packet(0x11, 0x3, 0x300) bind$packet(r2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRES8=r0, @ANYBLOB="74ed8f5b5c7de41433d509587cfbe4f07be860f5d3e882f9a336b110292e30a8224eb55ce608e64fd0baa35b9231caaf1eccf09415d5b540493d5383223efe231a3f902859635146c954ae7564b8f9e86b9fe92fdf741eef057b5a9127d24d1d4b081c46727b2d45a979dad57a2eb4", @ANYRES16=r1, @ANYRES32=r2, @ANYBLOB="382db23129d4613189c665dd871079c61fbb22c3ba508b4ced25a178838de97070b87182985e4191f4bbd0d7d84c8c9fedcca555a2ba00af9630247b2dd750c0545455e181ccdc43adbbe5deea9ca304bd177e9e9ddd0e6f05d8787f1aa72006ae08afe7acdcdefe6b518b2da807c33b5c24cda7f18eba94cd388e116eac6583d6e3f09b5082194fd1a1b38790436f2f2408e0bba33f8248c989c6215d1d360a0d79b2375821a5e6a87ad9bd9f78fd99f8dc2fabbf86fef5f7af44b9b2290aaad46bfbb313e700977959fd7d35dc67a0ccb4bdffb574cb70d5e185cbe69238e552e73e92cfbf381c843367646cfad02ec9c102dc5f178910"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r6}, 0x10) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r7, 0x400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r5}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r8, &(0x7f00000005c0)={0x9, {"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", 0x1000}}, 0x1006) 2m20.281795471s ago: executing program 1 (id=671): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700fd000400000000010000002800000012ce8f9106dfc500bce930a517d58460cbadb26fb920846721e2c5c37711e5ecab4e5194a5e36ed23e29f4a0f8ede222cdee536d942db4b4d00a5af2bb19939c32458f244d992436d93a69428d5e3bff5846d606fb9986200b592bb47d60938ae8d53bfd20990dc05172c817c4e912aba1fd93d44b10ed", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000006ffffe018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x1, 0x80, 0x8000000, 0x8000021e}, &(0x7f00000001c0), &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xf, 0x0, 0x0, 0x7995}, 0x10007, 0x0, 0x0, 0x48000000, 0x0, 0x40000000, 0x0}) socket$unix(0x1, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) 2m20.241461554s ago: executing program 1 (id=672): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007009300000000000c0001"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 2m20.101559924s ago: executing program 7 (id=674): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) 2m20.101178734s ago: executing program 1 (id=675): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r1}, 0x18) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) syz_clone(0x20a000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) sendto$inet(r3, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) 2m20.063707727s ago: executing program 7 (id=676): setresuid(0x0, 0xee01, 0xffffffffffffffff) 2m19.992617503s ago: executing program 7 (id=677): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) creat(0x0, 0x0) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) dup(0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001c80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40800) write$nci(r0, &(0x7f0000005c40)=ANY=[@ANYBLOB="6103057fac0603f936"], 0x12) 2m19.980745234s ago: executing program 1 (id=678): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x8080, &(0x7f0000000500)={[{@norecovery}, {@grpquota}, {@sysvgroups}, {@lazytime}]}, 0xee, 0x49b, &(0x7f0000000a40)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000019240)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a0102000000000000"], 0x64}}, 0x0) r2 = gettid() bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r3, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x16}) timer_settime(r4, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x800000, &(0x7f0000019200)=ANY=[@ANYBLOB='{\x00\x00\x00\x00\x00\x00\x00,rfd', @ANYRESHEX, @ANYBLOB=',wfdno', @ANYBLOB]) open(&(0x7f0000000040)='./file2\x00', 0x141042, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) 2m19.142733768s ago: executing program 7 (id=688): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x8080, &(0x7f0000000500)={[{@norecovery}, {@grpquota}, {@sysvgroups}, {@lazytime}]}, 0xee, 0x49b, &(0x7f0000000a40)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000019240)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a0102000000000000"], 0x64}}, 0x0) r1 = gettid() bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r2, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x16}) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x800000, &(0x7f0000019200)=ANY=[@ANYBLOB='{\x00\x00\x00\x00\x00\x00\x00,rfd', @ANYRESHEX, @ANYBLOB=',wfdno', @ANYBLOB]) open(&(0x7f0000000040)='./file2\x00', 0x141042, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) 2m19.091400732s ago: executing program 1 (id=691): unshare(0x22020600) 2m18.772325546s ago: executing program 1 (id=693): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESHEX], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sync() sync() setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000007c0), 0x4) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @none={0x0, 0xffff}}, 0x14) keyctl$read(0xb, 0x0, &(0x7f0000002140)=""/56, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x18) r2 = getpgrp(0x0) r3 = syz_pidfd_open(r2, 0x0) r4 = pidfd_getfd(r3, r3, 0x0) setns(r4, 0x14020000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={r4}, 0x4) getpeername$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000600)=0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r5, 0xfffffffffffffffe, r5, 0x1) keyctl$reject(0x13, r5, 0xa26, 0x3, r5) ioctl$EXT4_IOC_SETFSUUID(0xffffffffffffffff, 0x4008662c, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000300)={0x2, &(0x7f0000000100)=[{0x28, 0x8, 0x0, 0xfffff034}, {0x2006, 0x0, 0x9, 0x401}]}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x11}, 0x9}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r6, 0x18000000000002a0, 0x10, 0x0, &(0x7f0000000140)="b9158edfaa57fef007fdffffffffffff", 0x0, 0xdc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m18.741783368s ago: executing program 41 (id=693): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESHEX], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sync() sync() setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000007c0), 0x4) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @none={0x0, 0xffff}}, 0x14) keyctl$read(0xb, 0x0, &(0x7f0000002140)=""/56, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x18) r2 = getpgrp(0x0) r3 = syz_pidfd_open(r2, 0x0) r4 = pidfd_getfd(r3, r3, 0x0) setns(r4, 0x14020000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={r4}, 0x4) getpeername$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000600)=0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r5, 0xfffffffffffffffe, r5, 0x1) keyctl$reject(0x13, r5, 0xa26, 0x3, r5) ioctl$EXT4_IOC_SETFSUUID(0xffffffffffffffff, 0x4008662c, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000300)={0x2, &(0x7f0000000100)=[{0x28, 0x8, 0x0, 0xfffff034}, {0x2006, 0x0, 0x9, 0x401}]}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x11}, 0x9}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r6, 0x18000000000002a0, 0x10, 0x0, &(0x7f0000000140)="b9158edfaa57fef007fdffffffffffff", 0x0, 0xdc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m18.304557762s ago: executing program 0 (id=696): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cf84ded40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c86e00f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec231fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895012f1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c3405000000000000003871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d37261774cc5a3bf6b466cb72812da518ff602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d50a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a31b16ac5fb73fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953f88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a5fe1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9d66ebbc8bab4ea81232fbef665f6212f875b2a00000000000000aceb111b66a500ca52fd8f848088c67ee65dfdcc4c580e9bc18c1699dca07d019bf1bf9dd3da480d6c155d7e60674ce88ab5ae07a9d16e22792d99986b531ab4e592ab5925da779e700cf20309a2137877690dc5c07956fc82d7b3bb46d3138041af18508938c9be4e5d0a98073463a5cff6c146d020743da474cb81677a6f389f0e00c33b70b7f8bab95435c27167f365a29fb09cbf35bf192f6a65616fa2ad9a6c7ca3a3ecd96aaecd993e8badb40e7eb8a22b0015e70c885cd519e28448168c6d914265998bff74ea1b0e651a6cae9419096248a0e41573827ad60fafce6e6540734c1f23f75337d836c31497e8112969a039d65aa297e2b046b5f4d11116a89f9f65693d4dc3e70fbfe0b2044fdb3f87e887d1daae8e38a0c19f668f776e19a02bb2449ee4384f6536879c85d7e41bc0276ee2b125d41ff358323311703ec01d64a573bdeb75bdcc87d01de38365ab9222713d2d1640a742d62fefb5403b2ed9969c32a0841e8c36b0107bb888eb14ac62e6d4bdfaeb9ee7436b97bf3825a19d6c8997ce285edf1d277ed703f560460417bfe702af833e83c5b987befb6d1fcf765ab7ea537d9dafb622a1ba8686cb9b1c63b84470364942e90d1cf856cead864f5e38c83b9ed86cc5725a20299ce512b1"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0xa) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x3, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x2, @in=@local, 0x6, 0x4, 0x3, 0x0, 0x401}]}]}, 0xfc}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 2m18.245516777s ago: executing program 0 (id=697): socket$unix(0x1, 0x2, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000280)={'ipvlan0\x00', {0x2, 0x4e24, @rand_addr=0xac141437}}) 2m18.176635182s ago: executing program 7 (id=699): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000680003"], 0x118}}, 0x0) 2m18.144045294s ago: executing program 0 (id=700): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700fd000400000000010000002800000012ce8f9106dfc500bce930a517d58460cbadb26fb920846721e2c5c37711e5ecab4e5194a5e36ed23e29f4a0f8ede222cdee536d942db4b4d00a5af2bb19939c32458f244d992436d93a69428d5e3bff5846d606fb9986200b592bb47d60938ae8d53bfd20990dc05172c817c4e912aba1fd93d44b10ed", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000006ffffe018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) 2m18.089203749s ago: executing program 0 (id=701): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x8080, &(0x7f0000000500)={[{@norecovery}, {@grpquota}, {@sysvgroups}, {@lazytime}]}, 0xee, 0x49b, &(0x7f0000000a40)="$eJzs3EtsG0UYAOB/HefVBw2lPFpaCJRHBTRp0gc9cAGBxAEkJDgUcQppWpWmDWqCRKsICodyRJW4I45I3JE4wQUBB4TEFe6oUoVyaeG0aO1d10ls5+XGLf4+yc7M7joz/85OdjJjO4CuNZw9JRHbIuKPiNhRzS4+YLj64+bC/OQ/C/OTSaTpm38nleNuLMxPFocWr9tazaRpRH+W7G9Q7pV3Iiamp6cu5PnRuXPvj85evHTwzLmJ01Onp86PHz9+5PC+vmPjRyv70yb1710hvlL+M4vrxp6PZvbufvXtq69Pnrj67s/fZPXdlu+vj2Nd0uU1HK6e3aUezZ6e3FBhd5Rfs6ftdRuScvODRzahQqxeT0SUa/0oiZ4YrO3bEa982sGqAbdZmqZpo/tz1N23U+B/KtG/oUsV9/rs/9/isTkjjzvD9Rcj4mCeWZifvFmLv1ybO+hd8v9tOw1HxInL/36ZPaId8xAAACv4Phv/PNdo/FeKB+qOuydfQxmKiHsjYmdE3BcRuyLi/ojKsQ9GnHtojeUvXSFZPv4pXVtXYKuUjf9eyNe2bi4a/xWjvxjqyXPbK/H3JqfOTE8dys/Jgejtz/JjLcr44eXfPy/SA0v21Y//skdWfjEWzOtxrbxkgu7kxNxEJZGm6ccbCz+ufxKxp9wo/iSKZZwkInZHxJ51lnHmma/3Ntu3cvwttFhnWq30q4inq+1/efH4/1ZTJfXrk4MRUVufHHv+2PjR0YGYnjo0WlwVy/3y25U3mpW/ofjbIGv/LQ2v/9oq8FAyEDF78dLZynrt7NrLuPLnZ3V9etHqchZ/6duINV//fclblXRfvu3Dibm5C2MRfclry7eP33ptkS+Oz+I/sL9x/99ZV+OHIyK7iPdFxCP5Im7Wdo9FxOMRsb9F/D+99MR7zfY1b/9ms/LtdT0/US3bP+rbf+2JnrM/ftes/OF8DTLy89C4/Y9UUgfyLbW/fy2stoLrOmkAAABwlylV3gOflEZq6VJpZKT6Hv5dsaU0PTM79+ypmQ/On6y+V34oekvFTNeOuvnQsXxuuMiPL8kfzueNv+gZrORHJmemT3Y6eOhyW5v0/8xfPZ2uHXDbtWEdDbhL6f/QvfR/6F76P3Qv/R+6V6P+v9EPFgB3B/d/6F6V/v/U5U5XA+gA93/oXvo/dKWmn40vbegj/00TSbt/YcNE8d0Jm1HWyoniuyg2vfTBdb98YOVTF6XOntWuSZSXtUWU21pEf8NdHfyjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Eb/BQAA///i5tKw") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000019240)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a0102000000000000"], 0x64}}, 0x0) r2 = gettid() bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r3, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x16}) timer_settime(r4, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x800000, &(0x7f0000019200)=ANY=[@ANYBLOB='{\x00\x00\x00\x00\x00\x00\x00,rfd', @ANYRESHEX, @ANYBLOB=',wfdno', @ANYBLOB]) open(&(0x7f0000000040)='./file2\x00', 0x141042, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) 2m17.685098719s ago: executing program 7 (id=702): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c000240"], 0x118}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) close_range(r7, 0xffffffffffffffff, 0x200000000000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) 2m17.684824869s ago: executing program 42 (id=702): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c000240"], 0x118}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) close_range(r7, 0xffffffffffffffff, 0x200000000000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) 2m17.221916765s ago: executing program 0 (id=706): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r1}, 0x18) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) syz_clone(0x20a000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) sendto$inet(r3, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) 2m16.798477027s ago: executing program 0 (id=707): r0 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) (fail_nth: 2) 2m16.754668531s ago: executing program 43 (id=707): r0 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) (fail_nth: 2) 2.201543421s ago: executing program 8 (id=3209): bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe64, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) socket(0xa, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000800000000000000000000000000850000000e0000000000950000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$rds(r1, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4000) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) removexattr(0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000004000/0x4000)=nil) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000007733337edc1cc8e1b1bb5fd8ef4650efb9568ce4ebab1209824ffe627ef0a5e25c47fbe044e0c5f808f604be85f358ec929800a5451b30751473bcc4a621f0e1fe711f0f98d32d62a56ca87f920fafa249a9ad4b73d6fdff9b01030adadc2c2d5cd1dd64d208e5063e97460d9b90f286abab52e095f58f88773c27db", @ANYRES32=0x0, @ANYBLOB], 0x48) capget(&(0x7f0000000200)={0x20071026}, &(0x7f0000000300)={0x1, 0x80000000, 0x47f, 0x85, 0x5, 0x8}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x8002) 1.813667361s ago: executing program 8 (id=3212): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000200), &(0x7f0000000240)=r5}, 0x20) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x2, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x4000) 1.809626121s ago: executing program 6 (id=3213): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) 1.794087853s ago: executing program 6 (id=3214): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x8080, &(0x7f0000000500)={[{@norecovery}, {@grpquota}, {@sysvgroups}, {@lazytime}]}, 0xee, 0x49b, &(0x7f0000000a40)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000019240)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a0102000000000000"], 0x64}}, 0x0) r2 = gettid() bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r3, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x16}) timer_settime(r4, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x800000, &(0x7f0000019200)=ANY=[@ANYBLOB='{\x00\x00\x00\x00\x00\x00\x00,rfd', @ANYRESHEX, @ANYBLOB=',wfdno', @ANYBLOB]) open(&(0x7f0000000040)='./file2\x00', 0x141042, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) 1.752609506s ago: executing program 8 (id=3215): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000005c0)={[{@nojournal_checksum}, {@min_batch_time={'min_batch_time', 0x3d, 0x6}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x0, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0xfffffffffffffffe) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000500)='kfree\x00', r3}, 0x18) r4 = socket$inet_sctp(0x2, 0x5, 0x84) close(r4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}], 0x1, &(0x7f0000000180)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r6}}], 0x20, 0x2400e044}, 0x0) 1.632222035s ago: executing program 8 (id=3217): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x5, 0x100000000}, 0x4, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0x4, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)="2e0000001000818807b62aa73f72cc9f0ba1f8483a0000005e120602000300000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20008800) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000640)={0x4, 0x0}, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, 0x0, &(0x7f00000005c0)}, 0x20) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r5 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain={'key_or_keyring:', r5}) r6 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000740)=ANY=[], 0x0, 0x8000000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000280), &(0x7f00000001c0)=r6}, 0x20) r8 = syz_io_uring_setup(0x1b44, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x400252}, &(0x7f0000000340)=0x0, &(0x7f0000000300)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_enter(r8, 0x627, 0x4c1, 0x43, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r0, @ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000200)=0x8000161) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r10}, 0x18) socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.555669361s ago: executing program 9 (id=3220): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000ac0)='kmem_cache_free\x00', r0}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x200001a, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 1.539590042s ago: executing program 9 (id=3221): quotactl$Q_QUOTAON(0xffffffff80000201, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000cc0)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 1.517988443s ago: executing program 9 (id=3222): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYRESOCT], 0x0, 0x50, 0x0, 0x1, 0x9}, 0x28) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000009500060000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1, 0x6}, 0x112026, 0x0, 0x2, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000e40)="d8000000180081064a81f782db44b904021d080400007c09e8fe55a10a0015c0050014a603600e1208000f0000000401a80016009a00014004000000036010fab94dcf5c0461c1d6900094007134cf6ee080000190d0a2ac922353a606487ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00320db70103000040fad95667dc06dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x48084) r2 = memfd_create(&(0x7f0000000cc0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\xd5\xfd\xa9\r\xac7V\xf2\x93A\x94k\xcd\t\x00\x90\xbe\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\agB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\x9f#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xd8\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x96!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2_\x16\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0V\\w\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x17fNo\xb3\x1d\xbb\xcaI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%UH\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\x02Y\x8e\xae\xf5m\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5\x04\x00\x00\x00\x00\x00\x00\x00\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9\xcfJ\t}\xd4:\xe4\xbe\x1c\x10\n\xc6hPO\xeagxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!D\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\xca\xc5kz\x8e9\xd6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa3d5V\x80\x1a\x90\x10\xe3\xdf%\xfdz\xf7\x9aE\xe6\x9b\x00'/993, 0x3) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x10, 0x1000000}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x13, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000080000000000000000000850000007d0000009543f57927a712d82e8ffadd7ab553181725d553b1db8a9459a89f4645ffe3e7a89b6936e171158cb851c9ae207d6bfe07e44af243b35ba48566396f4b3d9f1b59f2d6ff8c2e2b33be3ce5deac0968aa2706b1c8fb2da9ebec6cb7c097f5c81a43d63f5eb10e474f3d5ceea3112bab401c93c2dcce60f009bad0de7cd37d505e3d409047c0a48156f4a1292ad4b4e13833f7a24870275c01482f9ad4faf0f0292be78874bb32e2e80c6ea158d8f1aaa7f0293bf5c680b66aa3ad431884a3f45104ccd6b7d2c48cc2f380c139bd6ee8000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r3}, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x44040, 0x0) fcntl$addseals(r2, 0x409, 0xb) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000000040)={0x2, 0x1, @rand_addr=0x64010101}, 0x10) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000180)=0xe) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) r7 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x7d, &(0x7f0000000480)=@assoc_value={0x0, 0xc}, 0x8) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r8}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804) syz_io_uring_setup(0x1869, &(0x7f0000000800)={0x0, 0xead4, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) r10 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') preadv(r10, &(0x7f0000000bc0)=[{&(0x7f0000000140)=""/171, 0xab}], 0x1, 0x0, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r11, &(0x7f0000000080)={0x0, 0x2f, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="496703000000fbdbc625670000000818f6ff", @ANYRES32=0x0, @ANYBLOB="0c00990000000000000000000800178004000080"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x200449a0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r8], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) 1.487118396s ago: executing program 8 (id=3223): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) io_setup(0x2007, &(0x7f0000000980)=0x0) io_destroy(r2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kfree\x00', r7}, 0x18) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r9}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x7, 0x80, 0x5, 0x9, {{0x9, 0x4, 0x3, 0x6, 0x24, 0x67, 0x0, 0xd, 0x2f, 0x0, @local, @loopback, {[@ssrr={0x89, 0xf, 0x4a, [@private, @empty, @rand_addr=0x64010100]}]}}}}}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r12 = semget$private(0x0, 0x20000000102, 0x0) semop(r12, &(0x7f0000000240)=[{0x3, 0x800, 0x1800}, {0x0, 0xe65b}], 0x2) semctl$SETALL(r12, 0x0, 0x11, &(0x7f0000000680)=[0x7, 0x7f, 0x1, 0x9d]) sendmsg$TIPC_NL_KEY_SET(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x54, r11, 0x1, 0x70bd28, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x13}}}, {0x14, 0x2, @in={0x2, 0x0, @private=0xa010102}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$FS_IOC_GETFLAGS(r13, 0x80086601, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x800040, &(0x7f0000000400), 0x1, 0x597, &(0x7f0000000b80)="$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") 1.339842167s ago: executing program 9 (id=3225): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100030000002c0004800500030080ff00000500030080ff00000500030000000000050003000100000005000300800000000800020003"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000181100", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r8}, &(0x7f0000000200), &(0x7f0000000240)=r9}, 0x20) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket(0x400000000010, 0x2, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r13, 0x8933, &(0x7f0000000300)={'wg1\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r14, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x2}]}}, @TCA_RATE={0x6, 0x5, {0xff}}]}, 0x44}}, 0x0) preadv2(r4, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x4, 0x1) 1.280188552s ago: executing program 4 (id=3226): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000900)="$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") mount$bind(0x0, 0x0, 0x0, 0x2a05004, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0xb00, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) syz_io_uring_setup(0x10f, &(0x7f0000000140)={0x0, 0xfec9, 0x10000, 0x0, 0xa}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0xc, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x842a}}) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000001, 0x2010, r1, 0x10000000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000008c0)=@IORING_OP_RECVMSG={0xa, 0x7, 0x2, r1, 0x0, &(0x7f0000000880)={&(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000002bc0)=[{&(0x7f0000000000)=""/45, 0x2d}, {&(0x7f00000001c0)=""/176, 0xb0}, {&(0x7f0000000280)=""/212, 0xd4}, {&(0x7f0000000380)=""/122, 0x7a}, {&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000000640)=""/193, 0xc1}, {&(0x7f0000000140)=""/17, 0x11}, {&(0x7f0000000740)=""/106, 0x6a}, {&(0x7f00000007c0)=""/180, 0xb4}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0xa, &(0x7f0000002c80)=""/170, 0xaa}, 0x0, 0x1, 0x0, {0x1, r5}}) sendfile(r1, r0, 0x0, 0x3ffff) 1.236343425s ago: executing program 4 (id=3227): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000083c0)={{0x1}}) read(r3, &(0x7f00000003c0)=""/4096, 0x1000) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf002001000000000000000000000000000120010000000000000000000000000001000000004e2100020a0000206c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x2001, 0x40, 0x1, 0x41, 0xffffffffffffffff, 0x3}, 0x50) r4 = socket(0x400000000010, 0x3, 0xbeb) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000008850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x4, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) io_uring_setup(0x1e2b, &(0x7f0000004bc0)={0x0, 0xb07b, 0x42, 0x2, 0x3b8}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fadvise64(r8, 0xaa21, 0xff39, 0x3) r9 = socket$unix(0x1, 0x1, 0x0) r10 = memfd_secret(0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r10, 0x4004f506, &(0x7f0000000340)) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0xf0bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}]}, 0x40}}, 0xc0001) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x0, 0xfff3}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) close_range(r0, 0xffffffffffffffff, 0x0) 933.986008ms ago: executing program 6 (id=3232): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f40)) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9, 0x10a38, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, @perf_config_ext={0x3}, 0x3, 0x0, 0xfffffffc, 0x1, 0x4000000000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0xa000200) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0xa39}, {0xa, 0xfffe, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}, 0x1000, {[0x6, 0x0, 0xffffffff, 0xfffffefb, 0x9, 0x1, 0x4002]}}, 0x5c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) r0 = syz_clone(0x28800600, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x10, r0) socket$inet6(0xa, 0x3, 0x3c) socket$packet(0x11, 0x2, 0x300) semget$private(0x0, 0x4000, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{0x2, 0x40, 0x1800}], 0x1, 0x0) unshare(0x20060400) 870.169873ms ago: executing program 6 (id=3234): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x6f, &(0x7f0000000a80)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x39, 0x3a, 0xff, @local, @mcast2, {[], @dest_unreach={0x1, 0x3, 0x0, 0x4, '\x00', {0x0, 0x6, "d85b28", 0xd, 0x6, 0x0, @empty, @loopback, [], "83985e2ff912864226"}}}}}}}, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000001340)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = syz_open_dev$MSR(&(0x7f00000026c0), 0x1, 0x0) ioctl$X86_IOC_RDMSR_REGS(r1, 0xc02063a0, &(0x7f0000002700)=[0x8, 0x101, 0x100, 0x6b, 0x0, 0x2, 0xcf11, 0x9]) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x40051}, 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[], 0xff2e) r4 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCXONC(r3, 0x540a, 0x3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYRES32=r4], 0xe0}, 0x1, 0x0, 0x0, 0x10084}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x1a, 0x1, 0x0, 0x0, {0x81}, [@FIB_RULE_POLICY=@FRA_TABLE={0x8, 0xf, 0xfe}]}, 0x24}}, 0x0) 726.871484ms ago: executing program 2 (id=3236): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYRESOCT], 0x0, 0x50, 0x0, 0x1, 0x9}, 0x28) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000009500060000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1, 0x6}, 0x112026, 0x0, 0x2, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000e40)="d8000000180081064a81f782db44b904021d080400007c09e8fe55a10a0015c0050014a603600e1208000f0000000401a80016009a00014004000000036010fab94dcf5c0461c1d6900094007134cf6ee080000190d0a2ac922353a606487ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00320db70103000040fad95667dc06dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x48084) r2 = memfd_create(&(0x7f0000000cc0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\xd5\xfd\xa9\r\xac7V\xf2\x93A\x94k\xcd\t\x00\x90\xbe\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\agB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\x9f#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xd8\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x96!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2_\x16\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0V\\w\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x17fNo\xb3\x1d\xbb\xcaI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%UH\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\x02Y\x8e\xae\xf5m\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5\x04\x00\x00\x00\x00\x00\x00\x00\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9\xcfJ\t}\xd4:\xe4\xbe\x1c\x10\n\xc6hPO\xeagxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!D\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\xca\xc5kz\x8e9\xd6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa3d5V\x80\x1a\x90\x10\xe3\xdf%\xfdz\xf7\x9aE\xe6\x9b\x00'/993, 0x3) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x10, 0x1000000}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x13, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000080000000000000000000850000007d0000009543f57927a712d82e8ffadd7ab553181725d553b1db8a9459a89f4645ffe3e7a89b6936e171158cb851c9ae207d6bfe07e44af243b35ba48566396f4b3d9f1b59f2d6ff8c2e2b33be3ce5deac0968aa2706b1c8fb2da9ebec6cb7c097f5c81a43d63f5eb10e474f3d5ceea3112bab401c93c2dcce60f009bad0de7cd37d505e3d409047c0a48156f4a1292ad4b4e13833f7a24870275c01482f9ad4faf0f0292be78874bb32e2e80c6ea158d8f1aaa7f0293bf5c680b66aa3ad431884a3f45104ccd6b7d2c48cc2f380c139bd6ee8000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r3}, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x44040, 0x0) fcntl$addseals(r2, 0x409, 0xb) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000000040)={0x2, 0x1, @rand_addr=0x64010101}, 0x10) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000180)=0xe) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) r7 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x7d, &(0x7f0000000480)=@assoc_value={0x0, 0xc}, 0x8) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r8}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804) syz_io_uring_setup(0x1869, &(0x7f0000000800)={0x0, 0xead4, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) r10 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') preadv(r10, &(0x7f0000000bc0)=[{&(0x7f0000000140)=""/171, 0xab}], 0x1, 0x0, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r11, &(0x7f0000000080)={0x0, 0x2f, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="496703000000fbdbc625670000000818f6ff", @ANYRES32=0x0, @ANYBLOB="0c00990000000000000000000800178004000080"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x200449a0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r8], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) 633.684991ms ago: executing program 8 (id=3237): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) setregid(0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001100)=@nat={'nat\x00', 0x1b, 0x5, 0x6b0, 0xd0, 0xd0, 0xffffffff, 0xd0, 0x2f8, 0x5e0, 0x5e0, 0xffffffff, 0x5e0, 0x5e0, 0x5, &(0x7f0000000240), {[{{@ipv6={@local, @empty, [0xffffffff, 0xffffff00, 0xff000000, 0xff], [0xff000000, 0x0, 0xff, 0xffffff00], 'bridge0\x00', 'veth0_to_bond\x00', {}, {}, 0x2, 0x40, 0x2, 0x45}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x9}}}, {{@ipv6={@loopback, @loopback, [0xff, 0xffffff00, 0xff], [0xffffff00, 0xffffff00, 0xffffff00, 0xff], 'veth0_to_bond\x00', 'hsr0\x00', {0xff}, {}, 0x33, 0x0, 0x0, 0x14}, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x8, [0x1, 0x8a], 0x3, 0x2, 0x3, [@loopback, @remote, @ipv4={'\x00', '\xff\xff', @multicast2}, @remote, @remote, @loopback, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, @mcast1, @empty, @local, @local, @empty], 0x6}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0xa, @ipv6=@loopback, @ipv4=@multicast1, @icmp_id=0x64, @port=0x4e20}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xff000000, 0xffffff00, 0x0, 0xff], [0xff, 0xffffffff, 0xffffff00, 0xff000000], 'bond0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x21, 0x1, 0x0, 0x44}, 0x0, 0xd0, 0x1f8, 0x0, {}, [@common=@ipv6header={{0x28}, {0x4, 0x51, 0x1}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x8000, 'system_u:object_r:unconfined_execmem_exec_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x4, @ipv6=@loopback, @ipv4=@empty, @port=0x4e21, @port=0x4e20}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x710) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e23, @private=0xa010101}]}, &(0x7f0000000180)=0x10) unshare(0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="020000000000000002000000e000000200e70000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000200fffc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x190) socket$nl_rdma(0x10, 0x3, 0x14) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011000000180100002020692500000000002020207b1af8ff00000000bfa110000000be8214b00000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40040, 0x0) ioctl$TUNSETIFF(r4, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) mkdir(&(0x7f0000000580)='./file0\x00', 0x92) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) ioctl$TUNSETIFF(r5, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x411}) 546.511848ms ago: executing program 2 (id=3238): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000840000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000000)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000540)='\x00', &(0x7f0000001c80)="6ed4f9", 0x3) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000580)='syzkall\x1ar\x00\x88\xa3\xb4\xc2\xd8,\x0e\xc3\xff[\x1d9\xb1\xf2D\xb4g\x1f\xb0\xcd\x06\x9d\xc0\x10\x8c\xd3C\b\x00\xe6\xb8\xcen\xea\xbd\xb8\t\xccv\x8esV\x8c\x17\xa4f\xbe\xd2\xda\xc2\v\xce\x9eY[\x9a_k\xfbx\x91\xed\xdb\xbc\x86\xebf\xc2\x12_\x94\x0f\xacU\xbf\xb4\xc7:\xcd\a\xd0\x03\xe3\xba\xe4\xb5\x00\xc7\x89\xb3\x92$)\x01\xa7{\xf1^&oG\xde\x17X\xa2m/\x1c\xfdE\x1d\r\x03\x00\x00\x00\f8!\x1e\xcc\xbc\xe1\x8a\xe4\xbe\xc0\xca\xa3\xe2%\xffT\xfd_;\xda\x14GP\x92\x88\xb3\xb5\x97\xec\x84\xcel\x02qxD3\x98\xe5\f\x94k\xec\b0\x10\xfb\xbe\xd4^\xc2e\xfc[\xe3\x8chl\x19\\\xe8\xef\x98\xd6\xfeF\x00IsTT\xcb\x97\xa7\xc8\x8e\xb0\xbb\x7fx\xfe9S\xd8M>\x0e\x82\xe6+\xe2afl\x01\x04\rk\xb3^\x13^J\xdao\x84\x12\xb3\x13\xbb6\xd4fY\x94|M6\x97\x17\xdc\x1eiw\xcd\x00\xd3\xef\xc1e\x19w\xd4\x82t%\t\x14\xed\xd5%\xa3n\a\x00\x00\x00', &(0x7f00000000c0)='8\xbe\xf1\x95^\x9b b\x00\x00\x00\x00\x00\x00\x007\x9c\x93\xb4\xf1\xff\x9d\xccr\x8b\x8a\x12\x80\r\x97\xfa\x9d\x82\x91=+\r\xdf\xed\x82XH\x15\xf5\x98\xf7\x14', 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r7}, 0x10) unshare(0x20020000) unshare(0x2c020400) fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f00000002c0)='\x04\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000940)="ad", 0x1) r8 = syz_io_uring_setup(0x4333, &(0x7f0000000000), &(0x7f0000ff5000), &(0x7f0000ff4000)) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f0000002300)=[{0x0}], 0x1) io_uring_register$IORING_UNREGISTER_BUFFERS(r8, 0x1, 0x0, 0x0) close(r4) sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001b80)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0xffff, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x2, 0x40, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0xffff84bd, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x10000, 0x2, 0x0, 0xffffffff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x61a0, 0x0, 0x0, 0x9, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0xc0000, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0xfffffffc, 0xb, 0x37, 0x3a, 0x0, 0x0, 0xfffffffd, 0x0, 0x7ff, 0x2, 0x0, 0x0, 0x0, 0x8, 0xffffff35, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7e40cfb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x7ff, 0x9, 0xfffffffd, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x400, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0xa1, 0xfffffff1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8f, 0x100000, 0x0, 0xffffff80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffc, 0x5, 0x5, 0x0, 0xfffffffd, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x1]}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x0, 0x4, 0xfea7, 0xfffffffe, 0xffff8000, 0x90, 0x9fd, 0x200002, 0xb8, 0xca2, 0x0, 0x3c, 0x7, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0xff, 0x7, 0x3, 0x1ff, 0xe5, 0x2f, 0xd, 0x3, 0xa, 0x3, 0xfffffffe, 0x9, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x5, 0xc0000, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xcf, 0xbffffffe, 0x8fc, 0x89e0, 0x9, 0x3, 0x9, 0x80000001, 0x6, 0x2, 0x8, 0x800, 0x9, 0x1, 0x100, 0x401, 0x8, 0x3, 0xb5, 0x10001, 0x401, 0x1, 0x7f, 0x0, 0x8, 0x2, 0x7f, 0x0, 0x2, 0x4, 0x0, 0x1000004, 0x8000, 0x0, 0xb, 0x80, 0x7, 0x5, 0x1, 0x0, 0x5, 0xeb22, 0xf, 0x8000, 0xfffffff7, 0x0, 0x4, 0x3ff, 0x400002, 0x10, 0x5, 0xffffffff, 0x10000, 0x5, 0x1, 0x0, 0x1000, 0x6, 0x5, 0x6, 0x5, 0x4, 0x2, 0x81, 0x0, 0x10, 0x6, 0x7fff, 0x804, 0xfffffff4, 0x10000, 0x5, 0x8, 0xba, 0x4, 0x89, 0x2, 0x6, 0x100, 0x9, 0xffffa3e0, 0x86b9, 0xff, 0x1, 0x40002, 0xf, 0x24b9, 0x3a, 0xe01, 0x1, 0x6430, 0xc, 0x8, 0x0, 0x3, 0x7eb7, 0x3, 0x0, 0x200, 0xfffffeff, 0x9, 0xff, 0xa, 0x6, 0x7, 0x6d0, 0x10000001, 0xc001, 0x100, 0xb, 0x8, 0x101, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0xfffffffd, 0x4, 0x7, 0x4, 0xb, 0x80, 0x0, 0x5, 0x0, 0x5, 0x7, 0x65, 0x4, 0xfffffa0c, 0x3, 0x0, 0x5, 0x4, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x3, 0x3, 0x0, 0x6, 0x8, 0x28, 0x2, 0x5, 0x10001, 0x2, 0xf, 0xffffffff, 0x1, 0x723, 0x0, 0x5, 0x9, 0x4, 0x6, 0x7, 0x200, 0xfffffbff, 0x7, 0x3, 0x8, 0x5, 0xfffffffb, 0x2, 0x7f, 0x2, 0x80000002, 0x0, 0x9, 0x1ff, 0xfffffffe, 0x928, 0x4, 0xffffffff, 0x5, 0x6042, 0xb87, 0x6, 0xd8d, 0x55, 0x101, 0x3, 0x64e8, 0x8, 0x82f, 0x772, 0x400080a, 0xffe, 0x6, 0x7fffffff, 0x4, 0x8, 0x8, 0x1, 0x5d, 0x9, 0xd, 0x80]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3, 0x3}}}}]}]}, 0x88c}, 0x1, 0x0, 0x0, 0x50}, 0x0) 501.198591ms ago: executing program 2 (id=3239): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000f300"/21], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000001811000062f7b95a5aa4db5c0552249e4489dab4e00504db6f07d91c826793d2ac7a30204a36a054236a393559f955dcf40e0700b9557742", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000003e000701fcf7fffffedbdf25017c00000c0004"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x7}, 0x18) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0xa4b00, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x3a) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x3) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000202300800000000000000000850000"], &(0x7f0000000200)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x6f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) r8 = open(&(0x7f0000000280)='.\x00', 0x20000, 0x0) fcntl$notify(r8, 0x402, 0x5) r9 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r9, 0x402, 0x8) write$selinux_access(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a6c645f736f5f7420704a122f7362696e2f6468636c69656e742030"], 0x41) r10 = fsopen(&(0x7f00000003c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r10, 0x2, &(0x7f0000000280)='\xebU\x95\xa4i\xea`\xe0[\x9a\x84\x11\xc9&R:\xe9\xea\xec\xe05@b\x1f\xab\xb7\xe6\xd4\x18\xe7D@\xf5\xb2\xb4\xe8i$\x038\x99\xfb;\xbeR\xbf\xc2\r\x13\xf0\xf0\xec\x94\xad\nA\xee>\xb3i4\\\xc8\xd7 \x8d\xe0D\x953|) \xd8p\x12\x11\x81\x7f\x93\a\xfb!\x83\xc2\xd8\xe4\x98\xae\xb7\f\x0fR\xd3\xad\xa5\xca\xd5\xc2\bv+\x9a\x94\xd0\x05\x8d\xef\x9f94>\xa5?\x9a\x11Et\xef\xea\xe9e\x81\'jB\xca\f\xccz\x15x\x1cn\xe4\xf3\xbd\xb4q{\xb33\xffM\x95Jm\x90\x00\x15\r\xc8R\xb4\xf89>\xb7\x1e\xe3\x99\x99_~\xdb\xdc\xfd\x0f\x8f\xfc\xe4\xa4\xe8\x03K\xea\xb2\x91H|EB\xfd2\x10atXE\xee\xf4\x13c\xb5u\x85w$\xd3}\x19\xe7n\xf9\xe7\x11@\xceB\xd7/\xde\x80F\xe0\xd0dI\xedfq]\xb1\xaa\x9b)\\o\xd1\xdcx\x06\x80\x9f\xb3\xcc\r\b\xcb\xb1\x1c\x03G\xe4\xf0H`\x0e\xe1\xc7\x13\x9e%J\xe6\xe2\xe6\xb4:\xa8\xf51~\xc5\x8a\xfe++s\x0f\xa9\x00\x00A\xb8\xf1\xdb', &(0x7f00000000c0)="8c", 0xff57) 500.569761ms ago: executing program 2 (id=3240): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) r2 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e24, 0x68c, @local, 0x1}, 0x1c) writev(r2, &(0x7f00000000c0)=[{0x0}], 0x1) 476.202264ms ago: executing program 9 (id=3241): pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = socket$can_bcm(0x1d, 0x2, 0x2) fchdir(r1) (async) r2 = accept$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f00000001c0)={0x1, 0x2, 0x1000, 0x9b, &(0x7f00000000c0)="18a51fc3acb7b6b50c355a114ff65f756da8575ff008c7ac177736a61db6bedf8718ab2e6de90d9f899a5cea872875495b25bf2c4c1994ebc9d8771af8f06f21000c96a4ab748503cb7d90a548530479e2f6388e3da6204c5db9364cfb83a289e0257bca9c8a80a9989820233ab26e949081a49670da3c080f96bfaf2a3631d172edef81a0b2975a46a6ca859d5fe26119945eb3ef90d2386b9e27", 0x1e, 0x0, &(0x7f0000000180)="bdbc20bd69f2203296556856d865b726a2474b65c9e78fdd5a4a05e60ec9"}) (async) ioctl$IMSETDEVNAME(0xffffffffffffffff, 0x80184947, &(0x7f0000000240)={0xffff, 'syz1\x00'}) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, 0x1409, 0x20, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x8045}, 0x1) r3 = accept4$inet(r0, &(0x7f0000000380)={0x2, 0x0, @local}, &(0x7f00000003c0)=0x10, 0x800) (async) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000400)={@local, @loopback, @remote}, 0xc) (async, rerun: 64) r4 = openat2(r0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x800, 0x31, 0x1c}, 0x18) (rerun: 64) getdents64(r4, &(0x7f00000004c0)=""/154, 0x9a) (async) setitimer(0x0, &(0x7f0000000580)={{0x0, 0xea60}}, &(0x7f00000005c0)) (async) r5 = socket$inet(0x2, 0x6, 0x8) recvfrom(r5, &(0x7f0000000600)=""/80, 0x50, 0x10000, &(0x7f0000000680)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @private=0xa010100}}, 0x80) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r0}, &(0x7f0000000700), &(0x7f0000000740)=r0}, 0x20) (async, rerun: 32) pwritev2(r2, &(0x7f0000000cc0)=[{&(0x7f00000007c0)="a6cfce9f99411e191a74a12c27f32b4ced13577efd2cad9d46dd3df585e6198b80e0044089b7972f2547039bc032acc0ebfaf4e039327c18cc5a3772b72d29750b28e260552a46494b008103b1234a70b85e3b4bc4a5b6d6f46c64451e865b3864b8f4d0c6e9c12c3cb12c10c15982c3983326b712ec51ec1529e27ee89adf55e7c0c56bfce1511f04869c276de2cf8ca4ca13828d171f333ec2011870ff37e030f37c800b6184ed0aa6d3cd06569fcbbe42bd4ca648f28b2ac59a9b8f2a37842b794bb2c1e8ad8bab9866a6f3462cf3c1d1cfc198c1e9bf40d0ac3e2087d09bc75bee7674647c0f9c1058d7f9045b", 0xef}, {&(0x7f00000008c0)="48a788babdade25376eeae36f8fb2ba0fd94482e4bd948ccbdbb1c28ab07", 0x1e}, {&(0x7f0000000900)="b52f769c691f01826af1ed8d9e5550bb0ff41ae36fda477a5b7c38f4b3535ac592757543e5a1a19e62ffed8818367abf4bcfb15d94986ad2542bc163f82b0a3fc0d81dafe8ddbfa1d40d5d3d7d8e4e5003916a510034bcce40c926ef54f1485ded32f0d51d0f9d6e5d61cf646361a78b07e8e264da36e8cc4d17975b04fb44c8c27fc4690f68aec9caf8601e90a6235cc995ac5f9814e6f68f", 0x99}, {&(0x7f00000009c0)="49b43c0dad8c829000bf091836f054802a9a1665a2d6e646a43801917fbc058adf9d680842f5406399cbe87e2000368ed1461812ce4bdf36d2493e47bb06dfb6b781a3badb755da3a551c5", 0x4b}, {&(0x7f0000000a40)="4be0a63ec987eb79c786c91132e81d83a8814ccb12c45bc12a414b1fcb84507a7c58fb3265328062e6a7d656adf7d308ba42fa9e4a246df4a8704dfe2ca21ed4d52a7e9d47f3ef7deaecf834de25b59d3ef96bacd8a2baff5390d278efcfd35eebb10ac8f9aad802f737ca5c7eebc9c838a9", 0x72}, {&(0x7f0000000ac0)="cd4d303f0798dd72b15326e2b17034f688e6a4c91ffb6413392f900e90505e5687c53a64fa31356d5b837b410c662cdda41decc50eb410e9b17aed43d1d7efe26e206f4c825304792c14163145af01a90dd4974eafccb2eb19d98f7317185dc1cd778e28d35ccd1a80791a9b5a729f63d304234660671f6710ec02d0c3339b599ba0e56b1374944a57b8ba3dbfe6aafe24c53dfa4bae4b2493d4b112169fe9fc162e336b52b18eaccd7847bb2dacc516c585436eb5ede485717796a7701acd0227cb414ba6e8a702eb185ad8560a558dc198d171b70d5d56049c232f8f369ce6ee7ca93b97", 0xe5}, {&(0x7f0000000bc0)="cdd3ec963a250baa6ceae84b2dd99e36abebfb09f2eb1561afd94f9f6056ccdfe8dcb655d7fe7c4cf5c16814aee2e057ce2e8b1a9504cbf989fd5be8afc19d0376391d1826c6cb1da1577697f9939c07c28645df3938706b9d7d3b9cadeb74b1bebfd72bc15f253fe6008bc14cb70fd3b9f53b058536f85f963fc46d6bbe6920497aa9f4d778bfe9c8b65af30209459a689711759f55b7682552c88d55c815e931094c20616956f723304d", 0xab}, {&(0x7f0000000c80)="5b8ada2cc505867423b8acb148cdfb0ab7635a8428313cb0b54e9eec15790f8bb31f2c8a7dd29acb", 0x28}], 0x8, 0x6e, 0x2, 0x12) (async, rerun: 32) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d80), r0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f0000000f40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x114, r6, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x29b7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xcfa0}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1075}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xa00}]}, @TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x74f}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fffffff}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xc062}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffd7c9}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x800}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x4000004}, 0x24000800) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000f80), 0x10000) getsockname$packet(r4, &(0x7f0000000fc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001000)=0x14) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r5, 0x8983, &(0x7f0000001040)={0x1, 'vlan0\x00', {}, 0x5}) (async) timer_create(0x3, &(0x7f0000002140)={0x0, 0x2b, 0x0, @thr={&(0x7f0000001080)="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", &(0x7f0000002080)="863f75a02f2419bc2e806109eec817e161456ea174fe840df85d7f066079ceb8ea0238b344a38a34641e59a488284f4f3556cb172732c61c93a9204b6a4278802666ffb3aecd2323b7481ff9e8843f6c5956e3c7a80990f7caf9a77259611357ac4c865e1d27b70865c3e359c04cc8680126e4b7070344263c2bd48589645886194e7d0667cbb7b151a84ef4412563509f006974bb989c9c5436a8403fe5763e54cd4d92711790d3363c129dcfc37f0c6036bf05c99071111b2e16"}}, &(0x7f0000002180)=0x0) (async) clock_gettime(0x0, &(0x7f00000021c0)={0x0, 0x0}) timer_settime(r7, 0x0, &(0x7f0000002200)={{r8, r9+60000000}, {0x77359400}}, &(0x7f0000002240)) (async) r10 = syz_clone(0x1000000, &(0x7f0000002280)="9c6925003284411f0098f95da7e32a0c017814ff88ddba9c1c079dfc60ad3cc33bb33bb57bcefae4a2519afa460864c7f34be5dc4f86825e06b2c2e7a0fe7b04486136376ece84c35c3062f3226917b4fc84721f9d39a7fe4badb06b7e4eaac15de96b715dc9a12d73be70442bc7d5c3426342b9f040954bf63a18a9b5682a8e506922aa350b572f72fa03faf74e6995022b694300d24ecb448e14fc35a785fb780d853dc99fde1401b0f7df5ba5d39466e006a68fb88e928487f7a04889a6fed006af0fecbac623cc242d385c4299e7394770a1e00d6d465041021172f6db", 0xdf, &(0x7f0000002380), &(0x7f00000023c0), &(0x7f0000002400)="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") prlimit64(r10, 0x9, &(0x7f0000003400)={0x8, 0x7}, &(0x7f0000003440)) (async) mknodat$null(r4, &(0x7f0000003480)='./file0\x00', 0xc000, 0x103) (async) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000034c0)={0x0, 0x2}, &(0x7f0000003500)=0x8) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000003540)={@private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8) (async) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000003580)=""/239) 451.413755ms ago: executing program 2 (id=3242): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000950000000000000094631b99af773f722d978f214480eadccd5e721a36abe5848ad6ebfabc800666763c09f37ad78761ddd56ec6b47f809ec20f407bbdc6afbbb50ed6ec4b66b575971b4d1d3dda57efff6de3be84e01fbdb987359fd3772150d90b82e525bb577fe7435935f116fd67694bf95dc581e1190e4a9007435d40e90e05d873b616b5cd520d04ab6fdbb0e9c14dcf965a001312f1e7d406f1db473eadd41e88bf9cdb511c9de6de0b0512e6b215590ef10d1281b8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r8, {0x0, 0x11}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) 450.699885ms ago: executing program 2 (id=3243): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x738a}, 0x18) unshare(0x24040400) socket$unix(0x1, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1e00000008000000000000008100000000200000", @ANYRES32=0x1, @ANYBLOB='$X\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000005000000030000000400000000000000f1ffffff00000000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0xf, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000001005b660b66f1efeccc0000", @ANYRES32=r1, @ANYBLOB="00000000000000009ca05000fcffffff18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000008000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000009500000000000000"], &(0x7f0000000400)='syzkaller\x00', 0xfffffffb, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0xf}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) r2 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x19, &(0x7f0000000140)=0x400030, 0x4) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffff0180c20000000800450000200000ea5ef21c100000001190780000000000e4000000004ea090"], 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x7, 0x0, &(0x7f0000000000)="219a53f271a76d", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000100000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000940)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) 388.55955ms ago: executing program 9 (id=3244): r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, &(0x7f0000000240)) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}], 0x1, &(0x7f0000000180)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b}}], 0x20, 0x2400e044}, 0x0) 234.799392ms ago: executing program 4 (id=3245): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x100) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0xfe) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001800", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000030000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) syz_mount_image$iso9660(&(0x7f0000000b00), &(0x7f0000000040)='./file0\x00', 0x4002, &(0x7f0000000140)=ANY=[@ANYBLOB='map=off,cruft,iocharset=ascii,block=0x0000000000000200,unhide,session=0x0000000000000011,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c004238994fceef7f633ea81416b1324d35327f7ace27c590b7f9fb133af0ffd6dfc4d893195864142b1450fbace6795f6e181993255fbbca2cb54fcf79cc53b3a6c3704aed82da89741aad5205bb43ded29cfd65509ff9c85cbdb7337ef48b9412ff439da96bb3f5ac11273d94d3d75d"], 0x1, 0xa2f, &(0x7f0000001580)="$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") bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000940)={{0x1, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)='%pK \x00'}, 0x20) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x9, &(0x7f0000000380)=@raw=[@map_idx={0x18, 0x2, 0x5, 0x0, 0x6}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @ldst={0x3, 0x0, 0x2, 0x8, 0x0, 0x100, 0x8}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffe}], &(0x7f0000000680)='syzkaller\x00', 0x2, 0x33, &(0x7f00000006c0)=""/51, 0x41100, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000740)={0x0, 0xd, 0x6f4c, 0x101}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000780)=[0x1, 0xffffffffffffffff, r2, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="380000000314010029bd7000ffdbdf250900020073797a310000000008004100736977001400330076657468305f746f5f62726964676500f1578d9c8d86d478af4e71136035e55c718cda7d6aa644c654ba2889ce7a93cc9d155447ba2998fc82d433e6ec3f7be9af7df8d1da5ffde5e468630ef1b69fe325a06f9821e5bb95ee1eeffb0e70c25097db1940f4cb629b394e963e89c3d7275b25b0c74923c08a057ab759036da34eed85efb6017edacd59bcf151527f3e23f48e3fddc2dc24382508779572ced83f4b10bd"], 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) r6 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80800) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) preadv(r8, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/56, 0x38}], 0x1, 0x8, 0x0) r9 = syz_clone3(&(0x7f0000000480)={0x22044000, &(0x7f0000000400), &(0x7f0000000180), &(0x7f0000000300), {0x8}, &(0x7f0000000540)=""/169, 0xa9, &(0x7f0000000400), &(0x7f0000000440)=[0xffffffffffffffff, 0x0], 0x2, {r8}}, 0x58) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1002}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000880)='xprtrdma_post_linv_err\x00', r8, 0x0, 0x4ab}, 0x65) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073f97a310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) sendmsg$NFT_MSG_GETOBJ(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03f5"], 0x34}}, 0x0) ioctl$sock_FIOSETOWN(r6, 0x8901, &(0x7f0000000500)=r9) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 179.642366ms ago: executing program 4 (id=3246): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x5, 0x100000000}, 0x4, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0x4, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)="2e0000001000818807b62aa73f72cc9f0ba1f8483a0000005e120602000300000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20008800) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000640)={0x4, 0x0}, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, 0x0, &(0x7f00000005c0)}, 0x20) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r5 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain={'key_or_keyring:', r5}) r6 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000740)=ANY=[], 0x0, 0x8000000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000280), &(0x7f00000001c0)=r6}, 0x20) r8 = syz_io_uring_setup(0x1b44, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x400252}, &(0x7f0000000340)=0x0, &(0x7f0000000300)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_enter(r8, 0x627, 0x4c1, 0x43, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r0, @ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000200)=0x8000161) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r10}, 0x18) socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 83.700013ms ago: executing program 4 (id=3247): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x9, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000001640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, 0x0, 0x0}, 0x94) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x13) recvmsg(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x40fd) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="09000000030000000800000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000003000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kfree\x00', r2}, 0x18) close(0xffffffffffffffff) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x0, 0x4000000}, 0x1c) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_clone(0x40200080, 0x0, 0x0, 0x0, 0x0, 0x0) 17.882188ms ago: executing program 4 (id=3248): bpf$PROG_LOAD(0x5, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="070000000400000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x9, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f00000001c0)=0x7f, 0x4) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) recvmsg(r2, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x40fd) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="09000000030000000800000004"], 0x50) syz_clone(0x40200080, 0x0, 0x0, 0x0, 0x0, 0x0) 17.152158ms ago: executing program 6 (id=3249): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000002000000850000008500"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) 0s ago: executing program 6 (id=3250): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) (async) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) (async) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) (async) mount_setattr(0xffffffffffffff9c, 0x0, 0x8000, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f0000000300)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x9, 0x4, 0x56, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x1, 0x7888, 0x3, 0x1}}) (async) r3 = accept4$vsock_stream(r0, &(0x7f0000000380)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x800) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000001f40)=@newtclass={0xe84, 0x28, 0x100, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0xf}, {0x9, 0x6}, {0x3, 0xf}}, [@c_atm={{0x8}, {0xc, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0x6, 0xa}}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x2}}}, @c_atm={{0x8}, {0x98, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0xa, 0xb}}, @TCA_ATM_HDR={0x3e, 0x3, "b1ba06dbadf5375ba0ce883929c217dcdf82ec118bac9e6f02e69ec7d7ba2abe3ef3aec2432a8910c9eaf8d5c2b67aec5838da18bd1d7ce22dd0"}, @TCA_ATM_FD={0x8, 0x1, r3}, @TCA_ATM_FD={0x8, 0x1, r0}, @TCA_ATM_HDR={0x2d, 0x3, "4ff0f981c858b71e380d4c906af524f8cb18730166368c9759cc18cacc05fc03b03b9787d77bccd7b2"}, @TCA_ATM_HDR={0xb, 0x3, "64e67c61febcf0"}]}}, @c_atm={{0x8}, {0xc, 0x2, [@TCA_ATM_FD={0x8, 0x1, r0}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x5}}}, @c_atm={{0x8}, {0x10, 0x2, [@TCA_ATM_HDR={0x9, 0x3, "6dfca1526e"}]}}, @c_cbq={{0x8}, {0x874, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x400, 0x2, 0x0, 0x6, 0x7, 0x1, 0x7fffffff, 0x8, 0xe5800000, 0x5, 0x9, 0x6, 0x411e760a, 0x8, 0x9, 0x3e7f, 0x52f1, 0x7064e024, 0x10000, 0x6, 0x3228, 0x0, 0xc31b, 0x9, 0x6, 0x1000, 0x4, 0xfffffffb, 0x3, 0x7, 0x6, 0x4, 0x2872, 0xf83, 0x2, 0x80000000, 0x3, 0x8, 0x4, 0x69f1, 0xc5a, 0xf, 0x4, 0x4, 0x44b9fd82, 0x7, 0xff, 0x6, 0x5, 0x4, 0x6, 0x7fffffff, 0x9, 0x1000, 0x28a, 0x7fff, 0x4, 0x4, 0x9cc, 0xfade, 0x10001, 0x1, 0x1, 0x2f, 0x8, 0x0, 0x8000, 0x69c, 0x3, 0x6, 0x3ff, 0x10000, 0xf, 0x10001, 0x60, 0x87, 0x6, 0x8, 0xbe0, 0x8, 0x4, 0xc, 0xffffffff, 0x3, 0x7, 0x0, 0x8, 0x5, 0x4, 0x2, 0x40, 0x3ff, 0xfffffffd, 0xb, 0xfffffff8, 0x0, 0x2, 0x5, 0x7, 0x36, 0xff, 0xfffffff8, 0x2, 0x1, 0x2, 0x1, 0x7, 0xb567, 0x2d4c, 0x4a, 0x0, 0x5, 0x4, 0x9, 0x7, 0x5, 0xe42e, 0x2, 0x2, 0x9, 0xfffffffc, 0x80000001, 0x5, 0x6, 0x0, 0x7, 0x2d79, 0x2, 0x3, 0x7, 0x22fb, 0x9, 0x886d, 0x100, 0xdf, 0x0, 0xfec8, 0x1ff, 0x80000001, 0xcf, 0x9, 0xa, 0x3, 0x9, 0xfff, 0xb, 0x400, 0x2db, 0x101, 0xf0000000, 0x33, 0x81, 0x4000000, 0x2000, 0x3, 0x6, 0x4, 0x80000001, 0x80000001, 0x7d, 0x32e, 0x5, 0x0, 0x2, 0x6, 0x5ce, 0x800000, 0xfffffffb, 0x4b5, 0x5f, 0x1000, 0x5, 0x400, 0x200, 0x1, 0x4, 0x4, 0x1, 0x8, 0x5, 0x100, 0x9, 0x7, 0x7f, 0x0, 0x1, 0xfffff960, 0x7, 0x2, 0x10001, 0x4, 0x2, 0x7, 0x2, 0x40, 0x6, 0x6, 0x9, 0x4, 0xd6e, 0x1, 0x65, 0x8, 0x4, 0x6, 0x0, 0x3, 0x1, 0x9, 0x0, 0x22, 0xfffffff3, 0x0, 0x5, 0x26c55278, 0x0, 0xfffffffd, 0x7ff, 0x6, 0x800, 0x800, 0x8, 0x7, 0x6, 0x1, 0x5, 0xb, 0x80000000, 0x7fff, 0x100, 0x400, 0x7, 0x1, 0x8, 0x7fff, 0x2, 0x200, 0x5, 0xffffffff, 0x5, 0x80, 0x6, 0x3, 0x1, 0xffff, 0x693, 0x2, 0xfff, 0x2000400, 0x4, 0x7, 0x6, 0xb, 0x97, 0x1ff, 0x8]}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x2d, 0x2, 0x9, 0xe, 0xc74, 0x4, 0x1ff, 0x4}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0xf, 0x0, 0xa, 0x8, 0x0, 0x4f1, 0x1, 0xfffffff9}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x5, 0x4bb, 0x0, 0x7ff, 0xe225, 0xdcda, 0x6, 0x8, 0x4f15, 0xffffc0c0, 0x2, 0x7, 0x8000, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x1ff, 0x1ff, 0x3, 0x5, 0x1, 0x7f, 0xadcc, 0x1, 0x2, 0xe, 0x15b, 0x4, 0x3, 0x0, 0x0, 0x5a90, 0xbf, 0x5, 0x7, 0x2, 0x7fff, 0x9, 0x1, 0xf4, 0x7, 0xdb, 0x46f9, 0xfc, 0xffff8787, 0x2a, 0x4, 0x5, 0x8, 0x8000, 0x401, 0x1, 0x1, 0x401, 0x8fe, 0x5, 0x734, 0x5, 0x6, 0x95b7, 0x2a9, 0x0, 0x4, 0x8, 0x3, 0x2, 0x0, 0x4, 0x7fff, 0x9, 0x80, 0x20000000, 0xe9d, 0xe, 0x7, 0x0, 0x3, 0x8001, 0x0, 0x8000, 0x371, 0xa, 0x7, 0x0, 0xcb5e, 0x200, 0x719, 0xfffffff1, 0x5, 0x20000, 0x5, 0x80000001, 0x7, 0x2, 0x6, 0x8, 0x400, 0x2, 0x80000001, 0xf75, 0x1, 0x7bc7, 0x3, 0x5, 0x10000, 0x6, 0x768, 0x1, 0x7, 0x0, 0x6, 0x4, 0x0, 0x10c, 0x9, 0xc83, 0xffffffff, 0x8, 0x3, 0x100, 0x7ff, 0x6, 0x7, 0x7, 0x0, 0x6, 0x256e, 0x4, 0x56370a6a, 0x2, 0x10001, 0xfa90000, 0x0, 0x7f, 0x2, 0x0, 0x7, 0x3, 0x1, 0x1, 0x4ad9, 0x3ff, 0x1, 0xffff, 0x40, 0xc5, 0x1800000, 0x5, 0x3dda, 0x0, 0x2, 0xf, 0x80000000, 0x200, 0x8, 0x14, 0x8, 0x1, 0x2, 0x7ff, 0x9, 0x2, 0x8, 0x4, 0xb91, 0x7, 0x1b74, 0x400, 0x6, 0x3, 0x8, 0x5, 0x702, 0x7fffffff, 0x0, 0x7, 0x80, 0x400, 0x2, 0xb926, 0x79, 0x76, 0x40, 0x0, 0x6000, 0x1ff, 0xfffffffa, 0xf, 0x8000, 0x5, 0xb3e, 0x48, 0x1, 0x6, 0xb, 0x8, 0xfffffffd, 0x100, 0x6, 0x4, 0x9, 0x7, 0x1, 0x80000000, 0x8, 0x8, 0x8, 0x3, 0x6, 0xff, 0x0, 0x2, 0x9, 0x9, 0x8, 0x8001, 0x5, 0x933c, 0x0, 0x7f, 0x0, 0x3, 0x7, 0x2, 0x6, 0x5, 0x7, 0x10000, 0xa4e8, 0x7, 0x945, 0xd, 0x8, 0xa, 0x6, 0x10001, 0x7, 0x2, 0x8, 0x1, 0x9, 0xd, 0x4, 0x10200, 0x3, 0xffff, 0x40, 0x200, 0xff, 0x401, 0xe, 0xb8c, 0x1, 0x200, 0x2]}, @TCA_CBQ_RATE={0x10, 0x5, {0xf9, 0x2, 0x4, 0x5, 0x0, 0x8}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xfff2, 0xffe0}, 0x9, 0x401}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0xd, 0x2, 0x13, 0xb, 0x11, 0xb919, 0x841, 0xffffff82}}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x5}}}, @c_atm={{0x8}, {0x84, 0x2, [@TCA_ATM_FD={0x8, 0x1, r0}, @TCA_ATM_EXCESS={0x8, 0x4, {0x2, 0xe}}, @TCA_ATM_FD={0x8, 0x1, r1}, @TCA_ATM_EXCESS={0x8, 0x4, {0x0, 0xfff3}}, @TCA_ATM_HDR={0x34, 0x3, "a63a55f5fbfdc43166420e33e0d3aa97a00f8ecf27aa05cfe0c20091a2472b66cd00a336bada1c9996004fb9374fdd00"}, @TCA_ATM_HDR={0x7, 0x3, "9e2c3a"}, @TCA_ATM_EXCESS={0x8, 0x4, {0xc, 0xfff3}}, @TCA_ATM_EXCESS={0x8, 0x4, {0x5, 0xfff2}}, @TCA_ATM_HDR={0xb, 0x3, "d81428fdc2425d"}, @TCA_ATM_EXCESS={0x8, 0x4, {0xf, 0xfff1}}]}}, @c_cbq={{0x8}, {0x428, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xb304, 0x80, 0xa88, 0x4, 0x2, 0x7f, 0x8, 0x2, 0x1, 0x399d, 0x7, 0x3, 0x7, 0x8, 0x8, 0x10001, 0xfffffffc, 0x9, 0xffff9e86, 0x7ff, 0x0, 0x6, 0x1000, 0x6, 0x9, 0x7, 0x2, 0x80, 0x1, 0xfffffffa, 0x9, 0x4, 0x0, 0x9, 0xd, 0x2, 0x8, 0x4, 0x9, 0x4, 0xd5, 0x2bea, 0x401, 0x7474850e, 0x1, 0xfffff000, 0x4, 0x3, 0x2, 0x9, 0xfffffffa, 0x2, 0x6, 0xd8e4, 0xfd, 0x80000001, 0x494b, 0x5, 0x4, 0x4, 0x1f, 0x8, 0x644, 0x5795, 0x4, 0xd8, 0x44cd98bb, 0xd, 0x4, 0xf1, 0x7fff, 0x8, 0x3, 0x400, 0x2, 0x3, 0xdd6, 0x6, 0x3, 0x7, 0x7, 0x8001, 0xfffffffe, 0xffff8000, 0x5b, 0x5, 0xe, 0x81, 0x7f2, 0x1, 0x101, 0x2, 0x4, 0x5, 0x200, 0xffff, 0x8, 0xb5b4, 0x3, 0x5, 0xb4cb, 0x9, 0x8, 0x0, 0xf6b4, 0x2, 0x1, 0x4, 0x6, 0xb, 0x5e, 0x800, 0x1ff, 0x7, 0x9, 0x200, 0x9, 0xb, 0x8, 0x22c, 0xffffff01, 0x1, 0x10000, 0x6, 0x2, 0x2, 0x7, 0xcfe, 0x15, 0xb, 0x1e5, 0x8, 0x9, 0x3, 0x8, 0x1ff, 0x0, 0xc39, 0xfff, 0x5, 0x80, 0xffffffff, 0xffff7fff, 0xd, 0xeb, 0x9, 0x8, 0x0, 0xb4, 0x6, 0x200, 0x646, 0x4, 0x4, 0x7, 0x9, 0x8, 0x0, 0x7fffffff, 0x7, 0x8, 0x9, 0x4, 0x7, 0xfffffffd, 0x4, 0x2, 0x5, 0x80000001, 0x9, 0x8, 0x8, 0xa4bf8b89, 0x3, 0x1, 0x200, 0x2, 0x9ba6289f, 0x8, 0x78, 0x0, 0x879, 0x81, 0x0, 0x1, 0x0, 0x10, 0x4, 0x7963800, 0x9, 0x5, 0x6, 0x80000000, 0xfffffffc, 0x54, 0x10000, 0xffffffff, 0x6a, 0x1ee, 0x100000, 0xe9c5, 0x7, 0x4, 0xb, 0x2, 0x1cbcfe1, 0x8, 0x9, 0x8, 0xa, 0x800000, 0xfb, 0x0, 0x3, 0x2, 0x6c3, 0x9, 0x5, 0x9, 0x7, 0x7, 0x5, 0x80000000, 0x6, 0x2b, 0x700000, 0x8, 0x8, 0x8, 0x0, 0x7fffffff, 0x1, 0x3, 0x9, 0x5, 0x7, 0x9, 0x40, 0x10, 0x5, 0x0, 0x3, 0x2, 0x7, 0xde3, 0x3, 0xffff0000, 0x8, 0x80, 0x0, 0x0, 0x1f, 0xfffffffa, 0x1, 0x7, 0x7fffffff]}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x9, 0x0, 0x0, 0xe1, 0x7fffffff, 0xffff}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x5, 0x0, 0x5, 0xf, 0x20}}]}}]}, 0xe84}, 0x1, 0x0, 0x0, 0x4}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000}, 0x50) (async) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x121000, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='module_free\x00', r4, 0x0, 0x8000000000000000}, 0x18) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c00000002030103000200001e0000000000000000000000000000009d7e9e5d20221748256df1e65f7e89e943dea82ed6d1cf90a9e5dd418861f4746638b01564413cad8cc1444f8e67eb9ad68353a4e9abe1e2b120fb90d01af89860de1000daf44893583b642191c07a36463ff0f6e515e0c7350d921fa1ef4977ffd02f528e916137c9fca27e6ae4c7d8b9c5e6f2cbf7708910a6f9c0bfb552974d174e1df2c4a6b87b9783273b5d11d36d83d3f84c8dfa59447bf6c30ad569d855e444ca631d3a91b1e4fba916cda5308d921fb41674062144e9b569bb6da241d9024918908baf6e4086d66539e8ae00"/251], 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) sendmsg$IPSET_CMD_DESTROY(r7, 0x0, 0x8000) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x24, 0x4, 0x8, 0x401, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async) sendto$inet6(r5, &(0x7f0000000000)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) (async) shutdown(r5, 0x1) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r8}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f0000000080)={0x8, &(0x7f0000000100)=[{0x1, 0xb9, 0x0, 0x3}, {0x7, 0xa5, 0x8c, 0x6}, {0x3, 0x5, 0x94, 0x9}, {0x5, 0x4, 0x2, 0x9}, {0x7, 0x6, 0x5, 0x80000001}, {0xe16, 0x1, 0x12, 0xff}, {0x7d66, 0x2, 0xb, 0x8}, {0x0, 0x9, 0x9, 0x8}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) kernel console output (not intermixed with test programs): h1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.784040][ T51] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.797552][ T3459] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.895462][T13616] lo speed is unknown, defaulting to 1000 [ 192.598688][T13625] usb usb7: usbfs: process 13625 (syz.4.2379) did not claim interface 0 before use [ 192.612794][T13625] loop4: detected capacity change from 0 to 1024 [ 192.637673][T13625] loop4: detected capacity change from 0 to 1024 [ 192.644546][T13625] EXT4-fs: Ignoring removed orlov option [ 192.654754][T13625] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.668110][T13625] ext4: Unknown parameter '&ݞ |}|廟Ĺ8mk.jXĹ5;NA' [ 192.699240][T13632] loop9: detected capacity change from 0 to 764 [ 192.706676][T13632] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 192.785159][ T7516] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.916188][T13654] loop2: detected capacity change from 0 to 2048 [ 193.579324][T13662] usb usb7: usbfs: process 13662 (syz.9.2395) did not claim interface 0 before use [ 193.594378][T13662] loop9: detected capacity change from 0 to 1024 [ 193.607492][T13662] loop9: detected capacity change from 0 to 1024 [ 193.614225][T13662] EXT4-fs: Ignoring removed orlov option [ 193.624860][T13662] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.638274][T13662] ext4: Unknown parameter '&ݞ |}|廟Ĺ8mk.jXĹ5;NA' [ 193.724760][ T7672] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.743210][ T29] kauditd_printk_skb: 511 callbacks suppressed [ 193.743229][ T29] audit: type=1326 audit(1754201456.417:15479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13671 comm="syz.9.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26113feb69 code=0x7ffc0000 [ 193.745252][T13672] __nla_validate_parse: 1 callbacks suppressed [ 193.745270][T13672] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2397'. [ 193.775229][ T29] audit: type=1326 audit(1754201456.417:15480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13671 comm="syz.9.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26113feb69 code=0x7ffc0000 [ 193.812008][ T29] audit: type=1326 audit(1754201456.417:15481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13671 comm="syz.9.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f26113feb69 code=0x7ffc0000 [ 193.835516][ T29] audit: type=1326 audit(1754201456.417:15482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13671 comm="syz.9.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26113feb69 code=0x7ffc0000 [ 193.859214][ T29] audit: type=1326 audit(1754201456.417:15483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13671 comm="syz.9.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f26113feb69 code=0x7ffc0000 [ 193.882760][ T29] audit: type=1326 audit(1754201456.417:15484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13671 comm="syz.9.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26113feb69 code=0x7ffc0000 [ 193.906397][ T29] audit: type=1326 audit(1754201456.417:15485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13671 comm="syz.9.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f26113feb69 code=0x7ffc0000 [ 193.931211][ T29] audit: type=1326 audit(1754201456.607:15486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13671 comm="syz.9.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26113feb69 code=0x7ffc0000 [ 193.954927][ T29] audit: type=1326 audit(1754201456.607:15487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13671 comm="syz.9.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26113feb69 code=0x7ffc0000 [ 193.978656][ T29] audit: type=1326 audit(1754201456.607:15488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13671 comm="syz.9.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f26113feb69 code=0x7ffc0000 [ 194.011980][T13677] lo speed is unknown, defaulting to 1000 [ 194.150242][T13689] lo speed is unknown, defaulting to 1000 [ 194.169978][T13680] siw: device registration error -23 [ 194.279926][T13697] usb usb7: usbfs: process 13697 (syz.4.2408) did not claim interface 0 before use [ 194.296587][T13697] loop4: detected capacity change from 0 to 1024 [ 194.311403][T13697] loop4: detected capacity change from 0 to 1024 [ 194.318439][T13697] EXT4-fs: Ignoring removed orlov option [ 194.334869][T13697] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.350460][T13697] ext4: Unknown parameter '&ݞ |}|廟Ĺ8mk.jXĹ5;NA' [ 194.431031][ T7516] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.580299][T13715] lo speed is unknown, defaulting to 1000 [ 194.770130][T13720] siw: device registration error -23 [ 194.878826][T13723] loop4: detected capacity change from 0 to 764 [ 194.886135][T13723] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 195.110505][T13734] loop2: detected capacity change from 0 to 512 [ 195.120310][T13734] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 195.131187][T13734] EXT4-fs (loop2): invalid journal inode [ 195.137933][T13734] EXT4-fs (loop2): can't get journal size [ 195.146051][T13734] EXT4-fs (loop2): 1 truncate cleaned up [ 195.152343][T13734] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.178388][T13734] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2424'. [ 195.198845][T13736] lo speed is unknown, defaulting to 1000 [ 195.333682][T13748] lo speed is unknown, defaulting to 1000 [ 195.582314][T13759] netlink: 'syz.9.2432': attribute type 12 has an invalid length. [ 195.965824][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.191883][T13771] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2436'. [ 196.275371][T13774] loop6: detected capacity change from 0 to 512 [ 196.294590][T13774] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.307460][T13774] ext4 filesystem being mounted at /434/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.328405][T13774] lo speed is unknown, defaulting to 1000 [ 196.366803][T13774] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 94 vs 96 free clusters [ 196.381243][T13774] EXT4-fs (loop6): Remounting filesystem read-only [ 196.399443][ T4453] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.506977][T13785] usb usb7: usbfs: process 13785 (syz.6.2441) did not claim interface 0 before use [ 196.522084][T13785] loop6: detected capacity change from 0 to 1024 [ 196.536090][T13785] loop6: detected capacity change from 0 to 1024 [ 196.542922][T13785] EXT4-fs: Ignoring removed orlov option [ 196.558103][T13785] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.579532][T13785] ext4: Unknown parameter '&ݞ |}|廟Ĺ8mk.jXĹ5;NA' [ 196.694134][ T4453] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.784917][T13802] lo speed is unknown, defaulting to 1000 [ 196.791247][T13791] siw: device registration error -23 [ 196.814115][ T1084] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.834868][ T1084] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.846098][ T3459] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.885262][ T3459] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.905460][T13800] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.965340][T13800] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.975529][T13815] loop9: detected capacity change from 0 to 1764 [ 196.994567][T13815] siw: device registration error -23 [ 197.004023][T13818] netlink: 'syz.4.2453': attribute type 12 has an invalid length. [ 197.032635][T13815] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2452'. [ 197.045941][T13800] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.056683][T13815] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2452'. [ 197.078166][T13824] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.085457][T13824] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.094297][T13824] bridge0: left promiscuous mode [ 197.104777][T13824] bridge_slave_1: left allmulticast mode [ 197.110448][T13824] bridge_slave_1: left promiscuous mode [ 197.116343][T13824] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.125032][T13824] bridge_slave_0: left allmulticast mode [ 197.130781][T13824] bridge_slave_0: left promiscuous mode [ 197.136716][T13824] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.177761][T13800] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.285418][ T51] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.297542][ T3459] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.315484][ T3459] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.324124][ T3459] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.357669][T13838] loop9: detected capacity change from 0 to 1764 [ 197.367956][T13838] siw: device registration error -23 [ 197.399214][T13838] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2462'. [ 197.409620][T13838] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2462'. [ 197.467399][T13847] loop9: detected capacity change from 0 to 512 [ 197.473547][T13842] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2459'. [ 197.474959][T13847] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 197.492038][T13847] EXT4-fs (loop9): invalid journal inode [ 197.498038][T13847] EXT4-fs (loop9): can't get journal size [ 197.505866][T13847] EXT4-fs (loop9): 1 truncate cleaned up [ 197.511975][T13847] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.531542][T13847] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2465'. [ 197.838483][T13856] loop8: detected capacity change from 0 to 1764 [ 197.862204][T13856] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2467'. [ 197.955619][T13858] lo speed is unknown, defaulting to 1000 [ 197.963522][T13864] loop2: detected capacity change from 0 to 2048 [ 197.975892][T13864] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.150356][T13870] siw: device registration error -23 [ 198.310794][ T7672] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.378648][T13887] loop8: detected capacity change from 0 to 1764 [ 198.408361][T13889] usb usb7: usbfs: process 13889 (syz.6.2480) did not claim interface 0 before use [ 198.424137][T13889] loop6: detected capacity change from 0 to 1024 [ 198.440059][T13889] loop6: detected capacity change from 0 to 1024 [ 198.447369][T13889] EXT4-fs: Ignoring removed orlov option [ 198.469711][T13889] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.484533][T13889] ext4: Unknown parameter '&ݞ |}|廟Ĺ8mk.jXĹ5;NA' [ 198.502591][T13897] loop8: detected capacity change from 0 to 512 [ 198.514386][T13897] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.526892][T13897] ext4 filesystem being mounted at /364/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.547987][T13897] lo speed is unknown, defaulting to 1000 [ 198.585225][T13897] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 94 vs 96 free clusters [ 198.600945][T13897] EXT4-fs (loop8): Remounting filesystem read-only [ 198.601502][ T4453] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.633743][T13901] loop6: detected capacity change from 0 to 1764 [ 198.640900][ T7582] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.688559][T13903] lo speed is unknown, defaulting to 1000 [ 198.696865][T13905] lo speed is unknown, defaulting to 1000 [ 198.754391][ T29] kauditd_printk_skb: 706 callbacks suppressed [ 198.754523][ T29] audit: type=1326 audit(1754201461.427:16191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13908 comm="syz.8.2487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7f6ceb69 code=0x7ffc0000 [ 198.784728][ T29] audit: type=1326 audit(1754201461.427:16192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13908 comm="syz.8.2487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7f6ceb69 code=0x7ffc0000 [ 198.808369][ T29] audit: type=1326 audit(1754201461.427:16193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13908 comm="syz.8.2487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f3d7f6ceb69 code=0x7ffc0000 [ 198.834838][T13912] __nla_validate_parse: 3 callbacks suppressed [ 198.834908][T13912] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2487'. [ 198.870821][ T29] audit: type=1326 audit(1754201461.537:16194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13908 comm="syz.8.2487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7f6ceb69 code=0x7ffc0000 [ 198.894600][ T29] audit: type=1326 audit(1754201461.537:16195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13908 comm="syz.8.2487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7f6ceb69 code=0x7ffc0000 [ 198.923444][T13909] tipc: Enabling of bearer rejected, already enabled [ 198.933820][ T29] audit: type=1326 audit(1754201461.597:16196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13908 comm="syz.8.2487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f3d7f6ceb69 code=0x7ffc0000 [ 198.957496][ T29] audit: type=1326 audit(1754201461.597:16197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13908 comm="syz.8.2487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7f6ceb69 code=0x7ffc0000 [ 198.960046][T13909] loop8: detected capacity change from 0 to 1024 [ 198.981305][ T29] audit: type=1326 audit(1754201461.597:16198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13908 comm="syz.8.2487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7f6ceb69 code=0x7ffc0000 [ 199.011271][ T29] audit: type=1326 audit(1754201461.597:16199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13908 comm="syz.8.2487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3d7f6ceb69 code=0x7ffc0000 [ 199.035007][ T29] audit: type=1326 audit(1754201461.597:16200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13908 comm="syz.8.2487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7f6ceb69 code=0x7ffc0000 [ 199.064540][T13909] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.078721][T13909] ext4 filesystem being mounted at /366/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.119783][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.150065][T13921] loop2: detected capacity change from 0 to 512 [ 199.156837][T13921] EXT4-fs: Ignoring removed i_version option [ 199.165264][T13921] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 199.178615][T13921] EXT4-fs (loop2): 1 truncate cleaned up [ 199.186492][T13921] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.190265][T13924] loop9: detected capacity change from 0 to 512 [ 199.205875][T13924] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 199.213299][T13921] 9pnet_fd: Insufficient options for proto=fd [ 199.228649][T13924] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.235722][T13921] tipc: Enabling of bearer rejected, already enabled [ 199.262028][T13924] ext4 filesystem being mounted at /335/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.278777][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.315101][T13924] EXT4-fs (loop9): shut down requested (0) [ 199.340226][T13933] loop2: detected capacity change from 0 to 764 [ 199.349132][T13933] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 199.353015][T13924] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=15 [ 199.366977][T13924] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=15 [ 199.376559][T13924] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=15 [ 199.377737][T13934] loop6: detected capacity change from 0 to 512 [ 199.412449][T13934] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 199.432998][T13934] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.2496: bad orphan inode 16 [ 199.444473][T13934] ext4_test_bit(bit=15, block=4) = 0 [ 199.449144][T13936] lo speed is unknown, defaulting to 1000 [ 199.449784][T13934] EXT4-fs (loop6): 1 orphan inode deleted [ 199.461839][T13934] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.468072][T13938] lo speed is unknown, defaulting to 1000 [ 199.488920][T13934] tipc: Enabled bearer , priority 0 [ 199.496049][T13924] Falling back ldisc for ttyS3. [ 199.502340][T13934] syzkaller0: entered promiscuous mode [ 199.507951][T13934] syzkaller0: entered allmulticast mode [ 199.529062][ T7672] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.534412][T13934] tipc: Resetting bearer [ 199.569557][T13947] netlink: 'syz.4.2500': attribute type 10 has an invalid length. [ 199.579545][T13932] tipc: Resetting bearer [ 199.594581][T13932] tipc: Disabling bearer [ 199.602466][T13947] ipvlan0: entered allmulticast mode [ 199.607887][T13947] veth0_vlan: entered allmulticast mode [ 199.616454][ T7582] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.616562][T13947] team0: Device ipvlan0 failed to register rx_handler [ 199.656490][T13951] lo speed is unknown, defaulting to 1000 [ 200.141380][T13968] usb usb7: usbfs: process 13968 (syz.4.2506) did not claim interface 0 before use [ 200.156597][T13968] loop4: detected capacity change from 0 to 1024 [ 200.170904][T13968] loop4: detected capacity change from 0 to 1024 [ 200.177985][T13968] EXT4-fs: Ignoring removed orlov option [ 200.200105][T13968] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.214745][T13968] ext4: Unknown parameter '&ݞ |}|廟Ĺ8mk.jXĹ5;NA' [ 200.311800][ T7516] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.385806][T13978] netlink: 'syz.4.2509': attribute type 10 has an invalid length. [ 200.394978][T13978] team0: Device ipvlan0 failed to register rx_handler [ 200.592193][T13981] lo speed is unknown, defaulting to 1000 [ 200.630861][T13987] lo speed is unknown, defaulting to 1000 [ 200.709755][T13985] siw: device registration error -23 [ 200.739044][T13997] loop9: detected capacity change from 0 to 1764 [ 200.748010][T13997] siw: device registration error -23 [ 200.767530][T13997] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2516'. [ 200.776792][T13997] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2516'. [ 200.789331][T13999] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2515'. [ 200.886785][T13995] tipc: Enabling of bearer rejected, already enabled [ 200.913204][T13995] loop8: detected capacity change from 0 to 1024 [ 200.947063][T13995] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.960808][T13995] ext4 filesystem being mounted at /370/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.101206][T14018] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.166949][T14018] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.254153][T14018] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.259655][ T4453] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.306086][T14018] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.354875][ T1399] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.366225][ T1399] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.378743][ T1084] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.390420][ T1084] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.449485][T14032] lo speed is unknown, defaulting to 1000 [ 201.571523][ T7582] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.587851][T14039] loop4: detected capacity change from 0 to 1024 [ 201.597892][T14039] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.647111][T14044] netlink: 'syz.8.2530': attribute type 12 has an invalid length. [ 201.678106][T14045] netlink: 'syz.4.2529': attribute type 10 has an invalid length. [ 201.694249][T14045] geneve1: entered promiscuous mode [ 201.711121][T14045] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 201.753441][ T7516] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.762980][T14053] loop8: detected capacity change from 0 to 512 [ 201.787861][T14053] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.2533: bg 0: block 131: padding at end of block bitmap is not set [ 201.803285][T14053] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 201.812305][T14053] EXT4-fs (loop8): 1 truncate cleaned up [ 201.818641][T14053] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.844157][T14061] loop2: detected capacity change from 0 to 1764 [ 201.854383][T14061] siw: device registration error -23 [ 201.863250][T14064] loop4: detected capacity change from 0 to 1764 [ 201.872028][T14064] siw: device registration error -23 [ 201.880782][T14055] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.893795][T14064] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2538'. [ 201.895583][T14061] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2537'. [ 201.903518][T14064] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2538'. [ 201.915709][T14061] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2537'. [ 201.965325][T14055] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.014742][T14055] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.084172][T14055] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.129579][ T37] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.141816][ T37] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.164746][ T1399] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.175947][ T1399] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.187457][T14081] loop6: detected capacity change from 0 to 2048 [ 202.204949][T14081] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.268806][T14089] lo speed is unknown, defaulting to 1000 [ 202.400492][T14100] loop9: detected capacity change from 0 to 512 [ 202.407485][T14100] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 202.417544][T14100] EXT4-fs (loop9): invalid journal inode [ 202.423386][T14100] EXT4-fs (loop9): can't get journal size [ 202.429909][ T4453] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.433522][T14100] EXT4-fs (loop9): 1 truncate cleaned up [ 202.452118][T14100] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.479392][T14100] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2551'. [ 202.488883][T14103] loop6: detected capacity change from 0 to 1764 [ 202.497765][T14103] siw: device registration error -23 [ 202.516597][T14103] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2552'. [ 202.556675][T14107] loop6: detected capacity change from 0 to 1764 [ 202.566297][T14107] siw: device registration error -23 [ 202.600381][ T7582] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.742243][T14112] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.784675][T14112] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.847556][T14112] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.880765][T14123] loop4: detected capacity change from 0 to 1764 [ 202.889141][T14112] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.902422][T14123] siw: device registration error -23 [ 202.930951][ T1084] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.942595][ T1399] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.961688][ T1399] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.979858][T14121] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.991562][ T1399] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.024648][T14121] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.074875][T14121] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.098996][T14137] loop4: detected capacity change from 0 to 1764 [ 203.107463][T14137] siw: device registration error -23 [ 203.194833][T14121] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.261891][ T7672] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.279337][ T51] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.291420][ T51] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.306845][ T1399] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.321592][ T1399] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.375481][T14152] lo speed is unknown, defaulting to 1000 [ 203.505616][T14160] netlink: 'syz.8.2571': attribute type 12 has an invalid length. [ 203.514374][T14155] siw: device registration error -23 [ 203.632725][T14168] loop8: detected capacity change from 0 to 1764 [ 203.701492][T14174] lo speed is unknown, defaulting to 1000 [ 203.759248][T14178] loop8: detected capacity change from 0 to 128 [ 203.767650][T14178] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 203.780628][T14178] ext4 filesystem being mounted at /382/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.794002][ T29] kauditd_printk_skb: 488 callbacks suppressed [ 203.794030][ T29] audit: type=1400 audit(1754201466.467:16689): avc: denied { setattr } for pid=14177 comm="syz.8.2579" path="/382/file1/file1" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 203.890652][ T7582] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 204.139944][T14187] lo speed is unknown, defaulting to 1000 [ 204.255951][T14194] siw: device registration error -23 [ 204.538646][T14207] usb usb7: usbfs: process 14207 (syz.2.2590) did not claim interface 0 before use [ 204.553745][T14207] loop2: detected capacity change from 0 to 1024 [ 204.569159][T14207] loop2: detected capacity change from 0 to 1024 [ 204.575842][T14207] EXT4-fs: Ignoring removed orlov option [ 204.594563][T14207] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.609040][T14207] ext4: Unknown parameter '&ݞ |}|廟Ĺ8mk.jXĹ5;NA' [ 204.701917][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.758430][T14239] loop8: detected capacity change from 0 to 764 [ 205.765843][T14239] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 205.793049][T14241] usb usb7: usbfs: process 14241 (syz.6.2604) did not claim interface 0 before use [ 205.808435][T14241] loop6: detected capacity change from 0 to 1024 [ 205.809904][T14243] loop8: detected capacity change from 0 to 1764 [ 205.825133][T14241] loop6: detected capacity change from 0 to 1024 [ 205.831879][T14241] EXT4-fs: Ignoring removed orlov option [ 205.840239][T14243] __nla_validate_parse: 10 callbacks suppressed [ 205.840302][T14243] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2605'. [ 205.848725][T14241] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.873510][T14241] ext4: Unknown parameter '&ݞ |}|廟Ĺ8mk.jXĹ5;NA' [ 205.919399][T14249] loop8: detected capacity change from 0 to 2048 [ 205.945811][T14249] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.967768][ T4453] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.000268][T14255] lo speed is unknown, defaulting to 1000 [ 206.124146][T14267] lo speed is unknown, defaulting to 1000 [ 206.236805][T14277] loop4: detected capacity change from 0 to 1764 [ 206.245623][T14277] siw: device registration error -23 [ 206.264778][T14277] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2618'. [ 206.301444][ T29] audit: type=1326 audit(1754201468.967:16690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14278 comm="syz.4.2619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ee528eb69 code=0x7ffc0000 [ 206.325260][ T29] audit: type=1326 audit(1754201468.967:16691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14278 comm="syz.4.2619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f6ee528eb69 code=0x7ffc0000 [ 206.349034][ T29] audit: type=1326 audit(1754201468.967:16692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14278 comm="syz.4.2619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ee528eb69 code=0x7ffc0000 [ 206.372751][ T29] audit: type=1326 audit(1754201468.967:16693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14278 comm="syz.4.2619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f6ee528eb69 code=0x7ffc0000 [ 206.379315][T14281] netlink: 'syz.4.2620': attribute type 10 has an invalid length. [ 206.396454][ T29] audit: type=1326 audit(1754201468.967:16694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14278 comm="syz.4.2619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ee528eb69 code=0x7ffc0000 [ 206.398131][ T29] audit: type=1326 audit(1754201468.967:16695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14278 comm="syz.4.2619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ee528eb69 code=0x7ffc0000 [ 206.406248][T14281] team0: Device ipvlan0 failed to register rx_handler [ 206.428189][ T29] audit: type=1326 audit(1754201468.967:16696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14278 comm="syz.4.2619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ee528eb69 code=0x7ffc0000 [ 206.482342][ T29] audit: type=1326 audit(1754201468.967:16697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14278 comm="syz.4.2619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f6ee528eb69 code=0x7ffc0000 [ 206.506415][ T29] audit: type=1326 audit(1754201468.967:16698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14278 comm="syz.4.2619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ee528eb69 code=0x7ffc0000 [ 206.588081][T14289] lo speed is unknown, defaulting to 1000 [ 206.887131][ T7582] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.926729][T14303] loop6: detected capacity change from 0 to 2048 [ 206.951700][T14303] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.981075][T14305] loop9: detected capacity change from 0 to 764 [ 206.988896][T14305] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 207.032787][T14311] netlink: 'syz.8.2633': attribute type 10 has an invalid length. [ 207.051231][T14311] ipvlan0: entered allmulticast mode [ 207.056709][T14311] veth0_vlan: entered allmulticast mode [ 207.065003][T14311] team0: Device ipvlan0 failed to register rx_handler [ 207.072930][ T4453] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.121072][T14319] loop6: detected capacity change from 0 to 512 [ 207.129270][T14319] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 207.144314][T14319] EXT4-fs (loop6): invalid journal inode [ 207.161708][T14319] EXT4-fs (loop6): can't get journal size [ 207.171957][T14319] EXT4-fs (loop6): 1 truncate cleaned up [ 207.183533][T14319] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.235100][T14319] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2635'. [ 207.262215][T14327] lo speed is unknown, defaulting to 1000 [ 207.326605][T14336] loop9: detected capacity change from 0 to 764 [ 207.334687][T14336] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 207.379522][T14338] loop8: detected capacity change from 0 to 2048 [ 207.397975][T14338] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.542462][T14352] lo speed is unknown, defaulting to 1000 [ 207.549921][ T7582] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.608573][T14355] loop4: detected capacity change from 0 to 1764 [ 207.634066][T14355] siw: device registration error -23 [ 207.656421][T14355] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2653'. [ 207.667400][T14355] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2653'. [ 207.694140][T14366] netlink: 'syz.9.2656': attribute type 12 has an invalid length. [ 207.724878][T14368] loop4: detected capacity change from 0 to 1024 [ 207.732494][T14368] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 207.743796][T14361] loop8: detected capacity change from 0 to 764 [ 207.756836][T14361] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 207.767992][T14368] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.839857][T14375] loop8: detected capacity change from 0 to 1024 [ 207.857475][T14375] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.881001][T14375] ext4 filesystem being mounted at /398/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.907804][ T7582] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.942048][ T7516] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.979794][ T4453] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.591235][T14394] loop2: detected capacity change from 0 to 1024 [ 208.600941][T14394] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.643501][T14397] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 208.798203][T14403] loop9: detected capacity change from 0 to 512 [ 208.814693][T14403] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 208.829386][T14403] EXT4-fs (loop9): invalid journal inode [ 208.838639][T14403] EXT4-fs (loop9): can't get journal size [ 208.846460][ T29] kauditd_printk_skb: 309 callbacks suppressed [ 208.846475][ T29] audit: type=1326 audit(1754201471.517:17008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14406 comm="syz.8.2669" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3d7f6ceb69 code=0x0 [ 208.883276][T14403] EXT4-fs (loop9): 1 truncate cleaned up [ 208.889522][T14403] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.906834][ T29] audit: type=1326 audit(1754201471.577:17009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14402 comm="syz.9.2667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26113feb69 code=0x7ffc0000 [ 208.936019][T14403] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2667'. [ 208.945089][ T29] audit: type=1326 audit(1754201471.597:17010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14402 comm="syz.9.2667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f26113feb69 code=0x7ffc0000 [ 208.968739][ T29] audit: type=1326 audit(1754201471.597:17011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14402 comm="syz.9.2667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26113feb69 code=0x7ffc0000 [ 208.981918][T14405] siw: device registration error -23 [ 208.992403][ T29] audit: type=1326 audit(1754201471.597:17012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14402 comm="syz.9.2667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26113feb69 code=0x7ffc0000 [ 209.021311][ T29] audit: type=1326 audit(1754201471.597:17013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14402 comm="syz.9.2667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26113feb69 code=0x7ffc0000 [ 209.044907][ T29] audit: type=1326 audit(1754201471.597:17014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14402 comm="syz.9.2667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26113feb69 code=0x7ffc0000 [ 209.068597][ T29] audit: type=1326 audit(1754201471.597:17015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14402 comm="syz.9.2667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f26113feb69 code=0x7ffc0000 [ 209.092198][ T29] audit: type=1326 audit(1754201471.597:17016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14402 comm="syz.9.2667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26113feb69 code=0x7ffc0000 [ 209.115845][ T29] audit: type=1326 audit(1754201471.597:17017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14402 comm="syz.9.2667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26113feb69 code=0x7ffc0000 [ 209.166176][T14424] loop6: detected capacity change from 0 to 1764 [ 209.176071][T14424] siw: device registration error -23 [ 209.193105][T14424] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2674'. [ 209.432204][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.608342][T14450] usb usb7: usbfs: process 14450 (syz.2.2685) did not claim interface 0 before use [ 209.623901][T14450] loop2: detected capacity change from 0 to 1024 [ 209.642482][ T7672] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.660656][T14450] loop2: detected capacity change from 0 to 1024 [ 209.667654][T14450] EXT4-fs: Ignoring removed orlov option [ 209.686456][T14450] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.706780][T14450] ext4: Unknown parameter '&ݞ |}|廟Ĺ8mk.jXĹ5;NA' [ 209.718654][T14460] FAULT_INJECTION: forcing a failure. [ 209.718654][T14460] name failslab, interval 1, probability 0, space 0, times 0 [ 209.731378][T14460] CPU: 1 UID: 0 PID: 14460 Comm: syz.9.2688 Not tainted 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(voluntary) [ 209.731501][T14460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 209.731585][T14460] Call Trace: [ 209.731592][T14460] [ 209.731600][T14460] __dump_stack+0x1d/0x30 [ 209.731627][T14460] dump_stack_lvl+0xe8/0x140 [ 209.731677][T14460] dump_stack+0x15/0x1b [ 209.731702][T14460] should_fail_ex+0x265/0x280 [ 209.731736][T14460] should_failslab+0x8c/0xb0 [ 209.731796][T14460] kmem_cache_alloc_noprof+0x50/0x310 [ 209.731881][T14460] ? prepare_creds+0x37/0x4c0 [ 209.731912][T14460] prepare_creds+0x37/0x4c0 [ 209.731941][T14460] __sys_setreuid+0xdc/0x520 [ 209.731971][T14460] ? trace_sys_enter+0xd0/0xf0 [ 209.732108][T14460] __x64_sys_setreuid+0x2d/0x40 [ 209.732199][T14460] x64_sys_call+0x244c/0x2ff0 [ 209.732219][T14460] do_syscall_64+0xd2/0x200 [ 209.732274][T14460] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 209.732304][T14460] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 209.732331][T14460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.732358][T14460] RIP: 0033:0x7f26113feb69 [ 209.732409][T14460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.732427][T14460] RSP: 002b:00007f260fa67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000071 [ 209.732445][T14460] RAX: ffffffffffffffda RBX: 00007f2611625fa0 RCX: 00007f26113feb69 [ 209.732461][T14460] RDX: 0000000000000000 RSI: 000000000000ee01 RDI: ffffffffffffffff [ 209.732477][T14460] RBP: 00007f260fa67090 R08: 0000000000000000 R09: 0000000000000000 [ 209.732523][T14460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.732534][T14460] R13: 0000000000000000 R14: 00007f2611625fa0 R15: 00007ffe851a1d78 [ 209.732554][T14460] [ 209.953608][T14465] loop9: detected capacity change from 0 to 1024 [ 210.056082][T14473] bridge_slave_0: left allmulticast mode [ 210.061866][T14473] bridge_slave_0: left promiscuous mode [ 210.067851][T14473] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.079481][T14473] bridge_slave_1: left allmulticast mode [ 210.085246][T14473] bridge_slave_1: left promiscuous mode [ 210.091090][T14473] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.103416][T14473] bond0: (slave bond_slave_0): Releasing backup interface [ 210.115225][T14473] bond0: (slave bond_slave_1): Releasing backup interface [ 210.128102][T14473] team0: Port device team_slave_0 removed [ 210.137502][T14473] team0: Port device team_slave_1 removed [ 210.144997][T14473] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.152432][T14473] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.161339][T14473] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.169041][T14473] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.195648][T14478] team0: Mode changed to "activebackup" [ 210.229957][T14483] lo speed is unknown, defaulting to 1000 [ 210.359371][T14494] loop9: detected capacity change from 0 to 764 [ 210.367172][T14494] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 210.392821][T14496] loop6: detected capacity change from 0 to 1764 [ 210.405592][T14496] siw: device registration error -23 [ 210.428324][T14496] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2700'. [ 210.437930][T14496] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2700'. [ 210.477673][T14504] FAULT_INJECTION: forcing a failure. [ 210.477673][T14504] name failslab, interval 1, probability 0, space 0, times 0 [ 210.490753][T14504] CPU: 1 UID: 0 PID: 14504 Comm: syz.6.2702 Not tainted 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(voluntary) [ 210.490790][T14504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 210.490805][T14504] Call Trace: [ 210.490811][T14504] [ 210.490820][T14504] __dump_stack+0x1d/0x30 [ 210.490846][T14504] dump_stack_lvl+0xe8/0x140 [ 210.490867][T14504] dump_stack+0x15/0x1b [ 210.490885][T14504] should_fail_ex+0x265/0x280 [ 210.490927][T14504] should_failslab+0x8c/0xb0 [ 210.490958][T14504] kmem_cache_alloc_node_noprof+0x57/0x320 [ 210.491065][T14504] ? __alloc_skb+0x101/0x320 [ 210.491091][T14504] __alloc_skb+0x101/0x320 [ 210.491114][T14504] ? audit_log_start+0x365/0x6c0 [ 210.491188][T14504] audit_log_start+0x380/0x6c0 [ 210.491245][T14504] audit_seccomp+0x48/0x100 [ 210.491268][T14504] ? __seccomp_filter+0x68c/0x10d0 [ 210.491287][T14504] __seccomp_filter+0x69d/0x10d0 [ 210.491306][T14504] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 210.491340][T14504] ? vfs_write+0x75e/0x8e0 [ 210.491369][T14504] ? __rcu_read_unlock+0x4f/0x70 [ 210.491460][T14504] ? __rcu_read_unlock+0x4f/0x70 [ 210.491481][T14504] __secure_computing+0x82/0x150 [ 210.491505][T14504] syscall_trace_enter+0xcf/0x1e0 [ 210.491527][T14504] do_syscall_64+0xac/0x200 [ 210.491551][T14504] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 210.491584][T14504] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 210.491604][T14504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.491710][T14504] RIP: 0033:0x7f1ab17ad57c [ 210.491731][T14504] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 210.491768][T14504] RSP: 002b:00007f1aafe17030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 210.491864][T14504] RAX: ffffffffffffffda RBX: 00007f1ab19d5fa0 RCX: 00007f1ab17ad57c [ 210.491874][T14504] RDX: 000000000000000f RSI: 00007f1aafe170a0 RDI: 0000000000000005 [ 210.491884][T14504] RBP: 00007f1aafe17090 R08: 0000000000000000 R09: 0000000000000000 [ 210.491894][T14504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.491981][T14504] R13: 0000000000000000 R14: 00007f1ab19d5fa0 R15: 00007ffe7e4aa798 [ 210.492075][T14504] [ 210.730031][T14506] loop6: detected capacity change from 0 to 1024 [ 210.813819][T14509] lo speed is unknown, defaulting to 1000 [ 210.852661][T14512] lo speed is unknown, defaulting to 1000 [ 210.911228][T14519] loop6: detected capacity change from 0 to 1764 [ 210.921702][T14519] siw: device registration error -23 [ 210.940827][T14519] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2707'. [ 211.296375][T14535] usb usb7: usbfs: process 14535 (syz.4.2713) did not claim interface 0 before use [ 211.316210][T14535] loop4: detected capacity change from 0 to 1024 [ 211.341482][T14535] loop4: detected capacity change from 0 to 1024 [ 211.348405][T14535] EXT4-fs: Ignoring removed orlov option [ 211.368582][T14535] ext4: Unknown parameter '&ݞ |}|廟Ĺ8mk.jXĹ5;NA' [ 211.551149][T14548] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2718'. [ 211.560224][T14548] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2718'. [ 211.937300][T14561] netlink: 'syz.6.2723': attribute type 12 has an invalid length. [ 211.993071][T14570] loop6: detected capacity change from 0 to 1024 [ 211.999741][T14570] EXT4-fs: inline encryption not supported [ 212.013229][T14570] EXT4-fs (loop6): can't mount with journal_checksum, fs mounted w/o journal [ 212.048107][T14573] loop6: detected capacity change from 0 to 1024 [ 212.064567][T14573] ext4 filesystem being mounted at /487/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.075666][T14573] FAULT_INJECTION: forcing a failure. [ 212.075666][T14573] name failslab, interval 1, probability 0, space 0, times 0 [ 212.088389][T14573] CPU: 0 UID: 0 PID: 14573 Comm: syz.6.2728 Not tainted 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(voluntary) [ 212.088415][T14573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 212.088504][T14573] Call Trace: [ 212.088510][T14573] [ 212.088516][T14573] __dump_stack+0x1d/0x30 [ 212.088536][T14573] dump_stack_lvl+0xe8/0x140 [ 212.088554][T14573] dump_stack+0x15/0x1b [ 212.088571][T14573] should_fail_ex+0x265/0x280 [ 212.088601][T14573] should_failslab+0x8c/0xb0 [ 212.088622][T14573] __kvmalloc_node_noprof+0x123/0x4e0 [ 212.088657][T14573] ? vmemdup_user+0x26/0xd0 [ 212.088680][T14573] ? should_fail_usercopy+0x1a/0x20 [ 212.088699][T14573] vmemdup_user+0x26/0xd0 [ 212.088721][T14573] path_setxattrat+0x1b6/0x310 [ 212.088808][T14573] __x64_sys_lsetxattr+0x71/0x90 [ 212.088831][T14573] x64_sys_call+0x2877/0x2ff0 [ 212.088903][T14573] do_syscall_64+0xd2/0x200 [ 212.088924][T14573] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 212.088988][T14573] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 212.089007][T14573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.089026][T14573] RIP: 0033:0x7f1ab17aeb69 [ 212.089040][T14573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.089089][T14573] RSP: 002b:00007f1aafe17038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 212.089106][T14573] RAX: ffffffffffffffda RBX: 00007f1ab19d5fa0 RCX: 00007f1ab17aeb69 [ 212.089117][T14573] RDX: 0000200000000000 RSI: 0000200000000080 RDI: 0000200000000040 [ 212.089127][T14573] RBP: 00007f1aafe17090 R08: 0000000000000002 R09: 0000000000000000 [ 212.089138][T14573] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 212.089148][T14573] R13: 0000000000000000 R14: 00007f1ab19d5fa0 R15: 00007ffe7e4aa798 [ 212.089237][T14573] [ 212.681629][T14590] lo speed is unknown, defaulting to 1000 [ 212.735546][T14594] usb usb7: usbfs: process 14594 (syz.4.2734) did not claim interface 0 before use [ 212.749743][T14594] loop4: detected capacity change from 0 to 1024 [ 212.763952][T14594] loop4: detected capacity change from 0 to 1024 [ 212.770694][T14594] EXT4-fs: Ignoring removed orlov option [ 212.787353][T14594] ext4: Unknown parameter '&ݞ |}|廟Ĺ8mk.jXĹ5;NA' [ 212.844094][T14598] loop2: detected capacity change from 0 to 764 [ 212.851344][T14598] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 212.911075][T14600] loop2: detected capacity change from 0 to 1764 [ 212.924029][T14600] siw: device registration error -23 [ 212.951831][T14600] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2736'. [ 212.963000][T14600] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2736'. [ 212.972275][T14604] loop4: detected capacity change from 0 to 1024 [ 213.196789][T14620] lo speed is unknown, defaulting to 1000 [ 213.263185][T14622] loop4: detected capacity change from 0 to 764 [ 213.272194][T14622] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 213.281624][T14627] usb usb7: usbfs: process 14627 (syz.9.2747) did not claim interface 0 before use [ 213.308032][T14627] loop9: detected capacity change from 0 to 1024 [ 213.341559][T14627] loop9: detected capacity change from 0 to 1024 [ 213.349627][T14627] EXT4-fs: Ignoring removed orlov option [ 213.366201][T14627] ext4: Unknown parameter '&ݞ |}|廟Ĺ8mk.jXĹ5;NA' [ 213.438220][T14639] loop4: detected capacity change from 0 to 1024 [ 213.453473][ C0] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.535003][T14651] lo speed is unknown, defaulting to 1000 [ 213.959300][ T29] kauditd_printk_skb: 150 callbacks suppressed [ 213.959315][ T29] audit: type=1326 audit(1754201476.627:17166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14661 comm="syz.2.2758" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcb62a1eb69 code=0x0 [ 214.352403][T14674] usb usb7: usbfs: process 14674 (syz.9.2762) did not claim interface 0 before use [ 214.368330][T14674] loop9: detected capacity change from 0 to 1024 [ 214.383337][T14674] loop9: detected capacity change from 0 to 1024 [ 214.390172][T14674] EXT4-fs: Ignoring removed orlov option [ 214.407941][T14674] ext4: Unknown parameter '&ݞ |}|廟Ĺ8mk.jXĹ5;NA' [ 214.555941][T14694] netlink: 'syz.4.2769': attribute type 10 has an invalid length. [ 214.569110][T14694] team0: Device ipvlan0 failed to register rx_handler [ 214.660927][T14692] loop8: detected capacity change from 0 to 1024 [ 214.768929][T14705] loop8: detected capacity change from 0 to 1764 [ 214.794016][T14705] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2771'. [ 214.803869][T14705] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2771'. [ 215.013985][T14722] usb usb7: usbfs: process 14722 (syz.4.2777) did not claim interface 0 before use [ 215.028093][T14722] loop4: detected capacity change from 0 to 1024 [ 215.041289][T14722] loop4: detected capacity change from 0 to 1024 [ 215.048005][T14722] EXT4-fs: Ignoring removed orlov option [ 215.066934][T14722] ext4: Unknown parameter '&ݞ |}|廟Ĺ8mk.jXĹ5;NA' [ 215.308255][T14732] siw: device registration error -23 [ 215.422026][T14737] loop4: detected capacity change from 0 to 1024 [ 215.501372][T14741] loop9: detected capacity change from 0 to 1764 [ 215.510930][T14741] siw: device registration error -23 [ 215.529428][T14745] loop4: detected capacity change from 0 to 1764 [ 215.532420][T14741] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2784'. [ 215.545849][T14741] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2784'. [ 215.558955][T14745] siw: device registration error -23 [ 215.578845][T14745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2785'. [ 215.771634][T14754] siw: device registration error -23 [ 215.853970][ T29] audit: type=1326 audit(1754201478.527:17167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14757 comm="syz.4.2790" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6ee528eb69 code=0x0 [ 215.931233][ T29] audit: type=1326 audit(1754201478.597:17168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14770 comm="syz.2.2793" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcb62a1eb69 code=0x0 [ 216.358579][T14783] loop6: detected capacity change from 0 to 1764 [ 216.367458][T14783] siw: device registration error -23 [ 216.387686][T14783] __nla_validate_parse: 1 callbacks suppressed [ 216.387700][T14783] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2797'. [ 216.404243][T14783] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2797'. [ 216.544423][T14791] netlink: 'syz.9.2801': attribute type 10 has an invalid length. [ 216.554653][T14791] ipvlan0: entered allmulticast mode [ 216.560018][T14791] veth0_vlan: entered allmulticast mode [ 216.567148][T14791] team0: Device ipvlan0 failed to register rx_handler [ 216.624810][T14795] netlink: 'syz.6.2803': attribute type 10 has an invalid length. [ 216.632657][T14795] ipvlan0: entered allmulticast mode [ 216.638045][T14795] veth0_vlan: entered allmulticast mode [ 216.645287][T14795] team0: Device ipvlan0 failed to register rx_handler [ 216.916124][T14810] loop8: detected capacity change from 0 to 1764 [ 216.965228][T14810] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2809'. [ 217.010302][T14810] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2809'. [ 217.126365][T14822] netlink: 'syz.8.2813': attribute type 10 has an invalid length. [ 217.136117][T14822] team0: Device ipvlan0 failed to register rx_handler [ 217.480196][ T29] audit: type=1326 audit(1754201480.147:17169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14835 comm="syz.4.2816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ee528eb69 code=0x7ffc0000 [ 217.503892][ T29] audit: type=1326 audit(1754201480.147:17170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14835 comm="syz.4.2816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f6ee528eb69 code=0x7ffc0000 [ 217.527479][ T29] audit: type=1326 audit(1754201480.147:17171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14835 comm="syz.4.2816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ee528eb69 code=0x7ffc0000 [ 217.551990][ T29] audit: type=1326 audit(1754201480.157:17172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14835 comm="syz.4.2816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ee528eb69 code=0x7ffc0000 [ 217.575990][ T29] audit: type=1326 audit(1754201480.157:17173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14835 comm="syz.4.2816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f6ee528eb69 code=0x7ffc0000 [ 217.599703][ T29] audit: type=1326 audit(1754201480.157:17174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14835 comm="syz.4.2816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ee528eb69 code=0x7ffc0000 [ 217.623445][ T29] audit: type=1326 audit(1754201480.157:17175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14835 comm="syz.4.2816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ee528eb69 code=0x7ffc0000 [ 217.784214][T14846] loop2: detected capacity change from 0 to 764 [ 217.792323][T14846] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 218.062253][T14859] lo speed is unknown, defaulting to 1000 [ 218.997714][T14898] syz.9.2841 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 219.008611][T14896] loop6: detected capacity change from 0 to 1764 [ 219.024238][T14896] siw: device registration error -23 [ 219.045465][T14896] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2840'. [ 219.055083][T14896] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2840'. [ 219.138483][T14900] siw: device registration error -23 [ 219.324717][T14910] lo speed is unknown, defaulting to 1000 [ 219.407410][T14915] loop9: detected capacity change from 0 to 1764 [ 219.418453][T14915] siw: device registration error -23 [ 219.445806][T14915] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2848'. [ 219.455712][T14915] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2848'. [ 219.567326][T14924] lo speed is unknown, defaulting to 1000 [ 219.685015][T14935] usb usb7: usbfs: process 14935 (syz.8.2856) did not claim interface 0 before use [ 219.716468][T14935] loop8: detected capacity change from 0 to 1024 [ 219.730399][T14931] siw: device registration error -23 [ 219.747887][T14934] lo speed is unknown, defaulting to 1000 [ 219.758065][T14935] loop8: detected capacity change from 0 to 1024 [ 219.769350][T14935] EXT4-fs: Ignoring removed orlov option [ 219.796265][T14935] ext4: Unknown parameter '&ݞ |}|廟Ĺ8mk.jXĹ5;NA' [ 219.826479][T14943] loop2: detected capacity change from 0 to 764 [ 219.834742][T14943] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 219.893079][T14947] netlink: 'syz.2.2860': attribute type 10 has an invalid length. [ 219.907384][T14947] ipvlan0: entered allmulticast mode [ 219.912778][T14947] veth0_vlan: entered allmulticast mode [ 220.029730][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 220.029744][ T29] audit: type=1326 audit(1754201482.697:17223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14950 comm="syz.8.2861" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3d7f6ceb69 code=0x0 [ 220.126097][ T29] audit: type=1326 audit(1754201482.767:17224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14957 comm="syz.4.2864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ee528eb69 code=0x7ffc0000 [ 220.150183][ T29] audit: type=1326 audit(1754201482.767:17225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14957 comm="syz.4.2864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f6ee528eb69 code=0x7ffc0000 [ 220.173750][ T29] audit: type=1326 audit(1754201482.767:17226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14957 comm="syz.4.2864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ee528eb69 code=0x7ffc0000 [ 220.197830][ T29] audit: type=1326 audit(1754201482.767:17227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14957 comm="syz.4.2864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f6ee528eb69 code=0x7ffc0000 [ 220.221464][ T29] audit: type=1326 audit(1754201482.767:17228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14957 comm="syz.4.2864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ee528eb69 code=0x7ffc0000 [ 220.245148][ T29] audit: type=1326 audit(1754201482.767:17229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14957 comm="syz.4.2864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ee528eb69 code=0x7ffc0000 [ 220.268869][ T29] audit: type=1326 audit(1754201482.767:17230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14957 comm="syz.4.2864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ee528eb69 code=0x7ffc0000 [ 220.277236][T14961] lo speed is unknown, defaulting to 1000 [ 220.292676][ T29] audit: type=1326 audit(1754201482.767:17231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14957 comm="syz.4.2864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f6ee528eb69 code=0x7ffc0000 [ 220.321938][ T29] audit: type=1326 audit(1754201482.767:17232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14957 comm="syz.4.2864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ee528eb69 code=0x7ffc0000 [ 220.477099][T14973] lo speed is unknown, defaulting to 1000 [ 220.543805][T14985] loop9: detected capacity change from 0 to 512 [ 220.550995][T14985] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 220.560605][T14985] EXT4-fs (loop9): invalid journal inode [ 220.564166][T14987] usb usb7: usbfs: process 14987 (syz.4.2872) did not claim interface 0 before use [ 220.567447][T14985] EXT4-fs (loop9): can't get journal size [ 220.583702][T14985] EXT4-fs (loop9): 1 truncate cleaned up [ 220.590128][T14987] loop4: detected capacity change from 0 to 1024 [ 220.599506][T14985] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2871'. [ 220.607027][T14987] loop4: detected capacity change from 0 to 1024 [ 220.616304][T14987] EXT4-fs: Ignoring removed orlov option [ 220.635304][T14987] ext4: Unknown parameter '&ݞ |}|廟Ĺ8mk.jXĹ5;NA' [ 221.277154][T15011] usb usb7: usbfs: process 15011 (syz.6.2878) did not claim interface 0 before use [ 221.291955][T15011] loop6: detected capacity change from 0 to 1024 [ 221.306729][T15011] loop6: detected capacity change from 0 to 1024 [ 221.313617][T15011] EXT4-fs: Ignoring removed orlov option [ 221.325253][T15011] EXT4-fs mount: 30 callbacks suppressed [ 221.325267][T15011] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.345569][T15011] ext4: Unknown parameter '&ݞ |}|廟Ĺ8mk.jXĹ5;NA' [ 221.386903][ T7672] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.396237][T15017] loop2: detected capacity change from 0 to 2048 [ 221.414834][T15017] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.427607][ T4453] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.476829][T15023] lo speed is unknown, defaulting to 1000 [ 221.562751][T15031] random: crng reseeded on system resumption [ 221.669130][T15036] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2886'. [ 221.722634][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.727706][T15042] netlink: 'syz.8.2889': attribute type 10 has an invalid length. [ 221.745310][T15042] team0: Device ipvlan0 failed to register rx_handler [ 221.789393][T15046] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2890'. [ 221.798480][T15046] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2890'. [ 221.871322][T15049] loop6: detected capacity change from 0 to 256 [ 221.879660][T15049] vfat: Unknown parameter 'uni)Iy_xlate' [ 221.895135][T15049] loop6: detected capacity change from 0 to 512 [ 221.901856][T15049] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 222.906360][T15059] lo speed is unknown, defaulting to 1000 [ 222.975298][T15068] netlink: 'syz.2.2896': attribute type 12 has an invalid length. [ 223.035145][T15075] loop2: detected capacity change from 0 to 1764 [ 223.049115][T15075] siw: device registration error -23 [ 223.067404][T15081] loop6: detected capacity change from 0 to 512 [ 223.074348][T15081] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 223.079400][T15075] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2899'. [ 223.083958][T15081] EXT4-fs (loop6): invalid journal inode [ 223.093193][T15075] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2899'. [ 223.100175][T15081] EXT4-fs (loop6): can't get journal size [ 223.122725][T15081] EXT4-fs (loop6): 1 truncate cleaned up [ 223.128899][T15081] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.158155][T15081] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2903'. [ 223.174163][T15087] loop2: detected capacity change from 0 to 764 [ 223.181490][T15087] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 223.209840][T15089] netlink: 'syz.2.2905': attribute type 10 has an invalid length. [ 223.469566][T15097] siw: device registration error -23 [ 223.576389][T15105] loop9: detected capacity change from 0 to 2048 [ 223.594890][T15105] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.842284][ T7672] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.927849][ T4453] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.992610][T15123] loop6: detected capacity change from 0 to 1764 [ 224.004956][T15123] siw: device registration error -23 [ 224.040881][T15123] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2915'. [ 224.050345][T15123] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2915'. [ 224.165679][T15131] siw: device registration error -23 [ 224.237949][T15141] FAULT_INJECTION: forcing a failure. [ 224.237949][T15141] name failslab, interval 1, probability 0, space 0, times 0 [ 224.250663][T15141] CPU: 1 UID: 0 PID: 15141 Comm: syz.6.2923 Not tainted 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(voluntary) [ 224.250781][T15141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 224.250796][T15141] Call Trace: [ 224.250802][T15141] [ 224.250865][T15141] __dump_stack+0x1d/0x30 [ 224.250886][T15141] dump_stack_lvl+0xe8/0x140 [ 224.250906][T15141] dump_stack+0x15/0x1b [ 224.250922][T15141] should_fail_ex+0x265/0x280 [ 224.250960][T15141] should_failslab+0x8c/0xb0 [ 224.250985][T15141] __kmalloc_noprof+0xa5/0x3e0 [ 224.251014][T15141] ? unregister_netdevice_many_notify+0x4c9/0x15d0 [ 224.251036][T15141] ? unlist_netdevice+0x2cc/0x320 [ 224.251055][T15141] unregister_netdevice_many_notify+0x4c9/0x15d0 [ 224.251076][T15141] ? radix_tree_delete_item+0x176/0x270 [ 224.251134][T15141] unregister_netdevice_queue+0x1f5/0x220 [ 224.251169][T15141] br_dev_delete+0xc4/0xe0 [ 224.251281][T15141] br_del_bridge+0x97/0xc0 [ 224.251313][T15141] br_ioctl_stub+0x535/0x860 [ 224.251367][T15141] ? ioctl_has_perm+0x257/0x2a0 [ 224.251417][T15141] ? __pfx_br_ioctl_stub+0x10/0x10 [ 224.251438][T15141] sock_ioctl+0x399/0x610 [ 224.251460][T15141] ? __pfx_sock_ioctl+0x10/0x10 [ 224.251484][T15141] __se_sys_ioctl+0xcb/0x140 [ 224.251527][T15141] __x64_sys_ioctl+0x43/0x50 [ 224.251582][T15141] x64_sys_call+0x1816/0x2ff0 [ 224.251605][T15141] do_syscall_64+0xd2/0x200 [ 224.251628][T15141] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 224.251652][T15141] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 224.251673][T15141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.251698][T15141] RIP: 0033:0x7f1ab17aeb69 [ 224.251725][T15141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.251743][T15141] RSP: 002b:00007f1aafe17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 224.251795][T15141] RAX: ffffffffffffffda RBX: 00007f1ab19d5fa0 RCX: 00007f1ab17aeb69 [ 224.251808][T15141] RDX: 0000200000000040 RSI: 00000000000089a1 RDI: 0000000000000005 [ 224.251820][T15141] RBP: 00007f1aafe17090 R08: 0000000000000000 R09: 0000000000000000 [ 224.251832][T15141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.251899][T15141] R13: 0000000000000000 R14: 00007f1ab19d5fa0 R15: 00007ffe7e4aa798 [ 224.251917][T15141] [ 224.554037][T15144] netlink: 'syz.8.2925': attribute type 12 has an invalid length. [ 224.625381][T15155] lo speed is unknown, defaulting to 1000 [ 224.834443][T15164] loop4: detected capacity change from 0 to 256 [ 224.841220][T15164] vfat: Unknown parameter 'uni)Iy_xlate' [ 224.849489][T15162] lo speed is unknown, defaulting to 1000 [ 224.860033][T15164] loop4: detected capacity change from 0 to 512 [ 224.866657][T15164] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 224.915874][T15167] netlink: 'syz.6.2932': attribute type 12 has an invalid length. [ 225.516641][T15179] usb usb7: usbfs: process 15179 (syz.8.2936) did not claim interface 0 before use [ 225.556699][T15176] siw: device registration error -23 [ 225.575552][T15181] netlink: 'syz.9.2937': attribute type 12 has an invalid length. [ 225.595308][T15179] loop8: detected capacity change from 0 to 1024 [ 225.616889][ T29] kauditd_printk_skb: 642 callbacks suppressed [ 225.616904][ T29] audit: type=1326 audit(1754201488.277:17875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15180 comm="syz.9.2937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26113feb69 code=0x7ffc0000 [ 225.646757][ T29] audit: type=1326 audit(1754201488.277:17876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15180 comm="syz.9.2937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26113feb69 code=0x7ffc0000 [ 225.670564][ T29] audit: type=1326 audit(1754201488.277:17877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15180 comm="syz.9.2937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f26113feb69 code=0x7ffc0000 [ 225.694198][ T29] audit: type=1326 audit(1754201488.277:17878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15180 comm="syz.9.2937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26113feb69 code=0x7ffc0000 [ 225.717795][ T29] audit: type=1326 audit(1754201488.277:17879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15180 comm="syz.9.2937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26113feb69 code=0x7ffc0000 [ 225.741406][ T29] audit: type=1326 audit(1754201488.277:17880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15180 comm="syz.9.2937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f26113feb69 code=0x7ffc0000 [ 225.765090][ T29] audit: type=1326 audit(1754201488.277:17881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15180 comm="syz.9.2937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26113feb69 code=0x7ffc0000 [ 225.788757][ T29] audit: type=1326 audit(1754201488.277:17882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15180 comm="syz.9.2937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26113feb69 code=0x7ffc0000 [ 225.812343][ T29] audit: type=1326 audit(1754201488.277:17883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15180 comm="syz.9.2937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f26113feb69 code=0x7ffc0000 [ 225.835872][ T29] audit: type=1326 audit(1754201488.277:17884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15180 comm="syz.9.2937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26113feb69 code=0x7ffc0000 [ 226.046955][T15179] loop8: detected capacity change from 0 to 1024 [ 226.055266][T15179] EXT4-fs: Ignoring removed orlov option [ 226.075288][T15179] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.090609][T15179] ext4: Unknown parameter '&ݞ |}|廟Ĺ8mk.jXĹ5;NA' [ 226.130474][T15189] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2939'. [ 226.139542][T15189] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2939'. [ 226.215686][T15191] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15191 comm=+}[@ [ 226.276600][ T7582] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.367987][T15201] lo speed is unknown, defaulting to 1000 [ 226.379452][T15198] loop2: detected capacity change from 0 to 8192 [ 226.482266][T15204] netlink: '+}[@': attribute type 4 has an invalid length. [ 226.543351][T15208] loop6: detected capacity change from 0 to 1764 [ 226.561468][T15208] siw: device registration error -23 [ 226.766835][T15221] tipc: Enabling of bearer rejected, already enabled [ 226.780879][T15221] loop6: detected capacity change from 0 to 1024 [ 226.794782][T15221] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.807060][T15221] ext4 filesystem being mounted at /534/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.893512][T15226] lo speed is unknown, defaulting to 1000 [ 227.161532][T15237] lo speed is unknown, defaulting to 1000 [ 227.223978][T15239] loop4: detected capacity change from 0 to 1764 [ 227.238275][T15239] siw: device registration error -23 [ 227.263192][T15239] __nla_validate_parse: 4 callbacks suppressed [ 227.263206][T15239] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2955'. [ 227.279137][T15239] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2955'. [ 227.429702][T15249] netlink: 'syz.4.2960': attribute type 10 has an invalid length. [ 227.438968][T15249] team0: Device ipvlan0 failed to register rx_handler [ 227.493204][T15251] lo speed is unknown, defaulting to 1000 [ 227.508097][ T4453] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.641978][T15257] lo speed is unknown, defaulting to 1000 [ 227.775407][T15262] loop6: detected capacity change from 0 to 1764 [ 227.806040][T15262] siw: device registration error -23 [ 227.858351][T15271] bridge: RTM_NEWNEIGH with invalid ether address [ 227.882666][T15262] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2964'. [ 227.911627][T15262] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2964'. [ 227.940395][T15264] lo speed is unknown, defaulting to 1000 [ 227.950857][T15275] loop9: detected capacity change from 0 to 1764 [ 227.981471][T15275] siw: device registration error -23 [ 228.024977][T15275] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2969'. [ 228.034657][T15275] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2969'. [ 228.082984][T15284] loop8: detected capacity change from 0 to 8192 [ 228.109478][T15286] lo speed is unknown, defaulting to 1000 [ 228.263108][T15299] loop4: detected capacity change from 0 to 1024 [ 228.283817][T15299] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.297393][T15303] loop9: detected capacity change from 0 to 1764 [ 228.314011][T15303] siw: device registration error -23 [ 228.344442][T15303] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2981'. [ 228.353745][T15303] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2981'. [ 228.407126][ T7516] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.417569][T15314] netlink: 'syz.8.2986': attribute type 10 has an invalid length. [ 228.417620][T15316] loop9: detected capacity change from 0 to 1764 [ 228.435705][T15316] siw: device registration error -23 [ 228.444623][T15314] team0: Device ipvlan0 failed to register rx_handler [ 228.456742][T15316] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2985'. [ 228.486181][T15316] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2985'. [ 228.487298][T15312] lo speed is unknown, defaulting to 1000 [ 228.530129][T15318] lo speed is unknown, defaulting to 1000 [ 228.577944][T15323] loop9: detected capacity change from 0 to 2048 [ 228.587166][T15323] EXT4-fs (loop9): blocks per group (262144) and clusters per group (16384) inconsistent [ 228.855434][T15346] loop9: detected capacity change from 0 to 1764 [ 228.862595][T15347] atomic_op ffff888109200928 conn xmit_atomic 0000000000000000 [ 228.881556][T15346] siw: device registration error -23 [ 229.035314][T15353] loop9: detected capacity change from 0 to 1764 [ 229.079658][T15353] siw: device registration error -23 [ 229.194483][T15370] lo speed is unknown, defaulting to 1000 [ 229.269247][T15377] loop2: detected capacity change from 0 to 1764 [ 229.286803][T15382] loop8: detected capacity change from 0 to 1024 [ 229.300605][T15377] siw: device registration error -23 [ 229.308444][T15382] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.395215][T15388] loop4: detected capacity change from 0 to 512 [ 229.399901][T15394] loop2: detected capacity change from 0 to 1764 [ 229.413686][T15388] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 229.439951][T15388] EXT4-fs (loop4): Remounting filesystem read-only [ 229.447005][T15388] EXT4-fs (loop4): 1 truncate cleaned up [ 229.448468][T15394] siw: device registration error -23 [ 229.453907][ T7582] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.473404][T15388] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.516192][ T7516] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.530517][T15403] loop8: detected capacity change from 0 to 512 [ 229.560889][T15403] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 229.576216][T15403] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.586281][T15411] lo speed is unknown, defaulting to 1000 [ 229.597619][T15403] ext4 filesystem being mounted at /460/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.612938][T15403] EXT4-fs (loop8): shut down requested (0) [ 229.630077][T15403] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop8 ino=15 [ 229.639197][T15403] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop8 ino=15 [ 229.648213][T15403] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop8 ino=15 [ 229.657767][T15403] FAULT_INJECTION: forcing a failure. [ 229.657767][T15403] name failslab, interval 1, probability 0, space 0, times 0 [ 229.670694][T15403] CPU: 1 UID: 0 PID: 15403 Comm: syz.8.3015 Not tainted 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(voluntary) [ 229.670746][T15403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 229.670761][T15403] Call Trace: [ 229.670768][T15403] [ 229.670777][T15403] __dump_stack+0x1d/0x30 [ 229.670883][T15403] dump_stack_lvl+0xe8/0x140 [ 229.670905][T15403] dump_stack+0x15/0x1b [ 229.670920][T15403] should_fail_ex+0x265/0x280 [ 229.671030][T15403] should_failslab+0x8c/0xb0 [ 229.671070][T15403] kmem_cache_alloc_node_noprof+0x57/0x320 [ 229.671106][T15403] ? __alloc_skb+0x101/0x320 [ 229.671192][T15403] __alloc_skb+0x101/0x320 [ 229.671219][T15403] ? audit_log_start+0x365/0x6c0 [ 229.671259][T15403] audit_log_start+0x380/0x6c0 [ 229.671338][T15403] audit_seccomp+0x48/0x100 [ 229.671363][T15403] ? __seccomp_filter+0x68c/0x10d0 [ 229.671383][T15403] __seccomp_filter+0x69d/0x10d0 [ 229.671448][T15403] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 229.671477][T15403] ? vfs_write+0x75e/0x8e0 [ 229.671502][T15403] __secure_computing+0x82/0x150 [ 229.671562][T15403] syscall_trace_enter+0xcf/0x1e0 [ 229.671587][T15403] do_syscall_64+0xac/0x200 [ 229.671723][T15403] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 229.671746][T15403] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 229.671773][T15403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.671823][T15403] RIP: 0033:0x7f3d7f6ceb69 [ 229.671837][T15403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.671856][T15403] RSP: 002b:00007f3d7dd2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 229.671881][T15403] RAX: ffffffffffffffda RBX: 00007f3d7f8f5fa0 RCX: 00007f3d7f6ceb69 [ 229.671898][T15403] RDX: 00002000000002c0 RSI: 0000000000005423 RDI: 0000000000000009 [ 229.671915][T15403] RBP: 00007f3d7dd2f090 R08: 0000000000000000 R09: 0000000000000000 [ 229.671930][T15403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.672005][T15403] R13: 0000000000000000 R14: 00007f3d7f8f5fa0 R15: 00007ffce9299c78 [ 229.672028][T15403] [ 229.909926][T15423] netlink: 'syz.2.3023': attribute type 10 has an invalid length. [ 229.926079][T15417] Falling back ldisc for ttyS3. [ 229.968940][ T7582] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.036791][T15427] loop8: detected capacity change from 0 to 1764 [ 230.291176][T15442] FAULT_INJECTION: forcing a failure. [ 230.291176][T15442] name failslab, interval 1, probability 0, space 0, times 0 [ 230.303987][T15442] CPU: 1 UID: 0 PID: 15442 Comm: syz.9.3029 Not tainted 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(voluntary) [ 230.304055][T15442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 230.304071][T15442] Call Trace: [ 230.304078][T15442] [ 230.304087][T15442] __dump_stack+0x1d/0x30 [ 230.304122][T15442] dump_stack_lvl+0xe8/0x140 [ 230.304146][T15442] dump_stack+0x15/0x1b [ 230.304169][T15442] should_fail_ex+0x265/0x280 [ 230.304209][T15442] should_failslab+0x8c/0xb0 [ 230.304236][T15442] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 230.304319][T15442] ? sidtab_sid2str_get+0xa0/0x130 [ 230.304382][T15442] kmemdup_noprof+0x2b/0x70 [ 230.304450][T15442] sidtab_sid2str_get+0xa0/0x130 [ 230.304499][T15442] security_sid_to_context_core+0x1eb/0x2e0 [ 230.304621][T15442] security_sid_to_context+0x27/0x40 [ 230.304660][T15442] selinux_lsmprop_to_secctx+0x67/0xf0 [ 230.304708][T15442] security_lsmprop_to_secctx+0x43/0x80 [ 230.304799][T15442] audit_log_task_context+0x77/0x190 [ 230.304921][T15442] audit_log_task+0xf4/0x250 [ 230.305012][T15442] audit_seccomp+0x61/0x100 [ 230.305044][T15442] ? __seccomp_filter+0x68c/0x10d0 [ 230.305073][T15442] __seccomp_filter+0x69d/0x10d0 [ 230.305101][T15442] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 230.305151][T15442] ? vfs_write+0x75e/0x8e0 [ 230.305185][T15442] __secure_computing+0x82/0x150 [ 230.305212][T15442] syscall_trace_enter+0xcf/0x1e0 [ 230.305294][T15442] do_syscall_64+0xac/0x200 [ 230.305324][T15442] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 230.305354][T15442] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 230.305382][T15442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.305465][T15442] RIP: 0033:0x7f26113feb69 [ 230.305485][T15442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.305509][T15442] RSP: 002b:00007f260fa67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000077 [ 230.305534][T15442] RAX: ffffffffffffffda RBX: 00007f2611625fa0 RCX: 00007f26113feb69 [ 230.305549][T15442] RDX: 0000000000000000 RSI: 000000000000ee01 RDI: 0000000000000000 [ 230.305593][T15442] RBP: 00007f260fa67090 R08: 0000000000000000 R09: 0000000000000000 [ 230.305610][T15442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.305626][T15442] R13: 0000000000000000 R14: 00007f2611625fa0 R15: 00007ffe851a1d78 [ 230.305662][T15442] [ 230.576765][T15444] netlink: 'syz.9.3030': attribute type 12 has an invalid length. [ 230.607913][T15452] C: renamed from team_slave_0 [ 230.615756][T15452] netlink: 'syz.9.3033': attribute type 3 has an invalid length. [ 230.623643][T15452] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 230.650676][T15455] loop2: detected capacity change from 0 to 256 [ 230.660185][T15455] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 230.694838][ T29] kauditd_printk_skb: 186 callbacks suppressed [ 230.694857][ T29] audit: type=1400 audit(1754201493.367:18068): avc: denied { setopt } for pid=15445 comm="syz.2.3031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 230.774031][ T29] audit: type=1326 audit(1754201493.447:18069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15445 comm="syz.2.3031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb62a1eb69 code=0x7ffc0000 [ 230.797859][ T29] audit: type=1326 audit(1754201493.447:18070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15445 comm="syz.2.3031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb62a1eb69 code=0x7ffc0000 [ 230.821781][ T29] audit: type=1326 audit(1754201493.497:18071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15445 comm="syz.2.3031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb62a1eb69 code=0x7ffc0000 [ 230.847930][ T29] audit: type=1326 audit(1754201493.517:18072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15445 comm="syz.2.3031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb62a1eb69 code=0x7ffc0000 [ 230.877543][ T29] audit: type=1326 audit(1754201493.517:18073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15445 comm="syz.2.3031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb62a1eb69 code=0x7ffc0000 [ 230.901407][ T29] audit: type=1326 audit(1754201493.517:18074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15445 comm="syz.2.3031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7fcb62a1eb69 code=0x7ffc0000 [ 230.925314][ T29] audit: type=1326 audit(1754201493.517:18075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15445 comm="syz.2.3031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb62a1eb69 code=0x7ffc0000 [ 230.949032][ T29] audit: type=1326 audit(1754201493.517:18076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15445 comm="syz.2.3031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb62a1eb69 code=0x7ffc0000 [ 231.000454][T15466] loop6: detected capacity change from 0 to 1764 [ 231.007681][T15468] lo speed is unknown, defaulting to 1000 [ 231.036346][T15466] siw: device registration error -23 [ 231.071950][T15473] FAULT_INJECTION: forcing a failure. [ 231.071950][T15473] name failslab, interval 1, probability 0, space 0, times 0 [ 231.080134][ T29] audit: type=1326 audit(1754201493.737:18077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15472 comm="syz.8.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7f6ceb69 code=0x7ffc0000 [ 231.084765][T15473] CPU: 0 UID: 0 PID: 15473 Comm: syz.8.3040 Not tainted 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(voluntary) [ 231.084806][T15473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 231.084824][T15473] Call Trace: [ 231.084834][T15473] [ 231.084846][T15473] __dump_stack+0x1d/0x30 [ 231.084875][T15473] dump_stack_lvl+0xe8/0x140 [ 231.084960][T15473] dump_stack+0x15/0x1b [ 231.084984][T15473] should_fail_ex+0x265/0x280 [ 231.085028][T15473] should_failslab+0x8c/0xb0 [ 231.085141][T15473] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 231.085183][T15473] ? sidtab_sid2str_get+0xa0/0x130 [ 231.085284][T15473] kmemdup_noprof+0x2b/0x70 [ 231.085320][T15473] sidtab_sid2str_get+0xa0/0x130 [ 231.085425][T15473] security_sid_to_context_core+0x1eb/0x2e0 [ 231.085527][T15473] security_sid_to_context+0x27/0x40 [ 231.085571][T15473] selinux_lsmprop_to_secctx+0x67/0xf0 [ 231.085619][T15473] security_lsmprop_to_secctx+0x43/0x80 [ 231.085658][T15473] audit_log_task_context+0x77/0x190 [ 231.085703][T15473] audit_log_task+0xf4/0x250 [ 231.085742][T15473] audit_seccomp+0x61/0x100 [ 231.085781][T15473] ? __seccomp_filter+0x68c/0x10d0 [ 231.085886][T15473] __seccomp_filter+0x69d/0x10d0 [ 231.085916][T15473] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 231.085953][T15473] ? vfs_write+0x75e/0x8e0 [ 231.085990][T15473] __secure_computing+0x82/0x150 [ 231.086070][T15473] syscall_trace_enter+0xcf/0x1e0 [ 231.086104][T15473] do_syscall_64+0xac/0x200 [ 231.086138][T15473] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 231.086170][T15473] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 231.086275][T15473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.086304][T15473] RIP: 0033:0x7f3d7f6ceb69 [ 231.086326][T15473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.086352][T15473] RSP: 002b:00007f3d7dd2f038 EFLAGS: 00000246 ORIG_RAX: 000000000000001f [ 231.086379][T15473] RAX: ffffffffffffffda RBX: 00007f3d7f8f5fa0 RCX: 00007f3d7f6ceb69 [ 231.086458][T15473] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 231.086480][T15473] RBP: 00007f3d7dd2f090 R08: 0000000000000000 R09: 0000000000000000 [ 231.086498][T15473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.086513][T15473] R13: 0000000000000000 R14: 00007f3d7f8f5fa0 R15: 00007ffce9299c78 [ 231.086544][T15473] [ 231.517930][T15484] netlink: 'syz.8.3044': attribute type 10 has an invalid length. [ 231.533947][T15484] team0: Device ipvlan0 failed to register rx_handler [ 231.580766][T15486] loop4: detected capacity change from 0 to 128 [ 231.626779][T15494] loop4: detected capacity change from 0 to 128 [ 231.679008][T15498] loop4: detected capacity change from 0 to 2048 [ 231.705792][T15498] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.916415][ T7516] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.979337][T15516] lo speed is unknown, defaulting to 1000 [ 231.979591][T15518] loop4: detected capacity change from 0 to 1764 [ 231.994591][T15518] siw: device registration error -23 [ 232.089802][T15531] netlink: 'syz.8.3058': attribute type 12 has an invalid length. [ 232.138779][T15535] lo speed is unknown, defaulting to 1000 [ 232.203123][T15538] lo speed is unknown, defaulting to 1000 [ 232.281395][T15545] netlink: 'syz.6.3063': attribute type 10 has an invalid length. [ 232.291192][T15545] team0: Device ipvlan0 failed to register rx_handler [ 232.350697][T15547] loop8: detected capacity change from 0 to 8192 [ 232.727019][T15557] lo speed is unknown, defaulting to 1000 [ 232.786997][T15560] loop6: detected capacity change from 0 to 1764 [ 232.796940][T15560] siw: device registration error -23 [ 232.820050][T15560] __nla_validate_parse: 15 callbacks suppressed [ 232.820069][T15560] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3067'. [ 232.836115][T15560] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3067'. [ 232.883031][T15563] usb usb7: usbfs: process 15563 (syz.6.3068) did not claim interface 0 before use [ 232.902748][T15563] loop6: detected capacity change from 0 to 1024 [ 232.930159][T15569] FAULT_INJECTION: forcing a failure. [ 232.930159][T15569] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 232.943336][T15569] CPU: 0 UID: 0 PID: 15569 Comm: syz.4.3070 Not tainted 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(voluntary) [ 232.943434][T15569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 232.943448][T15569] Call Trace: [ 232.943457][T15569] [ 232.943465][T15569] __dump_stack+0x1d/0x30 [ 232.943519][T15569] dump_stack_lvl+0xe8/0x140 [ 232.943543][T15569] dump_stack+0x15/0x1b [ 232.943564][T15569] should_fail_ex+0x265/0x280 [ 232.943660][T15569] should_fail+0xb/0x20 [ 232.943719][T15569] should_fail_usercopy+0x1a/0x20 [ 232.943742][T15569] _copy_from_user+0x1c/0xb0 [ 232.943772][T15569] __copy_msghdr+0x244/0x300 [ 232.943869][T15569] ___sys_sendmsg+0x109/0x1d0 [ 232.943928][T15569] __x64_sys_sendmsg+0xd4/0x160 [ 232.943971][T15569] x64_sys_call+0x191e/0x2ff0 [ 232.944063][T15569] do_syscall_64+0xd2/0x200 [ 232.944091][T15569] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 232.944119][T15569] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 232.944143][T15569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.944249][T15569] RIP: 0033:0x7f6ee528eb69 [ 232.944267][T15569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.944289][T15569] RSP: 002b:00007f6ee38ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 232.944391][T15569] RAX: ffffffffffffffda RBX: 00007f6ee54b5fa0 RCX: 00007f6ee528eb69 [ 232.944408][T15569] RDX: 0000000000000010 RSI: 0000200000000b80 RDI: 0000000000000003 [ 232.944423][T15569] RBP: 00007f6ee38ef090 R08: 0000000000000000 R09: 0000000000000000 [ 232.944439][T15569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.944455][T15569] R13: 0000000000000000 R14: 00007f6ee54b5fa0 R15: 00007ffcc97a5618 [ 232.944479][T15569] [ 232.948005][T15563] loop6: detected capacity change from 0 to 1024 [ 233.118454][T15571] lo speed is unknown, defaulting to 1000 [ 233.131020][T15563] EXT4-fs: Ignoring removed orlov option [ 233.146213][T15573] loop2: detected capacity change from 0 to 512 [ 233.157570][T15573] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 233.177764][T15563] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.190136][T15573] EXT4-fs (loop2): invalid journal inode [ 233.211089][T15573] EXT4-fs (loop2): can't get journal size [ 233.219223][T15563] ext4: Unknown parameter '&ݞ |}|廟Ĺ8mk.jXĹ5;NA' [ 233.238104][T15573] EXT4-fs (loop2): 1 truncate cleaned up [ 233.250485][T15573] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.281890][T15573] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3072'. [ 233.308377][ T4453] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.417016][T15598] loop6: detected capacity change from 0 to 256 [ 233.430736][T15598] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 233.544578][T15604] FAULT_INJECTION: forcing a failure. [ 233.544578][T15604] name failslab, interval 1, probability 0, space 0, times 0 [ 233.557328][T15604] CPU: 0 UID: 0 PID: 15604 Comm: syz.6.3080 Not tainted 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(voluntary) [ 233.557366][T15604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 233.557383][T15604] Call Trace: [ 233.557391][T15604] [ 233.557400][T15604] __dump_stack+0x1d/0x30 [ 233.557454][T15604] dump_stack_lvl+0xe8/0x140 [ 233.557470][T15604] dump_stack+0x15/0x1b [ 233.557484][T15604] should_fail_ex+0x265/0x280 [ 233.557586][T15604] should_failslab+0x8c/0xb0 [ 233.557608][T15604] kmem_cache_alloc_node_noprof+0x57/0x320 [ 233.557705][T15604] ? __alloc_skb+0x101/0x320 [ 233.557731][T15604] __alloc_skb+0x101/0x320 [ 233.557757][T15604] netlink_alloc_large_skb+0xba/0xf0 [ 233.557816][T15604] netlink_sendmsg+0x3cf/0x6b0 [ 233.557848][T15604] ? __pfx_netlink_sendmsg+0x10/0x10 [ 233.557953][T15604] __sock_sendmsg+0x145/0x180 [ 233.557975][T15604] ____sys_sendmsg+0x31e/0x4e0 [ 233.558070][T15604] ___sys_sendmsg+0x17b/0x1d0 [ 233.558113][T15604] __x64_sys_sendmsg+0xd4/0x160 [ 233.558197][T15604] x64_sys_call+0x191e/0x2ff0 [ 233.558217][T15604] do_syscall_64+0xd2/0x200 [ 233.558358][T15604] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 233.558379][T15604] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 233.558398][T15604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.558439][T15604] RIP: 0033:0x7f1ab17aeb69 [ 233.558452][T15604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.558477][T15604] RSP: 002b:00007f1aafe17038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 233.558501][T15604] RAX: ffffffffffffffda RBX: 00007f1ab19d5fa0 RCX: 00007f1ab17aeb69 [ 233.558579][T15604] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000008 [ 233.558590][T15604] RBP: 00007f1aafe17090 R08: 0000000000000000 R09: 0000000000000000 [ 233.558600][T15604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.558610][T15604] R13: 0000000000000000 R14: 00007f1ab19d5fa0 R15: 00007ffe7e4aa798 [ 233.558627][T15604] [ 233.836796][T15614] usb usb7: usbfs: process 15614 (syz.6.3082) did not claim interface 0 before use [ 233.851951][T15614] loop6: detected capacity change from 0 to 1024 [ 233.867893][T15614] loop6: detected capacity change from 0 to 1024 [ 233.875763][T15614] EXT4-fs: Ignoring removed orlov option [ 233.884865][T15614] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.900099][T15614] ext4: Unknown parameter '&ݞ |}|廟Ĺ8mk.jXĹ5;NA' [ 233.986742][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.007074][ T4453] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.016883][T15618] loop2: detected capacity change from 0 to 2048 [ 234.035253][T15618] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.059277][T15620] lo speed is unknown, defaulting to 1000 [ 234.187738][T15630] loop8: detected capacity change from 0 to 2048 [ 234.204822][T15630] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.265826][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.288724][T15640] loop6: detected capacity change from 0 to 1764 [ 234.349211][T15640] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3091'. [ 234.349614][T15645] loop9: detected capacity change from 0 to 512 [ 234.360737][T15640] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3091'. [ 234.366847][T15645] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 234.387845][T15645] EXT4-fs (loop9): invalid journal inode [ 234.393971][T15645] EXT4-fs (loop9): can't get journal size [ 234.406306][T15645] EXT4-fs (loop9): 1 truncate cleaned up [ 234.413637][T15648] loop2: detected capacity change from 0 to 1764 [ 234.421212][T15645] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.437467][T15648] siw: device registration error -23 [ 234.445179][T15645] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3093'. [ 234.468665][T15648] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3094'. [ 234.475004][T15650] lo speed is unknown, defaulting to 1000 [ 234.490554][T15648] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3094'. [ 234.511988][ T7582] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.569747][T15661] siw: device registration error -23 [ 235.160508][T15670] netlink: 'syz.4.3102': attribute type 10 has an invalid length. [ 235.170070][T15670] team0: Device ipvlan0 failed to register rx_handler [ 235.197536][ T7672] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.398102][T15678] sg_write: data in/out 1048540/14 bytes for SCSI command 0x0-- guessing data in; [ 235.398102][T15678] program syz.6.3106 not setting count and/or reply_len properly [ 235.562237][T15683] lo speed is unknown, defaulting to 1000 [ 235.571753][T15690] lo speed is unknown, defaulting to 1000 [ 235.630149][T15702] loop4: detected capacity change from 0 to 128 [ 235.644677][T15702] EXT4-fs: Ignoring removed nobh option [ 235.664418][T15702] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 235.687458][T15702] ext4 filesystem being mounted at /502/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 235.727032][T15710] loop2: detected capacity change from 0 to 1764 [ 235.753549][T15710] siw: device registration error -23 [ 235.775250][ T29] kauditd_printk_skb: 618 callbacks suppressed [ 235.775294][ T29] audit: type=1326 audit(1754201498.437:18695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15711 comm="syz.8.3118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7f6ceb69 code=0x7ffc0000 [ 235.805357][ T29] audit: type=1326 audit(1754201498.437:18696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15711 comm="syz.8.3118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7f6ceb69 code=0x7ffc0000 [ 235.829057][ T29] audit: type=1326 audit(1754201498.437:18697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15711 comm="syz.8.3118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d7f6ceb69 code=0x7ffc0000 [ 235.852981][ T29] audit: type=1326 audit(1754201498.437:18698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15711 comm="syz.8.3118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7f6ceb69 code=0x7ffc0000 [ 235.876601][ T29] audit: type=1326 audit(1754201498.437:18699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15711 comm="syz.8.3118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d7f6ceb69 code=0x7ffc0000 [ 235.900422][ T29] audit: type=1326 audit(1754201498.437:18700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15711 comm="syz.8.3118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7f6ceb69 code=0x7ffc0000 [ 235.901298][T15710] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3117'. [ 235.924125][ T29] audit: type=1326 audit(1754201498.437:18701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15711 comm="syz.8.3118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d7f6ceb69 code=0x7ffc0000 [ 235.924174][ T29] audit: type=1326 audit(1754201498.437:18702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15711 comm="syz.8.3118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7f6ceb69 code=0x7ffc0000 [ 235.939351][T15710] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3117'. [ 235.956737][ T29] audit: type=1326 audit(1754201498.437:18703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15711 comm="syz.8.3118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3d7f6ceb69 code=0x7ffc0000 [ 236.012889][ T29] audit: type=1326 audit(1754201498.437:18704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15711 comm="syz.8.3118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7f6ceb69 code=0x7ffc0000 [ 236.062270][ T7516] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 236.100686][T15718] tipc: Enabling of bearer rejected, already enabled [ 236.116460][T15715] loop6: detected capacity change from 0 to 1024 [ 236.134875][T15715] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.147287][T15715] ext4 filesystem being mounted at /574/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.291338][T15730] netlink: 'syz.9.3122': attribute type 10 has an invalid length. [ 236.300882][T15730] team0: Device ipvlan0 failed to register rx_handler [ 236.630951][ T4453] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.680498][T15743] FAULT_INJECTION: forcing a failure. [ 236.680498][T15743] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 236.693680][T15743] CPU: 1 UID: 0 PID: 15743 Comm: syz.6.3126 Not tainted 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(voluntary) [ 236.693772][T15743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 236.693789][T15743] Call Trace: [ 236.693797][T15743] [ 236.693806][T15743] __dump_stack+0x1d/0x30 [ 236.693828][T15743] dump_stack_lvl+0xe8/0x140 [ 236.693847][T15743] dump_stack+0x15/0x1b [ 236.693864][T15743] should_fail_ex+0x265/0x280 [ 236.693904][T15743] should_fail+0xb/0x20 [ 236.694008][T15743] should_fail_usercopy+0x1a/0x20 [ 236.694100][T15743] _copy_from_user+0x1c/0xb0 [ 236.694133][T15743] kstrtouint_from_user+0x69/0xf0 [ 236.694158][T15743] ? 0xffffffff81000000 [ 236.694247][T15743] ? selinux_file_permission+0x1e4/0x320 [ 236.694286][T15743] proc_fail_nth_write+0x50/0x160 [ 236.694322][T15743] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 236.694386][T15743] vfs_write+0x269/0x8e0 [ 236.694458][T15743] ? __rcu_read_unlock+0x4f/0x70 [ 236.694487][T15743] ? __fget_files+0x184/0x1c0 [ 236.694598][T15743] ksys_write+0xda/0x1a0 [ 236.694659][T15743] __x64_sys_write+0x40/0x50 [ 236.694726][T15743] x64_sys_call+0x27fe/0x2ff0 [ 236.694749][T15743] do_syscall_64+0xd2/0x200 [ 236.694780][T15743] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 236.694809][T15743] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 236.694877][T15743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.694903][T15743] RIP: 0033:0x7f1ab17ad61f [ 236.694918][T15743] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 236.694988][T15743] RSP: 002b:00007f1aafe17030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 236.695012][T15743] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1ab17ad61f [ 236.695101][T15743] RDX: 0000000000000001 RSI: 00007f1aafe170a0 RDI: 0000000000000003 [ 236.695117][T15743] RBP: 00007f1aafe17090 R08: 0000000000000000 R09: 0000000000000000 [ 236.695130][T15743] R10: 0000000000000066 R11: 0000000000000293 R12: 0000000000000001 [ 236.695142][T15743] R13: 0000000000000000 R14: 00007f1ab19d5fa0 R15: 00007ffe7e4aa798 [ 236.695160][T15743] [ 236.913311][T15745] loop8: detected capacity change from 0 to 1024 [ 236.924038][T15745] EXT4-fs (loop8): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 236.955120][T15745] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.037818][T15763] netlink: 'syz.4.3135': attribute type 21 has an invalid length. [ 237.055421][T15764] kernel profiling enabled (shift: 17) [ 237.198161][T15771] loop2: detected capacity change from 0 to 2048 [ 237.213196][T15769] team0 (unregistering): Port device team_slave_0 removed [ 237.235442][T15769] team0 (unregistering): Port device team_slave_1 removed [ 237.261343][T15771] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.542321][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.612046][ T7582] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.636848][T15786] loop8: detected capacity change from 0 to 128 [ 237.643904][T15786] EXT4-fs: Ignoring removed nobh option [ 237.651188][T15786] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 237.665150][T15786] ext4 filesystem being mounted at /489/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 237.717992][ T7582] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 237.764577][T15796] netlink: 'syz.8.3144': attribute type 10 has an invalid length. [ 237.767285][T15790] siw: device registration error -23 [ 237.775088][T15796] team0: Device ipvlan0 failed to register rx_handler [ 238.055579][T15805] lo speed is unknown, defaulting to 1000 [ 238.182304][T15811] lo speed is unknown, defaulting to 1000 [ 238.276040][T15816] loop4: detected capacity change from 0 to 2048 [ 238.304487][T15816] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.449874][T15823] lo speed is unknown, defaulting to 1000 [ 238.515703][T15826] lo speed is unknown, defaulting to 1000 [ 238.554551][ T7516] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.713282][T15831] loop2: detected capacity change from 0 to 128 [ 238.728223][T15831] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00000b72 (sector = 1) [ 238.848863][T15847] netlink: 'syz.6.3160': attribute type 10 has an invalid length. [ 238.875490][T15847] team0: Device ipvlan0 failed to register rx_handler [ 238.885858][T15837] siw: device registration error -23 [ 238.997575][T15854] usb usb7: usbfs: process 15854 (syz.2.3163) did not claim interface 0 before use [ 239.013048][T15854] loop2: detected capacity change from 0 to 1024 [ 239.049210][T15854] loop2: detected capacity change from 0 to 1024 [ 239.059113][T15854] EXT4-fs: Ignoring removed orlov option [ 239.074730][T15862] lo speed is unknown, defaulting to 1000 [ 239.088538][T15854] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.115724][T15854] ext4: Unknown parameter '&ݞ |}|廟Ĺ8mk.jXĹ5;NA' [ 239.131857][T15866] FAULT_INJECTION: forcing a failure. [ 239.131857][T15866] name failslab, interval 1, probability 0, space 0, times 0 [ 239.144750][T15866] CPU: 1 UID: 0 PID: 15866 Comm: syz.8.3167 Not tainted 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(voluntary) [ 239.144783][T15866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 239.144795][T15866] Call Trace: [ 239.144826][T15866] [ 239.144834][T15866] __dump_stack+0x1d/0x30 [ 239.144861][T15866] dump_stack_lvl+0xe8/0x140 [ 239.144942][T15866] dump_stack+0x15/0x1b [ 239.144957][T15866] should_fail_ex+0x265/0x280 [ 239.145058][T15866] should_failslab+0x8c/0xb0 [ 239.145146][T15866] __kmalloc_noprof+0xa5/0x3e0 [ 239.145279][T15866] ? kernfs_fop_write_iter+0xe1/0x2d0 [ 239.145386][T15866] ? splice_from_pipe_next+0x321/0x380 [ 239.145480][T15866] kernfs_fop_write_iter+0xe1/0x2d0 [ 239.145519][T15866] ? iov_iter_bvec+0xa4/0xd0 [ 239.145569][T15866] iter_file_splice_write+0x5f2/0x970 [ 239.145608][T15866] ? __pfx_iter_file_splice_write+0x10/0x10 [ 239.145724][T15866] direct_splice_actor+0x153/0x2a0 [ 239.145749][T15866] ? shmem_mmap+0x71/0xb0 [ 239.145771][T15866] splice_direct_to_actor+0x30f/0x680 [ 239.145816][T15866] ? __pfx_direct_splice_actor+0x10/0x10 [ 239.145858][T15866] do_splice_direct+0xda/0x150 [ 239.145891][T15866] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 239.145923][T15866] do_sendfile+0x380/0x650 [ 239.146033][T15866] __x64_sys_sendfile64+0x105/0x150 [ 239.146071][T15866] x64_sys_call+0x2bb0/0x2ff0 [ 239.146097][T15866] do_syscall_64+0xd2/0x200 [ 239.146152][T15866] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 239.146182][T15866] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 239.146204][T15866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.146231][T15866] RIP: 0033:0x7f3d7f6ceb69 [ 239.146249][T15866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.146303][T15866] RSP: 002b:00007f3d7dd2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 239.146321][T15866] RAX: ffffffffffffffda RBX: 00007f3d7f8f5fa0 RCX: 00007f3d7f6ceb69 [ 239.146333][T15866] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 239.146344][T15866] RBP: 00007f3d7dd2f090 R08: 0000000000000000 R09: 0000000000000000 [ 239.146395][T15866] R10: 00008000fffffffe R11: 0000000000000246 R12: 0000000000000001 [ 239.146408][T15866] R13: 0000000000000000 R14: 00007f3d7f8f5fa0 R15: 00007ffce9299c78 [ 239.146432][T15866] [ 239.429505][T15870] loop8: detected capacity change from 0 to 1764 [ 239.447679][T15874] __nla_validate_parse: 2 callbacks suppressed [ 239.447695][T15874] netlink: 188 bytes leftover after parsing attributes in process `syz.4.3170'. [ 239.468442][T15870] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3168'. [ 239.478006][T15870] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3168'. [ 239.487946][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.629730][T15889] lo speed is unknown, defaulting to 1000 [ 239.653483][T15891] team0 (unregistering): Port device team_slave_0 removed [ 239.664092][T15891] team0 (unregistering): Port device team_slave_1 removed [ 239.743034][T15899] loop8: detected capacity change from 0 to 1764 [ 239.783776][T15899] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3180'. [ 239.783955][T15901] loop9: detected capacity change from 0 to 1764 [ 239.794112][T15899] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3180'. [ 239.814745][T15901] siw: device registration error -23 [ 239.849439][T15901] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3181'. [ 239.859334][T15901] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3181'. [ 239.874288][T15904] loop8: detected capacity change from 0 to 512 [ 239.884663][T15904] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 239.895630][T15904] EXT4-fs (loop8): invalid journal inode [ 239.901392][T15904] EXT4-fs (loop8): can't get journal size [ 239.908960][T15904] EXT4-fs (loop8): 1 truncate cleaned up [ 239.916280][T15904] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.940772][T15904] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3182'. [ 240.180826][T15920] lo speed is unknown, defaulting to 1000 [ 240.498411][T15941] lo speed is unknown, defaulting to 1000 [ 240.648674][T15955] loop4: detected capacity change from 0 to 1024 [ 240.656739][T15953] loop2: detected capacity change from 0 to 1764 [ 240.664768][T15955] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.678825][T15953] siw: device registration error -23 [ 240.699146][T15953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3201'. [ 240.708525][T15953] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3201'. [ 240.730753][ T7582] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.761632][ T7516] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.836838][ T29] kauditd_printk_skb: 449 callbacks suppressed [ 240.836857][ T29] audit: type=1326 audit(1754201503.507:19154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15970 comm="syz.8.3209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7f6ceb69 code=0x7ffc0000 [ 240.869143][ T29] audit: type=1326 audit(1754201503.517:19155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15970 comm="syz.8.3209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f3d7f6ceb69 code=0x7ffc0000 [ 240.892876][ T29] audit: type=1326 audit(1754201503.517:19156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15970 comm="syz.8.3209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7f6ceb69 code=0x7ffc0000 [ 240.916514][ T29] audit: type=1326 audit(1754201503.517:19157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15970 comm="syz.8.3209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7f6ceb69 code=0x7ffc0000 [ 240.940188][ T29] audit: type=1326 audit(1754201503.517:19158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15970 comm="syz.8.3209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f3d7f6ceb69 code=0x7ffc0000 [ 240.963736][ T29] audit: type=1326 audit(1754201503.517:19159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15970 comm="syz.8.3209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7f6ceb69 code=0x7ffc0000 [ 240.987427][ T29] audit: type=1326 audit(1754201503.517:19160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15970 comm="syz.8.3209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7f6ceb69 code=0x7ffc0000 [ 241.011044][ T29] audit: type=1326 audit(1754201503.517:19161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15970 comm="syz.8.3209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d7f6ceb69 code=0x7ffc0000 [ 241.034629][ T29] audit: type=1326 audit(1754201503.517:19162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15970 comm="syz.8.3209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7f6ceb69 code=0x7ffc0000 [ 241.058232][ T29] audit: type=1326 audit(1754201503.517:19163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15970 comm="syz.8.3209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f3d7f6ceb69 code=0x7ffc0000 [ 241.160539][T15981] lo speed is unknown, defaulting to 1000 [ 241.231999][T15988] loop6: detected capacity change from 0 to 512 [ 241.238974][T15988] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 241.247917][T15988] EXT4-fs (loop6): invalid journal inode [ 241.253792][T15988] EXT4-fs (loop6): can't get journal size [ 241.261122][T15988] EXT4-fs (loop6): 1 truncate cleaned up [ 241.267500][T15988] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.288662][T15991] loop8: detected capacity change from 0 to 1024 [ 241.297997][T15991] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.387850][ T7582] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.410433][T16001] netlink: 'syz.8.3217': attribute type 10 has an invalid length. [ 241.508006][T16009] netlink: 'syz.9.3222': attribute type 21 has an invalid length. [ 241.655750][T16012] tipc: Enabling of bearer rejected, already enabled [ 241.681460][T16012] loop8: detected capacity change from 0 to 1024 [ 241.700990][T16012] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.720166][T16019] loop2: detected capacity change from 0 to 1764 [ 241.726935][T16012] ext4 filesystem being mounted at /507/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.742563][T16019] siw: device registration error -23 [ 241.753421][T16026] loop4: detected capacity change from 0 to 256 [ 241.805157][T16032] FAULT_INJECTION: forcing a failure. [ 241.805157][T16032] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.818362][T16032] CPU: 0 UID: 0 PID: 16032 Comm: syz.2.3229 Not tainted 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(voluntary) [ 241.818399][T16032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 241.818436][T16032] Call Trace: [ 241.818442][T16032] [ 241.818449][T16032] __dump_stack+0x1d/0x30 [ 241.818546][T16032] dump_stack_lvl+0xe8/0x140 [ 241.818569][T16032] dump_stack+0x15/0x1b [ 241.818589][T16032] should_fail_ex+0x265/0x280 [ 241.818620][T16032] should_fail+0xb/0x20 [ 241.818650][T16032] should_fail_usercopy+0x1a/0x20 [ 241.818679][T16032] _copy_from_iter+0xcf/0xe40 [ 241.818710][T16032] ? __build_skb_around+0x1a0/0x200 [ 241.818770][T16032] ? __alloc_skb+0x223/0x320 [ 241.818797][T16032] netlink_sendmsg+0x471/0x6b0 [ 241.818828][T16032] ? __pfx_netlink_sendmsg+0x10/0x10 [ 241.818913][T16032] __sock_sendmsg+0x145/0x180 [ 241.818980][T16032] ____sys_sendmsg+0x31e/0x4e0 [ 241.819012][T16032] ___sys_sendmsg+0x17b/0x1d0 [ 241.819086][T16032] __x64_sys_sendmsg+0xd4/0x160 [ 241.819158][T16032] x64_sys_call+0x191e/0x2ff0 [ 241.819176][T16032] do_syscall_64+0xd2/0x200 [ 241.819243][T16032] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 241.819264][T16032] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 241.819282][T16032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.819338][T16032] RIP: 0033:0x7fcb62a1eb69 [ 241.819351][T16032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.819366][T16032] RSP: 002b:00007fcb61087038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 241.819383][T16032] RAX: ffffffffffffffda RBX: 00007fcb62c45fa0 RCX: 00007fcb62a1eb69 [ 241.819453][T16032] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 241.819463][T16032] RBP: 00007fcb61087090 R08: 0000000000000000 R09: 0000000000000000 [ 241.819473][T16032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.819483][T16032] R13: 0000000000000000 R14: 00007fcb62c45fa0 R15: 00007ffcee71baf8 [ 241.819532][T16032] [ 242.072370][T16041] lo speed is unknown, defaulting to 1000 [ 242.086137][ T4453] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.134198][T16051] netlink: 'syz.2.3233': attribute type 10 has an invalid length. [ 242.299645][T16060] netlink: 'syz.2.3236': attribute type 21 has an invalid length. [ 242.385341][ T7582] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.799339][T16089] loop4: detected capacity change from 0 to 1764 [ 242.808818][T16089] siw: device registration error -23 [ 242.848253][T16091] netlink: 'syz.4.3246': attribute type 10 has an invalid length. [ 242.960075][T16094] lo speed is unknown, defaulting to 1000 [ 243.023813][T16098] lo speed is unknown, defaulting to 1000 [ 243.049293][T16102] ================================================================== [ 243.057447][T16102] BUG: KCSAN: data-race in mas_state_walk / mas_wr_store_entry [ 243.065111][T16102] [ 243.067452][T16102] write to 0xffff8881043c5b60 of 8 bytes by task 16100 on cpu 1: [ 243.075168][T16102] mas_wr_store_entry+0x1581/0x2b50 [ 243.080376][T16102] mas_store_prealloc+0x74d/0x9e0 [ 243.085432][T16102] commit_merge+0x6a5/0x730 [ 243.090379][T16102] vma_expand+0x220/0x320 [ 243.094716][T16102] vma_merge_new_range+0x296/0x310 [ 243.099857][T16102] mmap_region+0xa59/0x1630 [ 243.104376][T16102] do_mmap+0x9b3/0xbe0 [ 243.108474][T16102] vm_mmap_pgoff+0x17a/0x2e0 [ 243.113075][T16102] ksys_mmap_pgoff+0xc2/0x310 [ 243.117783][T16102] x64_sys_call+0x14a3/0x2ff0 [ 243.122471][T16102] do_syscall_64+0xd2/0x200 [ 243.126980][T16102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.132881][T16102] [ 243.135204][T16102] read to 0xffff8881043c5b60 of 8 bytes by task 16102 on cpu 0: [ 243.142837][T16102] mas_state_walk+0x2f5/0x650 [ 243.147541][T16102] mas_walk+0x60/0x150 [ 243.151627][T16102] lock_vma_under_rcu+0xa2/0x2f0 [ 243.156584][T16102] do_user_addr_fault+0x233/0x1090 [ 243.161737][T16102] exc_page_fault+0x62/0xa0 [ 243.166244][T16102] asm_exc_page_fault+0x26/0x30 [ 243.171113][T16102] [ 243.173462][T16102] value changed: 0x00007f1aafdb4fff -> 0x00007f1aafd93fff [ 243.180567][T16102] [ 243.182912][T16102] Reported by Kernel Concurrency Sanitizer on: [ 243.189076][T16102] CPU: 0 UID: 0 PID: 16102 Comm: syz.6.3250 Not tainted 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(voluntary) [ 243.201240][T16102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 243.211396][T16102] ==================================================================