last executing test programs: 7m26.936822781s ago: executing program 0 (id=228): socket$key(0xf, 0x3, 0x2) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'dh\x00', 0x1, 0x4, 0x72}, 0x2c) socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r1 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r2}, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=ANY=[@ANYBLOB='4\x00\x00\x00'], 0x34}}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f0000001000)={0x1, &(0x7f0000000140)=[{0x45, 0x9, 0x0, 0x2}]}) 7m26.825136965s ago: executing program 0 (id=241): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fchown(r0, 0x0, 0x0) (fail_nth: 1) 7m26.490699659s ago: executing program 0 (id=243): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0x60, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000004c0)='kfree\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) timer_create(0x2, &(0x7f0000000000)={0x0, 0x22, 0x5, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) timer_settime(r4, 0x0, &(0x7f0000000500)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) kexec_load(0x4, 0xa, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r7, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r7], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x4c094) r9 = socket(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x74, 0x28, 0xd27, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xfffb, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0xfffffffc, 0x1, 0x0, 0x8, 0x80, {0x4, 0x1, 0x0, 0x2, 0x61a, 0x10000}, {0x5, 0x0, 0x6b4a, 0x9, 0xa6, 0x10000}, 0x4, 0x80000001, 0xc6}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x8800}, 0x404c0c0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0x0, 0x1}}}, 0x24}}, 0x10) 7m26.395093351s ago: executing program 0 (id=235): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x14, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume_offset', 0x420701, 0x1a2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x759, &(0x7f0000000780)={[{@noload}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@nombcache}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}, 0x0}, {@data_journal}, {@journal_dev={'journal_dev', 0x3d, 0xf}}, {@i_version}, {@nobarrier}, {@debug}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xb6a}}, {@data_err_ignore}], [], 0x2c}, 0x2, 0x4f9, &(0x7f0000000200)="$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") ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001600)={r2, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) 7m26.155890251s ago: executing program 0 (id=238): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x8}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000000080)=0x3, 0x4) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xffffffff, 0x3, 0x1cc0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3e, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r4}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000080)='tegra_dma_tx_status\x00', r5, 0x0, 0x1fc}, 0x18) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800be02542314a36de67000fddbdf250900020073797a31727865001400330076657468305f746f5f626f6e64000000"], 0x38}, 0x1, 0x0, 0x0, 0x40048d0}, 0x60000c4) recvfrom(r0, 0x0, 0x0, 0x102, 0x0, 0x0) 7m25.23539369s ago: executing program 0 (id=249): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500000010"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_mems\x00', 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xe, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r2}, 0x10) r3 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 7m19.015296729s ago: executing program 32 (id=294): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a00002"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) flock(r1, 0x5) close_range(r1, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x550, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={0x0, 0x4}, 0x1023e8, 0x0, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c00000000140000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = fsmount(0xffffffffffffffff, 0x0, 0x70) splice(r6, &(0x7f0000000580)=0xf, r3, &(0x7f00000006c0)=0xd3, 0x7, 0x11) syz_usb_connect$cdc_ncm(0x2, 0x7e, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c, 0x2, 0x1, 0x1, 0x90, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "8abe5a"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x8028, 0x1, 0xffd4, 0xc}, {0x6, 0x24, 0x1a, 0x8000, 0x9}, [@acm={0x4, 0x24, 0x2, 0xc}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x7f}, @acm={0x4, 0x24, 0x2, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x5, 0x1, 0x7f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x8, 0x4, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x5, 0x8, 0x3}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x17, 0x0, 0x1, 0x0, 0x3}, 0x23, &(0x7f0000000280)={0x5, 0xf, 0x23, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x7, 0x80, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "c6c0ef8cb030461606aa7830202df7bd"}]}, 0x6, [{0x65, &(0x7f00000005c0)=@string={0x65, 0x3, "b2491088474b3fb5698483899e22f9a9ece8cbd04b1f4449d38feb455af39478f09a05acfd029e29fd8caafb716769ed9ec2ae4db6e06ba9491a282f42b959976c86e111f6a605bc02424cf0f18dba4f09b3eebba1bba5bbbca8937f88e662324f7ed6"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x83e}}, {0x96, &(0x7f00000004c0)=@string={0x96, 0x3, "cdb875ea808330b137f43dc779312e366e093fb799eae166605fcde68d0906f87b29b6ef5eb453b1ee699f86ca8644ba92b4a5af55077c6a3a4486ccae7ab483f14569ebb00ccc9542e843cebde0981628a03f8bc41eabaf91ba5e8028624308c161f2c676a9012424d1d8536ae153fb227e3b853aa5bb071362aea1d0f102af1ce4289f543a37855fd6864d93ec8921fc971bf8"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x41b}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x1801}}, {0x4a, &(0x7f0000000300)=@string={0x4a, 0x3, "2f93ed7465ce436cf7bc162b6f22c340ea858a08e668ef063c5524698e620c40e0715be2cf8312b55e2d97108e4ee559cee83f4b8870e643f65764e1cd7dc651e185eb93ad0b6c65"}}]}) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000001c0)="8f00000014006b05c84e21000ab16d8b230675f802000000040002005817530461bc24eeb556a705251e6182149a36c23d3b48dfd8cd81bf9367b098fa51f60a64c9f4080000000000b6c0504bb9189d9193e9bd1c1b7376dc5214168eab57c736b13ae90298536c3aa6b230606b45823c8f8e9616afbb519374c3e3875b0f3252fc5dfbc28369efcd300a95fcfcda", 0x8f}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8094) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0xffffffff}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x3}]}}]}, 0x40}}, 0x4048000) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000040)=0x14) setresuid(0xee00, 0xee00, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000003c0)=0x1) 7m10.226096378s ago: executing program 33 (id=249): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500000010"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_mems\x00', 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xe, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r2}, 0x10) r3 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 6m2.622073741s ago: executing program 2 (id=1459): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setgid(0x0) 6m2.601865834s ago: executing program 2 (id=1460): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008040000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) sync() 6m2.552360141s ago: executing program 2 (id=1462): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100082, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r2}, 0x10) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x200, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}}, 0x24) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) 6m2.500402357s ago: executing program 2 (id=1465): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYRES16, @ANYRESDEC=r1], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) recvfrom$l2tp6(r3, &(0x7f0000000980)=""/4096, 0x1000, 0x31d433fbc6505723, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, 0x20) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r4, &(0x7f0000000240)='./file0/file0\x00', 0x272) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f00000003c0)={@loopback, @dev, 0x0}, &(0x7f0000000400)=0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_tracing={0x1a, 0x1b, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ldst={0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x8}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100}}, @alu={0x4, 0x1, 0xb, 0x3, 0x8, 0xffffffffffffffe0, 0x4}, @jmp={0x5, 0x1, 0x9, 0x5, 0x4, 0x4, 0x1}, @jmp={0x5, 0x0, 0x9, 0x9, 0x0, 0x80, 0xfffffffffffffff0}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0xe2, &(0x7f0000000640)=""/226, 0x41000, 0xa, '\x00', r5, 0x19, r4, 0x8, &(0x7f0000000580)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000740)={0x0, 0x9, 0x3, 0x400}, 0x10, 0x1c9f2, r0, 0x0, &(0x7f0000000780)=[r2, r4, r3, r3], 0x0, 0x10, 0x6}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x4, 0x7ffc1ffb}]}) mincore(&(0x7f0000001000/0x2000)=nil, 0x2000, &(0x7f00000008c0)=""/184) 6m2.457746063s ago: executing program 2 (id=1467): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r0 = socket$kcm(0x1e, 0x4, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000840)="0b42a596edafee7a4d4ab50fa4719e13a85655ce2d1b064449c08e3b7579f4d98778d34a6ca2037729904179c32dbcb852521c8adaa495377d1fb14b4045cf0dce7d5c24ac9febb9ee4476f8ebeef0a4c55bad25d121b54e626a984ffef35f7ee98c1d395d8499a04e4f367e4726bca610a3f92ecc69c1c9540a647bbd278166818b1f7467", 0x85}], 0x1}, 0x40010) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfdef) close(0x3) 6m1.69891797s ago: executing program 2 (id=1483): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 6m1.673653413s ago: executing program 34 (id=1483): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 4m51.487011438s ago: executing program 4 (id=2898): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000000000)={0xa, {"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", 0x1000}}, 0x1006) set_mempolicy(0x6005, &(0x7f0000000080)=0x7, 0xc) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d2, &(0x7f0000000000)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70300000088b000850000001b000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000480)='mm_page_free\x00', r3, 0x0, 0x2}, 0x18) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040), 0x10) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) listen(r4, 0x5) r5 = socket(0x28, 0x5, 0x0) setrlimit(0x40000000000008, &(0x7f0000000000)) connect$vsock_stream(r5, &(0x7f0000000080), 0x10) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002480)=@deltfilter={0x24, 0x2d, 0x4, 0x70bd2f, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0x1, 0x2}, {0x4, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004885}, 0x40004) sendmmsg(r5, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) 4m50.60750387s ago: executing program 4 (id=2912): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000400), 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xf1ff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000001500)={'gre0\x00', &(0x7f0000000600)={'gretap0\x00', 0x0, 0x40, 0x20, 0xffff, 0x9, {{0x2a, 0x4, 0x3, 0x3, 0xa8, 0x64, 0x0, 0xcb, 0x4, 0x0, @broadcast, @multicast1, {[@ra={0x94, 0x4}, @noop, @rr={0x7, 0xb, 0xe3, [@remote, @dev={0xac, 0x14, 0x14, 0x43}]}, @cipso={0x86, 0x49, 0x2, [{0x1, 0xf, "535707a6b62ee6f50c7c1dcc60"}, {0x2, 0xe, "ee1ebe0c0d32387751fa40bb"}, {0x1, 0x12, "a4b8ceb1afa35698b2f4e8293388f0ec"}, {0x7, 0x12, "ff04000000000000006aff349188b103"}, {0x5, 0x2}]}, @ssrr={0x89, 0x7, 0x5d, [@loopback]}, @rr={0x7, 0x17, 0x85, [@private=0xa010101, @broadcast, @rand_addr=0x64010102, @remote, @remote]}, @lsrr={0x83, 0x1b, 0x1b, [@remote, @broadcast, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @loopback]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001580)={'syztnl1\x00', &(0x7f0000001540)={'syztnl0\x00', 0x0, 0x7, 0x8, 0x7, 0x46f51301, {{0x8, 0x4, 0x1, 0x33, 0x20, 0x66, 0x0, 0x6, 0x2f, 0x0, @empty, @empty, {[@generic={0x82, 0x4, "ab05"}, @timestamp={0x44, 0x8, 0xef, 0x0, 0x1, [0x10]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001640)={'ip6gre0\x00', &(0x7f00000015c0)={'syztnl2\x00', 0x0, 0x2f, 0x0, 0x3, 0x0, 0x8, @mcast1, @mcast1, 0x8000, 0x7800, 0x401, 0x3}}) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000400)}], 0x1}, 0x24040040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r6, &(0x7f0000000000)="fa", 0xfffffdef) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000200)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0x100}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000300)=@framed={{}, [@jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10}, @ldst={0x2, 0x3, 0x3, 0xa, 0x0, 0xffffffffffffffc0, 0x10}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x41}, 0x94) socket$inet_udplite(0x2, 0x2, 0x88) 4m49.718576444s ago: executing program 4 (id=2925): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) 4m49.688407318s ago: executing program 4 (id=2926): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000300)=0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x3, 0x6, 0xff, 0x0, 0x7, 0x8604, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f00000001c0), 0x8}, 0x0, 0x2c000000000, 0x0, 0x8, 0x9, 0x20005, 0xfff9, 0x0, 0x0, 0x0, 0x20000006}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000200)={[{@grpquota}, {@nomblk_io_submit}]}, 0x1, 0xbac, &(0x7f00000017c0)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5nGdGaOSX8/eHPe97wn8zxPTmfOe2BOA3hqTWc/0ohDEXE2iZis708jYqjaG4nYrB13/+7l+awlUam8/VsSSUTcu3t5vvFaSX07Xh+MRMTN15L490etcVfXN5bnyuXSSn18dO38paOr6xuvLJ2fO1c6V7pwYvbVE7MnZ2e7WOvtS+998cwPbzx/9frHM29+fuC7JE7HRH2uuY5umY7prb9Js0JEzHU7WE4G6vU015kUckwIAICO0qY13H9jMgbi4eJtMr79MdfkAAAAgK6oDERUAAAAgH0ucf8PAAAA+1zjewD37l6eb7R8v5HQX3fORMRUrf7G8821mUJsVrcjMRgRY78n0fxYa1L7tSc2nUX6+vtS1qJHzyF3snklIv6/3flPqvVPVZ/ibq0/jYiZLsSffmS8l+o/3YX4edcPwNPpxpnahaz1+pdurX9im+tfYZtr127kff1rrP/ut6z/HtY/0Gb999YOYxx+8NLNdnPN6793P/l5IYufbZ+oqL/hzpWIw4Xt6k+26k/a1H92hzHG529fazeX1Z/V22j9rr9yPeJIdTXXWn9D0un/Jzq6uFQuzdR+bvP66yc7x28+/1nL4jfuBfohO/9jsbvzf2mHMab+9+uhdnOPrz/9ZSh5p9obqu/5cG5tbeVYxFDyeuv+451zaRzTeI2s/hef6/z+367+7DNhs/53yP71XKlvs/HVR2KOHzn+1e7r762s/oVdnv9Pdxjjy2+uvd9uLu/6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgb0oiYiCQtbvXTtFiMGI+I/8RYWr64uvby4sUPLixkcxFTMZguLpVLMxExWRsn2fhYtf9wfPyR8WxEHIyIzyZHq+Pi/MXyQt7FAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsGU8IiYiSYsRkUbEH5NpWizmnRUAAADQdVN5JwAAAAD0nPt/AAAA2P9a7v8LfxmN9DMXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9qWDz964lUTE5qnRassM1ecGc80M6LV0Z4eN9ToPoP8G8k4AyE2hqV+pVCo5pgL0mXt8IHnM/EjbmeGu5wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP9cLh27cSiJi89RotWWG6nODuWYG9FqadwJAbgY6TSaP3QHsYYW8EwBy4x4fqK3sH1RqWudH2v7m8BNHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDvmKi2JC1GRFrtp2mxGPGviJiKwWRxqVyaiYgDEfHT5OBwNj6Wd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB03er6xvJcuVxa0dHR6WJnNPoWa7T+Zm5zzHD7qQ6dnD+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIxer6xvJcuVxaWc07EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBvq+sby3Plcmmlh528awQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID9/BgAA///GyAmy") r1 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') write$cgroup_int(r1, &(0x7f0000000600)=0x2, 0x12) r2 = semget$private(0x0, 0x4, 0x0) semop(r2, &(0x7f0000000380)=[{0x0, 0xffff}], 0x1) semtimedop(r2, &(0x7f0000000000)=[{0x0, 0x8, 0x800}, {0x0, 0x1, 0x1800}], 0x2, 0x0) r3 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffe000/0x2000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x4000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x18, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000044}, 0x40) syz_emit_ethernet(0x82, &(0x7f0000000100)=ANY=[], 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r5, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lseek(r5, 0x5, 0x4) openat(0xffffffffffffff9c, 0x0, 0xce342, 0x0) 4m45.753922602s ago: executing program 4 (id=2932): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000000)=0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYRESHEX=r1, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/18, @ANYRES32=0x0], 0x30}}, 0x0) r7 = socket$pptp(0x18, 0x1, 0x2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x0, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r8, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/190, 0xbe}], 0x1, 0x0, 0x0) setsockopt$RDS_GET_MR(r8, 0x114, 0x2, &(0x7f0000000880)={{&(0x7f0000000800)=""/44, 0x2c}, &(0x7f0000000840), 0x2}, 0x20) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x6) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') preadv(r9, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) syz_usb_connect(0x4, 0x24, &(0x7f0000000040)=ANY=[], 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000080)='kfree\x00', r10, 0x0, 0x97a3}, 0x18) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r9, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000002c0)=r9}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x1c, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, [@generic={0x0, 0x3, 0x5, 0xc000, 0x74c3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, @exit, @alu={0x7, 0x0, 0x9, 0xb, 0x6, 0xffffffffffffffe0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r11}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}]}, &(0x7f0000000580)='GPL\x00', 0xff, 0xe7, &(0x7f00000005c0)=""/231, 0x41000, 0x5b, '\x00', 0x0, 0x0, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f00000006c0)={0x2, 0x2, 0x9, 0xffff0c92}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r9, r1, r9], 0x0, 0x10, 0x80000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) 4m44.691958738s ago: executing program 4 (id=2997): lsm_list_modules(0x0, 0x0, 0x0) 4m29.625783548s ago: executing program 35 (id=2997): lsm_list_modules(0x0, 0x0, 0x0) 3m58.53134143s ago: executing program 8 (id=3896): tkill(0x0, 0x12) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/43, 0x2b, 0x730) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'ip6tnl0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_io_uring_setup(0x2439, &(0x7f0000001480)={0x0, 0x1064, 0x1000, 0xa, 0x40222}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r1, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {0x0}], 0x2}, 0x0, 0x1000}) io_uring_enter(r1, 0x47f8, 0x1e43, 0x2000000000000000, 0x0, 0x0) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a3000000000bc000000160a01000000000000000000010000010900010073797a30000000000900020073797a30000000009000038008000140000000007c0003801400010076657468305f746f5f62617461647600140001007665746831000000000000000000000014000100677265300000000000000000000000001400010077"], 0x188}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'gre0\x00'}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8001) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) tkill(0x0, 0x1) 3m58.306351069s ago: executing program 8 (id=3899): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f00000002c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000000c0)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) setresuid(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = gettid() sendmsg$unix(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="a77e", 0x2}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r3, @ANYBLOB="0000000018"], 0xa0}, 0x4004881) recvmsg$unix(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2000) 3m58.295386351s ago: executing program 8 (id=3900): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) openat(r2, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50) faccessat(r2, &(0x7f0000000000)='./file0\x00', 0x5) r3 = socket$kcm(0x10, 0x2, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) socket$key(0xf, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="9902000012006b9c9e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d24460bc24eab556a705251e6182949a36c2151fef08d8cdbf9367b41ad206000000f408000300040100000800000000000000", 0x5c}, {&(0x7f00000000c0)="d557fc16674b56c0a96a733c232d6790c63ca969a688b06e3da58f3c4568bf0a77bdff6f41d7890e18defe94ef1a392dc00dea94a1bfe64982de7cf1c91e1103cc1840210cbb57222bc2bfa30369992a6bc5156c00aeadd359a7991ad1de01feec401dba6d7694a14785839d3c2d67188cd07827c934897de4676743c192c4a4b24f7f8747141a1325d29da89694574c32eba56e5bbc8f80376f3325dd89937e990089294183a4829e21849004c538378d41066cb7de399450b354", 0xbb}, {&(0x7f0000000280)="5e191aea3468a5eab1c3d6024b43dece099475c81c53aa9244d866f68b8e31e93b41b432fb0454234620a25706bfb6f01ce01093b7ff634785d8b345ef8f7a928034820bbd37467d1049ac7a724c153c358d6f7efd919bb918734e846598b03733a6f4bbce06471d3a440e14dae67170cbfea76bc33481c28ec2cfad1f3d83ddece3006d5bb30dc4288dd40bd476cc7f94d143c56e54ed4d84b9c1ecc87fc035c7c992767edcfe2218bc6542a6a3a9b879e8aa6d652d277ee640cc15d2e9efe30584ed57ab208ca4db6cf63381804a5ee5950020", 0xd4}, {&(0x7f0000000380)="fd7617adb877574c4a4489fcaccde0c97bdb2d9d89dba8ab9fc9ebbdcedc770661e1971989a787890de32eebe4008ac8bfafa034add91f6ea4acc741521abecc6cbb4fcfeb61d7d08a8911e59550055d17897194afc1ffd04c18c2506d41bec374a6e5b1ed5fd07db55483fef2dc9ad8ae7c6044b08a303f256ff7e7dd720c72fc0d513110468d44e31a8fc9833d521b95c3b04378ca1c67b4faca350009045628c7f7196510f14ebdc68ba7", 0xac}], 0x4, 0x0, 0x0, 0x1f00c00e}, 0x0) 3m58.257821456s ago: executing program 8 (id=3902): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x22000406, &(0x7f0000000840)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}, {@jqfmt_vfsold}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@usrjquota}, {@barrier_val={'barrier', 0x3d, 0x8}}, {@nobh}, {@grpid}], [], 0x2c}, 0x84, 0x4d9, &(0x7f0000000900)="$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") dup(r0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x22000406, &(0x7f0000000840)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}, {@jqfmt_vfsold}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@usrjquota}, {@barrier_val={'barrier', 0x3d, 0x8}}, {@nobh}, {@grpid}], [], 0x2c}, 0x84, 0x4d9, &(0x7f0000000900)="$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") (async) dup(r0) (async) 3m58.039328503s ago: executing program 8 (id=3909): tkill(0x0, 0x12) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/43, 0x2b, 0x730) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'ip6tnl0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_io_uring_setup(0x2439, &(0x7f0000001480)={0x0, 0x1064, 0x1000, 0xa, 0x40222}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r1, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {0x0}], 0x2}, 0x0, 0x1000}) io_uring_enter(r1, 0x47f8, 0x1e43, 0x2000000000000000, 0x0, 0x0) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a3000000000bc000000160a01000000000000000000010000010900010073797a30000000000900020073797a30000000009000038008000140000000007c0003801400010076657468305f746f5f62617461647600140001007665746831000000000000000000000014000100677265300000000000000000000000001400010077"], 0x188}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'gre0\x00'}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8001) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) tkill(0x0, 0x1) 3m57.935519697s ago: executing program 8 (id=3914): bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r2 = geteuid() syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000100)={0x5, 0xfffffffffffffff3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x100, 0x42023, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1166b780, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r4}, 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB="2c7665727369036e3d3970323030302c00806c939285363d907c64fe0d89b8c7d4309b38a2a917f2bbf27b320fa1166bd395a52cef6fffc8f97c62084a9f47fbf5546b"]) (async) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB="2c7665727369036e3d3970323030302c00806c939285363d907c64fe0d89b8c7d4309b38a2a917f2bbf27b320fa1166bd395a52cef6fffc8f97c62084a9f47fbf5546b"]) mount$9p_virtio(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x800000, &(0x7f0000000340)={'trans=virtio,', {[{@cache_readahead}, {@access_uid={'access', 0x3d, 0xffffffffffffffff}}], [{@fsmagic={'fsmagic', 0x3d, 0x5}}, {@subj_role={'subj_role', 0x3d, '&-@'}}, {@appraise}, {@uid_gt={'uid>', r2}}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x31, 0x64, 0x66, 0x31, 0x36, 0x0, 0x66], 0x2d, [0x39, 0x35, 0x33, 0x64], 0x2d, [0x36, 0x62, 0x30, 0x33], 0x2d, [0xc9d718f3df894acd, 0x0, 0x53, 0xd642aadc12f57a82], 0x2d, [0x63, 0x64, 0x66, 0x62, 0x6b, 0x65, 0x32, 0x36]}}}, {@appraise}]}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x20, r1, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYRES8=r5, @ANYBLOB="5e09fa9120b68a4ce2427ee47043ba24124352f9a2ed122447307ca1f1e9f25c15c54ad18c6fd93e419c7956f9202104a327a802546028b8b190fb66bde3c47c32ca7d4f7a762e31be214ba82e28789878616bd7894f2fc1a714fb87418f93555ce48c4fc8f9e17fbd52e5891eb1bb9f4f96a38a4cdd09d8585948491b683eec370a8b795421a06ffec835085bfb7ae8dc7ca4bb2edfe52c25d61cbc6007e8d0177d6c020314b2ae60954da77292fb7184afa9b06dfeb9f3537b7ad27158ddd2c8890af123729bc76196", @ANYRES8, @ANYRESOCT=r4], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r10}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x800, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdnA=', @ANYRESHEX=r8, @ANYBLOB=',\x00']) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) (async) r11 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4616, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x0, 0x4}, 0x0, 0x3, 0x5fe, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$netlink(0x10, 0x3, 0x0) r12 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r12, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) (async) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r13, 0x8914, &(0x7f0000000040)={'lo\x00'}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r13, 0x8914, &(0x7f0000000040)={'lo\x00'}) setsockopt$inet_msfilter(r12, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f"], 0x18) 3m42.824910723s ago: executing program 36 (id=3914): bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r2 = geteuid() syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000100)={0x5, 0xfffffffffffffff3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x100, 0x42023, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1166b780, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r4}, 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB="2c7665727369036e3d3970323030302c00806c939285363d907c64fe0d89b8c7d4309b38a2a917f2bbf27b320fa1166bd395a52cef6fffc8f97c62084a9f47fbf5546b"]) (async) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB="2c7665727369036e3d3970323030302c00806c939285363d907c64fe0d89b8c7d4309b38a2a917f2bbf27b320fa1166bd395a52cef6fffc8f97c62084a9f47fbf5546b"]) mount$9p_virtio(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x800000, &(0x7f0000000340)={'trans=virtio,', {[{@cache_readahead}, {@access_uid={'access', 0x3d, 0xffffffffffffffff}}], [{@fsmagic={'fsmagic', 0x3d, 0x5}}, {@subj_role={'subj_role', 0x3d, '&-@'}}, {@appraise}, {@uid_gt={'uid>', r2}}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x31, 0x64, 0x66, 0x31, 0x36, 0x0, 0x66], 0x2d, [0x39, 0x35, 0x33, 0x64], 0x2d, [0x36, 0x62, 0x30, 0x33], 0x2d, [0xc9d718f3df894acd, 0x0, 0x53, 0xd642aadc12f57a82], 0x2d, [0x63, 0x64, 0x66, 0x62, 0x6b, 0x65, 0x32, 0x36]}}}, {@appraise}]}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x20, r1, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYRES8=r5, @ANYBLOB="5e09fa9120b68a4ce2427ee47043ba24124352f9a2ed122447307ca1f1e9f25c15c54ad18c6fd93e419c7956f9202104a327a802546028b8b190fb66bde3c47c32ca7d4f7a762e31be214ba82e28789878616bd7894f2fc1a714fb87418f93555ce48c4fc8f9e17fbd52e5891eb1bb9f4f96a38a4cdd09d8585948491b683eec370a8b795421a06ffec835085bfb7ae8dc7ca4bb2edfe52c25d61cbc6007e8d0177d6c020314b2ae60954da77292fb7184afa9b06dfeb9f3537b7ad27158ddd2c8890af123729bc76196", @ANYRES8, @ANYRESOCT=r4], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r10}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x800, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdnA=', @ANYRESHEX=r8, @ANYBLOB=',\x00']) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) (async) r11 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4616, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x0, 0x4}, 0x0, 0x3, 0x5fe, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$netlink(0x10, 0x3, 0x0) r12 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r12, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) (async) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r13, 0x8914, &(0x7f0000000040)={'lo\x00'}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r13, 0x8914, &(0x7f0000000040)={'lo\x00'}) setsockopt$inet_msfilter(r12, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f"], 0x18) 1m48.155470407s ago: executing program 5 (id=5950): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x4c, 0x2, [@TCA_BASIC_EMATCHES={0x48, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x3c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x23, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x7, 0x3, [@TCF_META_TYPE_VAR="043f51"]}, @TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR='3', @TCF_META_TYPE_VAR]}]}}]}]}]}}]}, 0x7c}}, 0x0) 1m48.073334208s ago: executing program 5 (id=5951): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ITER_CREATE(0x21, 0x0, 0x0) unshare(0x62040200) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90124fc600c05000f90c60100053582c137153e370a48018004f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5}, 0x0) 1m47.174963423s ago: executing program 5 (id=5955): r0 = fsopen(&(0x7f00000004c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001d40)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YG\xf9\xc2\xf1\xa4\xdb$\xf6]\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^W\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\xc5\x05\x9d\xd6\x02|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81', &(0x7f0000000080)='sockfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000001c0)='dE\x00', 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xa007ca, &(0x7f00000002c0)={[{@nojournal_checksum}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x483, &(0x7f0000001040)="$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") unshare(0x2c060000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1ffffdc1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000ff0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) unshare(0x2c020400) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000014c0)=@newtfilter={0x4c, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r5, {}, {0x0, 0xffe4}, {0xffe0}}, [@TCA_CHAIN={0x8, 0xb, 0x80}, @TCA_RATE={0x6, 0x5, {0x6, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0xbd}, @TCA_RATE={0x6, 0x5, {0xe}}, @TCA_RATE={0x6, 0x5, {0xa9, 0x16}}]}, 0x4c}, 0x1, 0xf0ffffffffffff, 0x0, 0x40d5}, 0x0) 1m46.860012023s ago: executing program 5 (id=5956): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x8000) 1m46.859670263s ago: executing program 5 (id=5957): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000007b000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000240)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000180)='neigh_update\x00', r4}, 0x18) sendto$inet6(r2, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x5) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000001c0)=0x10) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0xfd, 0xc8e}, {0x16}]}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(r6, &(0x7f0000000ec0)=[{{&(0x7f0000000080)={0x2, 0x4e25, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r8 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000000000000b, 0x149900) pread64(r8, &(0x7f0000002d40)=""/8, 0x8, 0x4) 1m46.854894564s ago: executing program 5 (id=5958): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa1000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r0}, 0x18) r1 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r3, 0x0, 0x7a, 0xfb, &(0x7f0000000180)="1ea5d70bab3c6c61210c10fd8dcd1c88361b16a89854e93cf49976bd998e9e245f11cdf426218efbf335924291aafa30723d191d24f2f9ff7e47ccdcba0c4da25f27a31b166692f8d259f34196c0200958bdc0981643819a78f3f1b34914f1f46014bcb7b06f0e9fb3e5c498569fb05ed2a0264dc0c2aaa6864c", &(0x7f00000004c0)=""/251, 0x2, 0x0, 0x6e, 0x63, &(0x7f0000000200)="7a7fdd0f61256b810a2cd73ed8ea860cb8a89b46981bc6db004585d06e4713732e4bf90bc939adc78590cb6c4b8ccd95072e25a7fbb46b8d5107b64f3cea3b4da8253cfdc6b18717dc329c2df8ad68fc083c10d235d9f626ed34f3dedd1f3a7d0179f922235fc993a41e22dea2a8", &(0x7f0000000300)="321d4319d14ab204cd1de5dab82966dcc1ce79e69800b1ade7810322f1e7c7b077b977ad8fa300d1c3bbd4bf3af39ec83e879e17a6feb319b70360f907e44eb43ee3390b489ea2fdf60142a693a27cf3340646bc9c941a5db0c8aa271f433f711aa2b4", 0x3, 0x0, 0xc1}, 0x50) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) 1m31.751878298s ago: executing program 37 (id=5958): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa1000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r0}, 0x18) r1 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r3, 0x0, 0x7a, 0xfb, &(0x7f0000000180)="1ea5d70bab3c6c61210c10fd8dcd1c88361b16a89854e93cf49976bd998e9e245f11cdf426218efbf335924291aafa30723d191d24f2f9ff7e47ccdcba0c4da25f27a31b166692f8d259f34196c0200958bdc0981643819a78f3f1b34914f1f46014bcb7b06f0e9fb3e5c498569fb05ed2a0264dc0c2aaa6864c", &(0x7f00000004c0)=""/251, 0x2, 0x0, 0x6e, 0x63, &(0x7f0000000200)="7a7fdd0f61256b810a2cd73ed8ea860cb8a89b46981bc6db004585d06e4713732e4bf90bc939adc78590cb6c4b8ccd95072e25a7fbb46b8d5107b64f3cea3b4da8253cfdc6b18717dc329c2df8ad68fc083c10d235d9f626ed34f3dedd1f3a7d0179f922235fc993a41e22dea2a8", &(0x7f0000000300)="321d4319d14ab204cd1de5dab82966dcc1ce79e69800b1ade7810322f1e7c7b077b977ad8fa300d1c3bbd4bf3af39ec83e879e17a6feb319b70360f907e44eb43ee3390b489ea2fdf60142a693a27cf3340646bc9c941a5db0c8aa271f433f711aa2b4", 0x3, 0x0, 0xc1}, 0x50) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) 8.025151522s ago: executing program 9 (id=7397): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x4080, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x2001, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, r1) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000006c0), r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000050000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x8a04c5, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0x1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r5}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',version=9p2000']) 7.838342986s ago: executing program 9 (id=7399): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000440)='kfree\x00', r1}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x34, r4, 0x301, 0x70bd29, 0x25dfdbfc, {0x24}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8041}, 0x0) 7.785819623s ago: executing program 9 (id=7401): perf_event_open(0x0, 0x0, 0x6, 0xffffffffffffffff, 0x1) connect$inet(0xffffffffffffffff, 0x0, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r2, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) 7.458838665s ago: executing program 9 (id=7406): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x6}, 0x200, 0x2, 0x0, 0x4, 0x408, 0xd9a, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0xffffffffffff056d, 0x4000000000008a, 0xff, 0x2000000000009, 0x7, 0x43, 0x52e6ac5d, 0x2000ffffffff, 0x9655, 0xffdffffffffffffe, 0xa, 0x9, 0x5, 0x7, 0x80100000000000, 0xcc3, 0x1, 0x85, 0x17, 0x3, 0x100000000, 0x8, 0x200000005, 0xfffffffffffffffe, 0x3, 0xa}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) syz_emit_ethernet(0x46, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x18, 0x68, 0x1, 0x2, 0x7ffffffc}, 0x18}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r4 = socket$qrtr(0x2a, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r5, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x1c, 0xc, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24044811}, 0x40000) connect$qrtr(r4, &(0x7f00000001c0)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r6 = syz_io_uring_setup(0x497, &(0x7f0000000140)={0x0, 0xc69f, 0x400, 0x3, 0x34e}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000440)=@sack_info={0x0, 0x1, 0x9}, &(0x7f0000000540)=0xc) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r4, 0x0, 0x0}) io_uring_enter(r6, 0x3498, 0x969, 0xffff0000000000a1, 0x0, 0x0) dup3(r6, r3, 0x80000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bond0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x404c8e0}, 0xc094) 7.133412726s ago: executing program 9 (id=7408): epoll_create1(0x80000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000f0070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c617374000000000400028010000180090001006c61737400000000140001800c000100636f756e74657200"], 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) 1.922835864s ago: executing program 9 (id=7409): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0xfffffffffffffeb2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES64=r1], 0xf8}, 0x1, 0x0, 0x0, 0x80}, 0x20008801) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8040) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x404, &(0x7f0000000580), 0x3, 0x5d8, &(0x7f0000000c00)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRESDEC=r4, @ANYRES32=r3], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r7}, 0x10) write(r3, &(0x7f00000004c0)="5678e5f65409d37e", 0xff87) sendfile(r5, r4, 0x0, 0x3ffff) r8 = memfd_create(0x0, 0x7) r9 = openat$nvram(0xffffffffffffff9c, 0x0, 0x88002, 0x0) pwritev(r9, 0x0, 0x0, 0x0, 0x0) dup(r8) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) r10 = socket$inet6(0xa, 0x3, 0x101) sendmmsg(r10, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @empty}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001580)=ANY=[], 0x108}}], 0x1, 0xc040) socket$nl_netfilter(0x10, 0x3, 0xc) 1.509933757s ago: executing program 3 (id=7496): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000380)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, 0x0, 0x0) 1.455790403s ago: executing program 6 (id=7497): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000180), 0xffffffffffffffff, 0x1}}, 0x18) 1.411604849s ago: executing program 3 (id=7498): r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000040), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) 1.411163089s ago: executing program 6 (id=7499): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, 0x0}, 0xc0) 1.410863469s ago: executing program 3 (id=7500): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) unshare(0x62040200) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90124fc600c05000f90c60100053582c137153e370a48018004f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5}, 0x0) 1.315399571s ago: executing program 6 (id=7501): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x200000) write$sndseq(r0, &(0x7f0000000040)=[{0xd1, 0x6, 0x1, 0x1, @tick=0x5, {0x22, 0x2}, {0x0, 0xfb}, @addr={0x0, 0xd1}}, {0x1, 0x6, 0x9a, 0x1, @time={0x1, 0x100}, {0x6, 0x80}, {0x87, 0x8}, @raw32={[0xffffff0f, 0x2, 0x1]}}, {0xd, 0x4, 0xf3, 0x29, @time={0x6, 0x2}, {0x8, 0x10}, {0xee, 0x7}, @control={0x3, 0x10000, 0x7}}, {0xc, 0x5, 0xc9, 0x9e, @time={0x1, 0x1}, {0x6, 0x8}, {0x4, 0x40}, @result={0x6, 0x78b}}, {0x2, 0x3, 0xc0, 0xc5, @tick=0x7f, {0x5d, 0x6}, {0x7, 0x40}, @raw32={[0xa, 0x6, 0xffffffff]}}], 0x8c) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000100)) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000001240)=@urb_type_interrupt={0x1, {0x4}, 0x9, 0x0, &(0x7f0000000180)="65cb81ad957abd2b58838337f45972ee57facf2e44f72f73cc376325a372dd85e6c6bd3a0d7528bcbdf2ae1fd19f3a6c75eec0b237100a67f7314d1bedb505cbdbd9a5f9dc4cc7ebce6d10da66ea998094cf9d4aa2120c55a2983b61e552ebca4befa0d04bafbd542225d2f73c7a46f9ecc1e3fd90626148376c4a6d4030478589dd0eaea6b19ca82b77b97bfb107aa37541eac26d7af74979072956e6c54625d679280b19fede51867f02f380f50379ba4cb81f6d0aac84bce77ed634b49a83221ba8d063ca3359be2ce13ed92568489a8247c1d63ec27182bba38d280980da2890ed82e0ec13fcaef3f272b73156a190921d4b03b695abd3efc36f780ac5a9a821c99fe94edce8f11aa91e23defd741d8885ecf4cb1cd3cdaa754ba43f2f1aa6aedcfaca5ffd15cc64f8d324082adc297bdb2e42ac8b6222c70b234d81d73506c1a0bbf8729a61e1f57fed0283a12bae61c2dffe73255833885f9f2f6e79e158d818315de17c9b104232eca366d3e3464e9f162f12528b15a6f4437148847f9765e9c12d3921a0119f962e509d91c995dcbc499310b1746edc12d41fa4f7b758735e7415755f17db023505a07d6cbc46a15c0815d419498ab8ba9b005cff60789c38d174ad04722375f8e819d13260295ca460be80add24b40d4f3b06f7f33a65029b2a645bc3e720d7ac5ed68e1a9441ebb5870d6611706ffd948fd28b67d30d7aa77a2141211665c1a97800ff4bd9ff38afa38a42c904cfa745f66946c173edc9f81e5be598782ffab95e8aace4b887340feae69683b0ace1bc2be4322a1e9b3d5a554ff720ac969d0eaee25b6f2b3631ba5f3f0bd9a4e1a3c90607edc06f72f0f585abc9f7ddbb7bf53f9a15cd0dc27065d288c5548d37367d65f80ebbaaa0389ad8c58ce0f7ec3c5c5e2abb4fa6e571721d138a118d25ebb84e355686da33bd699965bfb7fe27fb778bfb9248b87f5bd018621cb02b016631a578c47b8ace771a8b8d2293c6e5caff7154756ec225b99c834d6f53cde6ee338186056bb3d380a4b125b28d84905bccf042b12f5759113962d9d8e36459c63608b348db7226d2ad5564f28e79608f35a3d01a170c9e8f617814f98cff9e5334e4c1a9316d847c4edc46bfdeabd2d394d84cfdc0699869e75bfa730dc43258cd39e6984f7dc76f621ebc165162ffc41d3f414e5b23407ffd85beaab45f98cd848f5b3ce5e137d0205f4cfd9afb4f839606f5df3f98f7c1c042376906d285102649229bb037fb921d0bc25a122adcb468cde8a5d15368532cb5917bbf1d78ae71347bae1babc0e1310936b99830e524cbd07858117ce661bd40dbbb32e08411fe6e6389b7c64a0261ae302bddb45e30307812b6f8e074bfea1ba0a5e3ee263a0213f9ac7ed520b1dc702567607db759c33d6aa2aec97fa819e5bc4cf96b55bd9db74fbe26a68d405280c8db56a387ba104def7f0d4587f753fa97098b29f51a4f4b63d62190c02ba6bc585c1bb45f1cd4c1f7e7abc737da8836d713d482b9121e9bc04028357c23945ba7ce5a2eabdeb793b7f12c91697ce67f84cd96c1608453ffbaa921689de7ea1ed6efc12a114245857ea706e529d773aa9206025a929579ff4db7431d52efe02c27dfe126cd4e6ea0e61754477bfb7d0392461abf1c88e05cf002b47c80b2a87cbcb22845aa875d538fdac941ed8b407005105e89d4be3ac3ce38c7946debf7590ac398fe6c7941887430978a46afd4ea7394a904fadb963876ce5199290f88bf9891add02a82882ccf39435446a2ceeffa36f496696f97f893f17ce276d9318f95743b1166cd4999599876a5f25d58b49d78f66819c95f99125af9dbcca272d12d2ad070f4f48b93b0c2a8475a6cbef41bac2a029282ae6ad753ab8f47dc9bade964a864de7612614cff978146a5966e249b22b3e4d1e76aec9373436406c25b6203470740a6383409d1b5bff80f5fff0853df5f7d4627072ea0048b5168b3ba5a60b1e53e276db6ed1e20db774a4bda9f2594138f8a78553925851bb6de1a3929f3b91a8329b821ab5b35f4ec8e3867177101c1033f06a89075cc01120dda8d6d900bae0d6ab52092fdd1bf663e2e3eb211962e1e82c274243468831c63bba74495bf75b953998ede5811b9ec45c51a2b47af267e9bc703daeae5044577ac05a98267d9bb25401040b56e6344242a0d3ad864cf33553bbd23116eb0a8640b98e07b2d44985a3162500b3b7e8bb6be2387111906aaf70875302f97c90926dcd45b8c19d16c55c0190d862d1b2761c247eae2dffe227c3d621f73a624c199365f498b3eba6e052fc6e9f9e90b4ac8016964fd3d4c118fe19c0a2b7275ebaebba85b24182e7c52182efeda774c65d9af9ade3ef36b075cc33e0715439cff0b95f398f9543ff2472e304665b6fe98ad5d9ef6b0b519aed71972daccb3c3dcc69d1f56d89b230348b4854f975ae5d885b87c837ffaae43776a02e7d60b34af465a561ea348536c7d33a89b788bd48e99674dfd6f54cc0e99b0899192c4a27c94b271cc538d59adcbff56ee942cc28f85e7b126080c4c87e5e90e591849dc4f4b7d34d0d3d6c14884edbfedca9ba5608d4e7f2d997018103e82b830b1a4647e146656b524e133993323d7be8383ee7bd816c71b40127341045e540a8a6893f468e167cc260436cb6c1586fa862998822a5dd3d83ff35873cd9e3221e3c5a5adbd992e94457e32309d23a26eb272dce29a92c7547526bab12accff829a69cf28f18788ff8693d1d119be102dae968a429579ca9ecbad3911d9a20ac3c9b92af55af8cf923db805bfd70b2344808cbbc33cb5a563263818693a4fe3355422bc5e9c4012ed355528d5b13e571108b1827eeb10f97ba2b6c7edd4c27cde209432b298c28141a679d7f5c6cb5be4c787a120b50bd9e2de149088a4749fccaaa53ed06a03554131b619b74d167bfc2ac7a00a7d7a3f4666f1e5540b0901e4564da8091c249314dd1f297ba9bd6100527b90aa333e919e645b5fdf5036feb2a397d96617edc0598329dda89114af1968edbcc82e762c4020e5479bf72938a85936c1fc8db34e4f05848ba2b53ffe4d6d52516c5bd1204fad4c1929490263c2068b8c03cf7eee536e5693107133ca75afb58130eb49627bcf84c65e1e7bcd93d3c3682378f4b345dd761b3e41a08bf4bcc4f3e2f6c46dccdf89c995a173155ec706685a8ee510d98b54b46a81594ecdbca08895fe272e41d0a05c85a8ef457c54a5b09e04eeb9f2dfe2b90f1c1518d2951f2cd01027b93206c018af1f399618a89b6467cdc452b28df117d94d39c42727908dc488d696d54beff98121400e52075f66e664c388d28eca5e5297b3948a703adc41706a21f269a91dc33c334ef3c4f4e8356cb50ae52bbdf92bcea71592ef66275f5dc913c865dfa1c3819f7db753353cf83553470016f22dcc79b706f3340ea75f4b0cd0e7bf2da4ca256d60afe1c1c065c2a2964520e0d54c5d10b0e755e4f7541a969a3e75e1a7976ed54e54ee43a9fa124305988006503263957653bd6c4582814cccf34925f9d8dc83c26fca6262a18c2558a33b01ba66c943d1d7d193f902ed563995f03615ef2780ebd9277bc98a1d8726b4e5b2817633b91ce412eee84607df7d75a0090492b116e8d29bb00487d8dfc9f6fa1c7fefba328e2695546ea12d633788fa966a5229306f1859e3ef1a14abb3dc3a64b5aacf7851070389de52075e4f3b9956b833250481b52ea2fd7503f1abc86c319ee49e8828168b76259d314697d8f9cc46ad906e73c0382e468162b31a458e7f86feda0d9b987f034faa6264a9be01fc4638c58bab6d40ec17b383ee11bdf6e8995e87967db31b827c03a45440faa080b035834bd3647f2f5b1f41eae02d58439a38bc0deea7329b0bc8604e83367dc792475bac4dcf9a7f68d345df8bc287c4c8bf08cac12fc21bcece82ac6505ff542af3692d05d8535d97b881dba9a7ec83568722f1f68b8eb8aca4c38002e639ac109ff2014ce0b77b12513acb254afbbb4756334d1b95978f92fb4c36aca970c3a21152cf91452d0daeed863e4cb2ddbf00fbab680e1bb8e279ed4132ed948c96ea5e9a04e4b5bcb417d330c1511f2e4265c4484de726c45b830daccd33b29884d0ae2e24a0c0a1ffede35183f925da11a593d75485ab50b5e2df68098856257800a83ed86f92f7e5f9a47deb472888605eedec5a161b981d2d881da5d07b5714abd581c68a42b7f3b7e8b8af497cb899ac8eec98eeb2daa68ea8e855a345fd0a171bd829c541ec7f83412ba75eaa28ab940c0e629f81de31deb3d026b73ae02c9efe2c797ab2e18281816128f185e6c49088142a146bcd5ab1b24f1c0a2f99842ac56c6156e4df28a2cef7d91882fc89de74356854fa5d0d0da3adf7ce6e60f58413d9f5acd5f80a211f20a4e9d7ab3b2a6b55349762e916009c43cfc43cf8e39e387c97413597826c976467e7c3570e1d2e17b6f907a4a50a2fb2be46f12832d516eb211072d6c8d36bed66c43dcf08649ae0bc5b461510910b56890cf3cc3463dec4467cef8f4fdff77b1be5c2caeb22c0209fef632cc6480102bd16d08f309383f27e0f34ce85823189c97e4cacf5f93a5da9ed15b8dd90e92f408843390f373ced506926e11127e15c02ab31c583f8f12963c244552c19e5b5c56550967ee45997a9cfd07de5f55291f1d4ae23897b16849a2c86455d8625e5b2139216970a13d3e78e938b2879f39d3f39527323ccd6d34b18897fdaf1131d8b0f965a8ed12a107337ff79c5e0437329ca463329a49ceeab256ee1b6c8b3bb85aad92bd63e83986b1cfac070de8267fd77b0c04f7ab13a7322cfee34273027675e217f679e0f2f5497a072c6f634fad7f932ac6f890853f6c6b7f279c42fa28a0044f16129c75a71f18843c3fe2749934beaa2cd201f36d26235c2092d113a68b06259b549bcc51555ac2744a988c253dc4522e4f4ebc1d9a4d38051932efecd8c06c18da4176f0e6a9f0596c0e27d28766254de931e81730bb9ecc3f08ffae458d0a9c63c37c98906ba2a5ec097d0fcfdedb0f55cd0b3adb567fdab7e1308726d3bc2cf5f0ced1eece489fd363ed52f2edc2bb315e6bcb2aa593a09c152594085265c8a4f94f0989cf509032c1cba6c253841ee9adf9cbff506214889b07a2a64aa62c227c106596e06f1734839dcad1b81adcc5e42bdacd6ea5572332dae721d1144fb04d7128157f1f891032f094ffa4aab4debc367845ef4bd806a943cb9366a383073630e00dcbec22388e4d48c51bb702bdc8f0bf1e4ea9e546041f71dd034de31059ca6880809b83ea09179223c076066d35163be1cfa4121645c370944f477f80bd01ce25c7b9c63bd7095c2fb4b1f361884c3ba448fafa6a2177b8a1c3296b8ad5754fe528b09cccb6babd0a723bbdc865cc7b8fc3370625fc344f7dd7d1e54795f5eb2d283fd8fdcf7ec76bf1a31bc09bca6ca2495c21ae6658f6d6257db62e0034715e98b7a51fb2d54f4724aba557b7908b2dcf21112f8d1e21fbccbb7263822795c8062fc16ab2ba24ed88833edd8ac6b32efa36487992debf04f2228a7e0223a4c406202cf75c05cd7d4803501c1d8222b1ac7dcf9a410aa18d644c97c77fc36af73c8ca9dd3ddcdf70f6993ecdd620e237fbe759ae7447a7f658d81aebf74fa18fca55b7ce6d83f6ecea08458f2400fc947f63ddf6ec808d743ab7efe7602b60b6e9fb147666f24304bf153f1006fd6e3aa5ef560935ffaa607fcbc490d7306c5328853adc", 0x1000, 0x10001, 0x6, 0x0, 0x10001, 0x2, &(0x7f0000001180)="5995b721d65237819eb1227213cf06213304b28f39662d580aedbc5688d8097d5d378bb11592a3c830d538df5cfc7366e71717642dfd65f6ae1f611bdd52c10e68d45020f7d0740e1aac9cedffd7db113f6ebd03ec48e0e6a39a39e1f8a9b5782eab5bb48176990aac67e5d1acc6ad53e8e9ce4e4a57a7bd411df00d20e210a8496c260cf2013caf9066e8cdf51182"}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000001400)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000013c0)={&(0x7f00000012c0)={0xd8, 0x1403, 0x200, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_hsr\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macvtap0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6tnl0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6tnl0\x00'}}]}, 0xd8}}, 0x8004) r2 = getpid() move_pages(r2, 0xa, &(0x7f0000001440)=[&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil], &(0x7f00000014c0)=[0x1], &(0x7f0000001500)=[0x0, 0x0, 0x0], 0x4) sched_setscheduler(r2, 0x0, &(0x7f0000001540)=0x5) get_robust_list(r2, &(0x7f00000015c0)=&(0x7f0000001580), &(0x7f0000001600)=0x18) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001680), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000016c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000017c0)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001780)={&(0x7f0000001700)={0x44, r3, 0x100, 0x70bd28, 0x31fb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x2}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x2}, @NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x840}, 0x481c5) socket$nl_rdma(0x10, 0x3, 0x14) r5 = msgget(0x3, 0x553) r6 = getegid() ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000001800)=0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000001840)='./file0\x00', &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) msgctl$IPC_SET(r5, 0x1, &(0x7f0000001900)={{0x0, 0xee01, r6, r7, r8, 0x56, 0x3ff}, 0x0, 0x0, 0x3, 0x100000001, 0x3, 0x5, 0xdd, 0x9, 0x8000, 0x9, 0x0, r2}) sendmsg$nl_route(r1, &(0x7f0000001a80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001a40)={&(0x7f00000019c0)=@newnexthop={0x60, 0x68, 0x1, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x6}, @NHA_GROUP={0x1c, 0x2, [{0x1, 0x4}, {0x0, 0x5}, {0x0, 0x3}]}, @NHA_RES_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @ip4=@broadcast}, @NHA_ENCAP_TYPE={0x6}, @NHA_BLACKHOLE={0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x85}, 0x80) r9 = openat(0xffffffffffffffff, &(0x7f0000001ac0)='./file0\x00', 0x1c1040, 0x96) r10 = fsmount(r1, 0x0, 0x173) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000001b00)='cachefiles_trunc\x00', r10, 0x0, 0xbc}, 0x18) msgctl$IPC_RMID(r5, 0x0) r11 = socket$inet(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSARP(r11, 0x8955, &(0x7f0000001b80)={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x6, @local}, 0x24, {0x2, 0x4e21, @empty}, 'wlan0\x00'}) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r9, 0x84, 0x15, &(0x7f0000001c00)={0xfe}, 0x1) r12 = semget$private(0x0, 0x1, 0x200) semop(r12, &(0x7f0000001c40)=[{0x0, 0x2, 0x1000}, {0x3, 0x101, 0x1000}, {0x1, 0xeb67, 0x1000}, {0x0, 0x1, 0x3800}, {0x0, 0x2, 0x3000}], 0x5) open(&(0x7f0000001c80)='./file0\x00', 0x300, 0x15a) 1.232436612s ago: executing program 6 (id=7504): socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace(0x4206, 0x0) ptrace$cont(0x9, 0x0, 0x8, 0x7fffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x38, r1, 0x7, 0x2, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x4}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2710}]}, 0x38}}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) 1.231344942s ago: executing program 6 (id=7505): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x182df000) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x36, &(0x7f0000000ec0)=@raw={'raw\x00', 0x3c1, 0x3, 0x29c, 0x10c, 0x150, 0x150, 0x0, 0xf8010000, 0x1d4, 0x238, 0x238, 0x1d4, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'tunl0\x00'}, 0x0, 0xa4, 0x10c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [0x0, 0xff], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa4, 0xc8}, @common=@inet=@SYNPROXY={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x2f8) 702.50572ms ago: executing program 6 (id=7507): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="16000000000000000400000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_generic(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x1b, 0x100, 0x70bd25, 0x25dfdbfd, {0xc}, [@typed={0x8, 0xc5, 0x0, 0x0, @fd=r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20080000}, 0x48000) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xf, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r5}, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) write$cgroup_type(r1, &(0x7f0000000000), 0xd4ba103) unlink(&(0x7f0000000100)='./file0/file1\x00') link(&(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000180)='./file1\x00') perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x0) socket$nl_audit(0x10, 0x3, 0x9) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000340), 0x2000011a) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'sh\x00', 0x5, 0x9, 0x77}, {@remote, 0x4e20, 0x2000, 0xcd}}, 0x44) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0x97ff}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 648.744107ms ago: executing program 1 (id=7509): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000380)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 552.033289ms ago: executing program 1 (id=7510): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000180), 0xffffffffffffffff, 0x1}}, 0x18) 479.877839ms ago: executing program 3 (id=7511): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={0x0}}, 0xc0) 478.463719ms ago: executing program 1 (id=7512): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=@gettaction={0x1d8, 0x32, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x59}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffd}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x14, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x28b9}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x9}, @action_gd=@TCA_ACT_TAB={0x7c, 0x1, [{0x14, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x14, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf0}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb5}}]}, @action_gd=@TCA_ACT_TAB={0x38, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x101c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x506}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x20c0}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x1}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff7}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000001}}]}, @action_gd=@TCA_ACT_TAB={0x68, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x401}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x39}, 0x18) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)={0xffffffffffffffff}) dup(r1) (async) r4 = dup(r1) socket(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newqdisc={0x50, 0x24, 0x300, 0x70bd2c, 0x25dedbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xd}, {0x10, 0xe}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0xcb, 0xd1d, 0x5, 0x2, 0xf, 0x101}}, {0x4}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8c}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4048000) (async) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newqdisc={0x50, 0x24, 0x300, 0x70bd2c, 0x25dedbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xd}, {0x10, 0xe}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0xcb, 0xd1d, 0x5, 0x2, 0xf, 0x101}}, {0x4}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8c}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4048000) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0xc000) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)="06d57b5ddfc9ddb9fc6c63d4a03ec0031ad46af0b366c3dc4824507653454c8e76c62946f5c92f50c033d62caee5248ff868ded0c4ec4387bfa201d54d13af0ad4fbdfa0f69118da410f186a9538e06a5ffec40021ec67040dc674d2dec4098a019d9d73ecd61c3a3a69faab23e56d390d78d30abdbfda9d13c900000000", 0x0, 0x81, r7}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000580), 0xb, r7}, 0x38) r9 = socket$inet6(0xa, 0x80002, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYRES32=r2, @ANYRES64, @ANYBLOB="fefffdffe5ef17668b01271ba14b000000100000", @ANYRES32=0x0, @ANYRES32=r3, @ANYRESDEC=r4], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r10, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000004c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r11], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb598}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r11], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb598}, 0x94) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x1b, &(0x7f00000000c0)={@remote, 0x0, 0x2, 0x2, 0x4}, 0x20) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/mem_sleep', 0x200381, 0xe4) (async) r12 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/mem_sleep', 0x200381, 0xe4) readahead(r12, 0x6, 0x8) r13 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r13) 443.333153ms ago: executing program 3 (id=7513): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0x4}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000180), 0xffffffffffffffff, 0x1}}, 0x18) 379.766022ms ago: executing program 3 (id=7514): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) shutdown(r0, 0x1) set_mempolicy(0x4003, &(0x7f0000000200)=0x7, 0x3) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) lseek(0xffffffffffffffff, 0x289e0cb5, 0x0) ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x292, &(0x7f0000000140)={0x0, 0xe359, 0x0, 0x4, 0x287}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x4}) io_uring_enter(r2, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x4e22, 0x0, @mcast1}}, 0x5c) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r5, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80}]}, 0x1c}}, 0x800) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000180)={0x1, &(0x7f0000000a40)=[{@none}]}) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000080)={[{@barrier_val={'barrier', 0x3d, 0x6}}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r6 = open(&(0x7f00000001c0)='./file1\x00', 0x16f07e, 0x88) fallocate(r6, 0x0, 0x8, 0x1101f0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r7, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 379.318212ms ago: executing program 1 (id=7515): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0141be000400040000000000338f3cb652ae1b570000000000000000fdfa9f129e7e27352d71ce79e676af8174db7d266196d25a50a25beaf415fe651ea1db67e17455f27f53561ec93c1e", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000000007020008f8ffffffb703000008000000b7040000000000008516000003000000950000f700"/72], &(0x7f0000000240)='GPL\x00', 0xffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0xa, &(0x7f0000000040)=0x7, 0x4) r5 = fcntl$dupfd(r4, 0x406, r4) write$cgroup_pid(r5, &(0x7f0000000240), 0xfdef) ppoll(&(0x7f0000000180)=[{r5, 0x4728}, {0xffffffffffffffff, 0x20}], 0x2, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r8) getsockname$packet(r8, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r10, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r11, 0x0, 0x9}, 0x18) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="48e1ca0010000305ff810000fddbdf250000000a85e73ea8775100fed453ceaae8f900e2af303d", @ANYBLOB="db7879bf77e2e27911804c296cc009e091c063b48113a4428860a7004414f57220db3c37f921fe9338dc4294d73ab678428d69a2f92e59bf83d5a758b97ca4eba076a21b7c2d0dd5bd35d8b5d5cb998a5fdd1f4c7565b35b4309b584ca8f8ffaab8c78ed161f0429c1b4585de4138a4415f577299ab26ca6779b80c3a62ac97381d306732fda439982a7865e53c6111c3acc3d0bc2ceaa95f9ad34cfe59627f74c88e5e8b8c0cc458c9ef2a461a596ceeffaffd55783d8c28ed79a94e53180fab97e1b0257927a99df", @ANYBLOB="1748000040000200280012800a000100767863616e000000180002801400010000000000", @ANYRES32=r9, @ANYRES32=r7, @ANYRESOCT=r3, @ANYRESHEX=r2, @ANYRESDEC=r10], 0x48}, 0x1, 0x0, 0x0, 0x8840}, 0x0) r12 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r13 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r13, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) connect$vsock_stream(r13, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10) bind$can_j1939(r12, 0x0, 0x0) 361.411304ms ago: executing program 1 (id=7516): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bc00551a00000000000000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open(&(0x7f00000002c0)='./file0\x00', 0x1491ff, 0x22) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x9d12}) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000080), 0x4) setsockopt$MRT_DEL_MFC(r2, 0x0, 0xcd, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0xe803, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_RATE={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x0) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000000)=0x1) close(0x3) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x4, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00'}, 0x10) syz_emit_ethernet(0x9d, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7b, 0x0, @wg=@data={0x4, 0x0, 0x0, '\x00'/99}}}}}}, 0x0) 347.703416ms ago: executing program 1 (id=7517): pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x80000) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="63fea2920816edc1574ae81b02d396a7", 0x10) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f00000000c0)="3bbdf285eecd3dc3751c0f778f6a01c7", 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r0, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0700000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000380)=0x2, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000d00)="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", 0x427}], 0x2, 0x0, 0x0, 0x10040000}, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000680), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r5, 0x0, 0xf41}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) socketpair(0x23, 0x2, 0x1, &(0x7f0000000040)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0ffb}]}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000004c0)='kmem_cache_free\x00', r7}, 0x18) brk(0x20ffc004) r8 = semget(0x1, 0x4, 0x39c) semop(r8, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}, {0x1, 0x5b7a, 0x800}], 0x2) semop(r8, &(0x7f0000000000)=[{0x1, 0xbbdd, 0x1000}, {0x1, 0x8, 0x1000}], 0x2) 300.986982ms ago: executing program 7 (id=7519): keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain) add_key$keyring(&(0x7f0000000040), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0x0) 235.77295ms ago: executing program 7 (id=7520): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r1}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r2, 0x0, 0x2}, 0x18) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0xe, &(0x7f0000000300)=@raw=[@alu={0x4, 0x0, 0x6, 0x8, 0x8, 0x118, 0x8}, @jmp={0x5, 0x1, 0x4, 0x9, 0x1, 0xffffffffffffffe0, 0xfffffffffffffff0}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @jmp={0x5, 0x1, 0x6, 0x8, 0x1, 0x8, 0xfffffffffffffffc}], &(0x7f0000000000)='GPL\x00', 0x7, 0xe7, &(0x7f0000000580)=""/231, 0x40f00, 0x5c, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f00000003c0)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000400)=[r0, r0, r0, r1, r0, r1, r1, r1], &(0x7f0000000680)=[{0x5, 0x5, 0x4}], 0x10, 0x8}, 0x94) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r3) r5 = signalfd(0xffffffffffffffff, &(0x7f0000000300)={[0x2]}, 0x8) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x2001, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, r6) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000006c0), r6) faccessat2(r5, &(0x7f0000000000)='\x00', 0x2, 0x1100) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x8a04c5, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r10, 0x0, 0x1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r10}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB=',version=9p2000']) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x440c, &(0x7f0000000080), 0x6, 0x454, &(0x7f0000000ac0)="$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") 119.296905ms ago: executing program 7 (id=7521): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 103.593477ms ago: executing program 7 (id=7522): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e00000003000000a66300000c00000000020000", @ANYRES32=0x1], 0x50) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000100)={0x0, 0x7fffffffffffffff, 0x3}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_RX(r1, 0x11a, 0x2, &(0x7f00000001c0)=@ccm_128={{0x304}, "17f78a4231c724fb", "91f4de83e53c642c05b4749fd769714a", "e2dfe93c", "9ba50c63d5d9556c"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "c4915c7f49541ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00', "be0ea450d5a5fd03"}, 0x38) ppoll(&(0x7f0000000240)=[{r1, 0x2010}, {r1, 0x31}, {r1, 0x8200}, {r1, 0x8008}], 0x4, &(0x7f0000000280)={0x0, 0x989680}, &(0x7f00000002c0)={[0xf]}, 0x8) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x32) r4 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20040845}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r6 = dup(0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0xe501, 0x3, 0x238, 0x148, 0xa, 0x1000000, 0x148, 0x0, 0x240, 0x230, 0x230, 0x240, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x1, 0x2, 0x0, 0x7], 0x2, 0x3}, {0x3, [0x3, 0x0, 0x0, 0x1, 0x1, 0x4], 0x3, 0x5}}}}, {{@ip={@local, @local, 0x0, 0xff000000, 'team_slave_0\x00', 'pimreg\x00', {}, {}, 0xff}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x5, 0x2, 0x6, 0x6, 0x4, 0x2], 0x1}, {0xffffffffffffffff, [0x7, 0x6, 0x4, 0x3, 0x5], 0x2, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@bloom_filter={0x1e, 0xd, 0x7fffffff, 0xfffffff3, 0x8001, r6, 0x7, '\x00', r5, r6, 0x2, 0x2, 0x2, 0xf, @value=r1}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtfilter={0x2c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xfffa}, {}, {0x2, 0xfff9}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x5f}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x3580) socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, &(0x7f00000001c0), &(0x7f0000000000)=0x4) r8 = accept(r1, &(0x7f0000000040)=@pppoe={0x18, 0x0, {0x0, @dev}}, &(0x7f0000000100)=0x80) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000000)={'team_slave_1\x00', {0x2, 0x4e21, @broadcast}}) connect$inet(r8, &(0x7f0000000140)={0x2, 0x4e22, @empty}, 0x10) 61.579932ms ago: executing program 7 (id=7523): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000180), 0xffffffffffffffff, 0x1}}, 0x18) 0s ago: executing program 7 (id=7524): perf_event_open(0x0, 0x0, 0x6, 0xffffffffffffffff, 0x1) connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8, @ANYRES32=0x0, @ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xae, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8002}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e85"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) clock_nanosleep(0x0, 0x1, &(0x7f0000000100)={0x77359400}, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r1, 0xa, 0x13) fcntl$setlease(r1, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x5) kernel console output (not intermixed with test programs): : mark inode dirty (error -117) [ 444.013488][T23714] EXT4-fs warning (device loop9): ext4_evict_inode:273: xattr delete (err -117) [ 444.022710][T23714] EXT4-fs (loop9): 1 orphan inode deleted [ 444.029201][T23714] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 444.086093][T23719] loop3: detected capacity change from 0 to 8192 [ 444.092648][T23719] vfat: Unknown parameter '' [ 444.111068][T23720] netlink: 44 bytes leftover after parsing attributes in process `syz.9.6593'. [ 444.165839][T23724] netlink: 288 bytes leftover after parsing attributes in process `syz.1.6594'. [ 444.203047][T16817] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.523395][T23736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.593906][T23736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.689973][T23715] netlink: 83992 bytes leftover after parsing attributes in process `syz.7.6592'. [ 444.839362][T23738] xt_hashlimit: max too large, truncated to 1048576 [ 444.871275][T23738] xt_CT: You must specify a L4 protocol and not use inversions on it [ 444.897382][T23739] 9p: Bad value for 'port' [ 445.242646][ T29] kauditd_printk_skb: 585 callbacks suppressed [ 445.242659][ T29] audit: type=1326 audit(445.214:46480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23744 comm="syz.7.6604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51887cf749 code=0x7ffc0000 [ 445.335530][ T29] audit: type=1326 audit(445.254:46481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23744 comm="syz.7.6604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51887cf749 code=0x7ffc0000 [ 445.358644][ T29] audit: type=1326 audit(445.254:46482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23744 comm="syz.7.6604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51887cf749 code=0x7ffc0000 [ 445.381717][ T29] audit: type=1326 audit(445.254:46483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23744 comm="syz.7.6604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f51887cf749 code=0x7ffc0000 [ 445.404569][ T29] audit: type=1326 audit(445.254:46484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23744 comm="syz.7.6604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51887cf749 code=0x7ffc0000 [ 445.427536][ T29] audit: type=1326 audit(445.304:46485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23744 comm="syz.7.6604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51887cf749 code=0x7ffc0000 [ 445.450499][ T29] audit: type=1326 audit(445.304:46486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23744 comm="syz.7.6604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51887cf749 code=0x7ffc0000 [ 445.473481][ T29] audit: type=1326 audit(445.304:46487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23744 comm="syz.7.6604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51887cf749 code=0x7ffc0000 [ 445.496533][ T29] audit: type=1326 audit(445.304:46488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23744 comm="syz.7.6604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f51887cf783 code=0x7ffc0000 [ 445.975424][ T29] audit: type=1326 audit(445.664:46489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23744 comm="syz.7.6604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51887cf749 code=0x7ffc0000 [ 446.343532][T23754] netlink: 44 bytes leftover after parsing attributes in process `syz.7.6605'. [ 446.768058][T23776] netlink: 292 bytes leftover after parsing attributes in process `syz.6.6613'. [ 446.778626][T23778] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6614'. [ 447.283953][T23840] netlink: 'syz.6.6641': attribute type 10 has an invalid length. [ 447.296854][T23840] team0: Failed to send options change via netlink (err -105) [ 447.304539][T23840] team0: Port device dummy0 added [ 447.316407][T23840] netlink: 'syz.6.6641': attribute type 10 has an invalid length. [ 447.325786][T23840] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 447.343784][T23840] team0: Failed to send options change via netlink (err -105) [ 447.352563][T23840] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 447.361789][T23840] team0: Port device dummy0 removed [ 447.369698][T23840] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 447.448190][T23847] vhci_hcd vhci_hcd.2: invalid port number 96 [ 447.454329][T23847] vhci_hcd vhci_hcd.2: default hub control req: 2000 vfffc i0060 l7 [ 447.701695][T23877] random: crng reseeded on system resumption [ 448.130664][T23894] __nla_validate_parse: 7 callbacks suppressed [ 448.130683][T23894] netlink: 44 bytes leftover after parsing attributes in process `syz.9.6663'. [ 448.161938][T23896] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6664'. [ 448.171832][T23896] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6664'. [ 448.338122][T23906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.357678][T23906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.701496][T23922] netlink: 'gtp': attribute type 39 has an invalid length. [ 448.872319][T23926] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6675'. [ 448.881752][T23926] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6675'. [ 448.974458][T23930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6677'. [ 449.004388][T23930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6677'. [ 449.185560][T23933] netlink: 83992 bytes leftover after parsing attributes in process `syz.6.6676'. [ 449.194960][T23933] net_ratelimit: 102 callbacks suppressed [ 449.194976][T23933] netlink: zone id is out of range [ 449.205920][T23933] netlink: zone id is out of range [ 449.223090][T23933] netlink: zone id is out of range [ 449.228273][T23933] netlink: zone id is out of range [ 449.239541][T23933] netlink: zone id is out of range [ 449.251337][T23933] netlink: zone id is out of range [ 449.278724][T23933] netlink: set zone limit has 8 unknown bytes [ 449.478384][T23940] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6679'. [ 449.564605][T23949] loop3: detected capacity change from 0 to 512 [ 449.572236][T23949] EXT4-fs error (device loop3): __ext4_fill_super:5553: inode #2: comm syz.3.6683: casefold flag without casefold feature [ 449.585702][T23949] EXT4-fs (loop3): get root inode failed [ 449.591353][T23949] EXT4-fs (loop3): mount failed [ 449.912216][T23955] 9p: Bad value for 'port' [ 450.150706][T23967] veth0: entered promiscuous mode [ 450.165919][T23967] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6688'. [ 450.283792][T23979] loop3: detected capacity change from 0 to 512 [ 450.296151][ T29] kauditd_printk_skb: 1430 callbacks suppressed [ 450.296198][ T29] audit: type=1400 audit(450.274:47920): avc: denied { create } for pid=23980 comm="syz.9.6695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 450.330698][T23979] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.6694: EA inode hash validation failed [ 450.360587][T23979] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.6694: corrupted inode contents [ 450.372942][T23979] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #15: comm syz.3.6694: mark_inode_dirty error [ 450.373368][T23987] 9p: Bad value for 'port' [ 450.384937][T23979] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.6694: corrupted inode contents [ 450.395701][ T29] audit: type=1400 audit(450.304:47921): avc: denied { bind } for pid=23980 comm="syz.9.6695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 450.401019][T23979] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3000: inode #15: comm syz.3.6694: mark_inode_dirty error [ 450.419770][ T29] audit: type=1400 audit(450.304:47922): avc: denied { connect } for pid=23980 comm="syz.9.6695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 450.450896][ T29] audit: type=1400 audit(450.304:47923): avc: denied { write } for pid=23980 comm="syz.9.6695" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 450.473259][ T29] audit: type=1400 audit(450.304:47924): avc: denied { mount } for pid=23980 comm="syz.9.6695" name="/" dev="hugetlbfs" ino=92480 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 450.495849][ T29] audit: type=1326 audit(450.324:47925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23980 comm="syz.9.6695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52b0b0f749 code=0x7ffc0000 [ 450.518901][ T29] audit: type=1326 audit(450.324:47926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23980 comm="syz.9.6695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52b0b0f749 code=0x7ffc0000 [ 450.522758][T23979] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3003: inode #15: comm syz.3.6694: mark inode dirty (error -117) [ 450.541878][ T29] audit: type=1326 audit(450.324:47927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23980 comm="syz.9.6695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52b0b0f749 code=0x7ffc0000 [ 450.541916][ T29] audit: type=1326 audit(450.324:47928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23980 comm="syz.9.6695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f52b0b0f749 code=0x7ffc0000 [ 450.576168][T23979] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -117) [ 450.577623][ T29] audit: type=1326 audit(450.324:47929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23980 comm="syz.9.6695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52b0b0f749 code=0x7ffc0000 [ 450.648984][T23979] EXT4-fs (loop3): 1 orphan inode deleted [ 450.655476][T23979] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 450.684255][T23979] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 450.692068][T23979] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 450.722330][T23979] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 450.730027][T23979] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 450.764484][T23995] loop6: detected capacity change from 0 to 512 [ 450.780880][T23995] EXT4-fs error (device loop6): __ext4_fill_super:5553: inode #2: comm syz.6.6700: casefold flag without casefold feature [ 450.808135][T23995] EXT4-fs (loop6): get root inode failed [ 450.813889][T23995] EXT4-fs (loop6): mount failed [ 450.931007][T24004] 9p: Bad value for 'port' [ 450.958157][T22265] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.982961][T24007] FAULT_INJECTION: forcing a failure. [ 450.982961][T24007] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 450.996201][T24007] CPU: 0 UID: 0 PID: 24007 Comm: syz.3.6704 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 450.996236][T24007] Tainted: [W]=WARN [ 450.996244][T24007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 450.996258][T24007] Call Trace: [ 450.996265][T24007] [ 450.996282][T24007] __dump_stack+0x1d/0x30 [ 450.996400][T24007] dump_stack_lvl+0x95/0xd0 [ 450.996418][T24007] dump_stack+0x15/0x1b [ 450.996438][T24007] should_fail_ex+0x265/0x280 [ 450.996464][T24007] should_fail+0xb/0x20 [ 450.996485][T24007] should_fail_usercopy+0x1a/0x20 [ 450.996600][T24007] _copy_from_user+0x1c/0xb0 [ 450.996631][T24007] ___sys_sendmsg+0xc1/0x1d0 [ 450.996680][T24007] __x64_sys_sendmsg+0xd4/0x160 [ 450.996740][T24007] x64_sys_call+0x17ba/0x3000 [ 450.996767][T24007] do_syscall_64+0xca/0x2b0 [ 450.996804][T24007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.996901][T24007] RIP: 0033:0x7f04e594f749 [ 450.996916][T24007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.996931][T24007] RSP: 002b:00007f04e43af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 450.996949][T24007] RAX: ffffffffffffffda RBX: 00007f04e5ba5fa0 RCX: 00007f04e594f749 [ 450.996964][T24007] RDX: 0000000000040080 RSI: 00002000000007c0 RDI: 0000000000000003 [ 450.996978][T24007] RBP: 00007f04e43af090 R08: 0000000000000000 R09: 0000000000000000 [ 450.996991][T24007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.997051][T24007] R13: 00007f04e5ba6038 R14: 00007f04e5ba5fa0 R15: 00007ffe6ba292a8 [ 450.997095][T24007] [ 451.314657][T24013] FAULT_INJECTION: forcing a failure. [ 451.314657][T24013] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 451.327790][T24013] CPU: 0 UID: 0 PID: 24013 Comm: syz.3.6708 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 451.327893][T24013] Tainted: [W]=WARN [ 451.327900][T24013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 451.327922][T24013] Call Trace: [ 451.327928][T24013] [ 451.327934][T24013] __dump_stack+0x1d/0x30 [ 451.327979][T24013] dump_stack_lvl+0x95/0xd0 [ 451.328001][T24013] dump_stack+0x15/0x1b [ 451.328022][T24013] should_fail_ex+0x265/0x280 [ 451.328051][T24013] should_fail+0xb/0x20 [ 451.328124][T24013] should_fail_usercopy+0x1a/0x20 [ 451.328154][T24013] _copy_from_user+0x1c/0xb0 [ 451.328189][T24013] __sys_bpf+0x183/0x7c0 [ 451.328222][T24013] __x64_sys_bpf+0x41/0x50 [ 451.328335][T24013] x64_sys_call+0x28e1/0x3000 [ 451.328366][T24013] do_syscall_64+0xca/0x2b0 [ 451.328407][T24013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.328434][T24013] RIP: 0033:0x7f04e594f749 [ 451.328452][T24013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 451.328484][T24013] RSP: 002b:00007f04e43af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 451.328572][T24013] RAX: ffffffffffffffda RBX: 00007f04e5ba5fa0 RCX: 00007f04e594f749 [ 451.328594][T24013] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 000000000000000a [ 451.328664][T24013] RBP: 00007f04e43af090 R08: 0000000000000000 R09: 0000000000000000 [ 451.328676][T24013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 451.328699][T24013] R13: 00007f04e5ba6038 R14: 00007f04e5ba5fa0 R15: 00007ffe6ba292a8 [ 451.328717][T24013] [ 451.498848][T24015] netlink: zone id is out of range [ 451.503977][T24015] netlink: zone id is out of range [ 451.529743][T24015] netlink: zone id is out of range [ 451.791514][T24035] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 452.019411][T24041] 9p: Bad value for 'port' [ 452.451327][T24071] 9p: Bad value for 'port' [ 452.550538][T24075] loop6: detected capacity change from 0 to 512 [ 452.576187][T24075] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 452.636881][T24075] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #2: block 9: comm syz.6.6731: lblock 0 mapped to illegal pblock 9 (length 1) [ 452.670978][T24075] EXT4-fs (loop6): mount failed [ 452.684314][T24077] loop3: detected capacity change from 0 to 8192 [ 453.588993][T24128] loop9: detected capacity change from 0 to 512 [ 453.595711][T24128] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 453.607270][T24128] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #2: block 9: comm syz.9.6753: lblock 0 mapped to illegal pblock 9 (length 1) [ 453.621967][T24128] EXT4-fs (loop9): mount failed [ 453.683133][T24131] __nla_validate_parse: 6 callbacks suppressed [ 453.683168][T24131] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6748'. [ 453.698430][T24131] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6748'. [ 454.074343][T24140] 9p: Bad value for 'port' [ 454.131482][T24142] loop9: detected capacity change from 0 to 512 [ 454.189523][T24142] EXT4-fs error (device loop9): __ext4_fill_super:5553: inode #2: comm syz.9.6759: casefold flag without casefold feature [ 454.203482][T24142] EXT4-fs (loop9): get root inode failed [ 454.209190][T24142] EXT4-fs (loop9): mount failed [ 454.235574][T24142] 9p: Bad value for 'port' [ 454.275068][T24155] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6765'. [ 454.298260][T24155] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6765'. [ 454.450237][T24180] loop6: detected capacity change from 0 to 512 [ 454.458917][T24180] EXT4-fs: Ignoring removed nomblk_io_submit option [ 454.467447][T24180] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 454.477445][T24180] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #13: comm syz.6.6777: iget: bad i_size value: 12154757448730 [ 454.490344][T24180] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.6777: couldn't read orphan inode 13 (err -117) [ 454.505850][T24180] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 454.568879][T24187] 9p: Bad value for 'port' [ 454.652814][T24186] loop3: detected capacity change from 0 to 512 [ 454.659602][T24186] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 454.710580][T24186] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #2: block 9: comm syz.3.6779: lblock 0 mapped to illegal pblock 9 (length 1) [ 454.731757][T24186] EXT4-fs (loop3): mount failed [ 454.761859][T24191] netlink: 83992 bytes leftover after parsing attributes in process `syz.7.6780'. [ 454.771208][T24191] net_ratelimit: 5 callbacks suppressed [ 454.771225][T24191] netlink: zone id is out of range [ 454.781926][T24191] netlink: zone id is out of range [ 454.787135][T24191] netlink: zone id is out of range [ 454.792263][T24191] netlink: zone id is out of range [ 454.797445][T24191] netlink: zone id is out of range [ 454.802673][T24191] netlink: zone id is out of range [ 454.807906][T24191] netlink: zone id is out of range [ 454.813047][T24191] netlink: zone id is out of range [ 454.827646][T24191] netlink: set zone limit has 8 unknown bytes [ 454.890501][T24202] loop3: detected capacity change from 0 to 512 [ 454.898984][T24203] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6785'. [ 454.913657][T24202] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 454.928315][T24203] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6785'. [ 454.938337][T24202] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #2: block 9: comm syz.3.6784: lblock 0 mapped to illegal pblock 9 (length 1) [ 454.956876][T24202] EXT4-fs (loop3): mount failed [ 455.020647][T24199] delete_channel: no stack [ 455.025163][T24199] delete_channel: no stack [ 455.082168][T24217] loop3: detected capacity change from 0 to 512 [ 455.090955][T24217] EXT4-fs error (device loop3): __ext4_fill_super:5553: inode #2: comm syz.3.6791: casefold flag without casefold feature [ 455.103936][T24217] EXT4-fs (loop3): get root inode failed [ 455.109710][T24217] EXT4-fs (loop3): mount failed [ 455.270636][T24232] loop9: detected capacity change from 0 to 512 [ 455.286279][T24232] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 455.307475][T24232] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #2: block 9: comm syz.9.6798: lblock 0 mapped to illegal pblock 9 (length 1) [ 455.335915][ T29] kauditd_printk_skb: 1304 callbacks suppressed [ 455.335932][ T29] audit: type=1400 audit(455.304:49232): avc: denied { unmount } for pid=23355 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 455.361815][T23355] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.365907][T24232] EXT4-fs (loop9): mount failed [ 455.371462][T24234] 9p: Bad value for 'port' [ 455.401251][ T29] audit: type=1326 audit(455.374:49233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24216 comm="syz.3.6791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e594f749 code=0x7ffc0000 [ 455.435769][ T29] audit: type=1326 audit(455.394:49234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24216 comm="syz.3.6791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e594f749 code=0x7ffc0000 [ 455.458837][ T29] audit: type=1326 audit(455.404:49235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24216 comm="syz.3.6791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f04e594f749 code=0x7ffc0000 [ 455.481832][ T29] audit: type=1326 audit(455.404:49236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24216 comm="syz.3.6791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e594f749 code=0x7ffc0000 [ 455.504841][ T29] audit: type=1326 audit(455.404:49237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24216 comm="syz.3.6791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e594f749 code=0x7ffc0000 [ 455.527798][ T29] audit: type=1326 audit(455.404:49238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24216 comm="syz.3.6791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f04e594f749 code=0x7ffc0000 [ 455.550796][ T29] audit: type=1326 audit(455.404:49239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24216 comm="syz.3.6791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e594f749 code=0x7ffc0000 [ 455.573754][ T29] audit: type=1326 audit(455.404:49240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24216 comm="syz.3.6791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e594f749 code=0x7ffc0000 [ 455.596739][ T29] audit: type=1326 audit(455.404:49241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24216 comm="syz.3.6791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f04e594f749 code=0x7ffc0000 [ 455.599505][T24244] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 455.718197][T24248] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6803'. [ 455.826854][T24269] netlink: 44 bytes leftover after parsing attributes in process `syz.7.6812'. [ 455.940543][T24286] loop9: detected capacity change from 0 to 512 [ 455.956165][T24286] EXT4-fs warning (device loop9): ext4_xattr_inode_get:560: inode #11: comm syz.9.6818: EA inode hash validation failed [ 455.975655][T24286] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #15: comm syz.9.6818: corrupted inode contents [ 456.005822][T24286] EXT4-fs error (device loop9): ext4_dirty_inode:6502: inode #15: comm syz.9.6818: mark_inode_dirty error [ 456.029270][T24286] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #15: comm syz.9.6818: corrupted inode contents [ 456.047242][T24286] EXT4-fs error (device loop9): ext4_xattr_delete_inode:3000: inode #15: comm syz.9.6818: mark_inode_dirty error [ 456.079093][T24286] EXT4-fs error (device loop9): ext4_xattr_delete_inode:3003: inode #15: comm syz.9.6818: mark inode dirty (error -117) [ 456.094577][T24293] 9p: Bad value for 'port' [ 456.102557][T24286] EXT4-fs warning (device loop9): ext4_evict_inode:273: xattr delete (err -117) [ 456.114932][T24286] EXT4-fs (loop9): 1 orphan inode deleted [ 456.121193][T24286] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 456.147184][T24297] FAULT_INJECTION: forcing a failure. [ 456.147184][T24297] name failslab, interval 1, probability 0, space 0, times 0 [ 456.159866][T24297] CPU: 1 UID: 0 PID: 24297 Comm: syz.3.6822 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 456.159900][T24297] Tainted: [W]=WARN [ 456.159907][T24297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 456.159921][T24297] Call Trace: [ 456.159928][T24297] [ 456.160009][T24297] __dump_stack+0x1d/0x30 [ 456.160039][T24297] dump_stack_lvl+0x95/0xd0 [ 456.160066][T24297] dump_stack+0x15/0x1b [ 456.160090][T24297] should_fail_ex+0x265/0x280 [ 456.160118][T24297] should_failslab+0x8c/0xb0 [ 456.160199][T24297] kmem_cache_alloc_noprof+0x69/0x4b0 [ 456.160227][T24297] ? skb_clone+0x151/0x1f0 [ 456.160263][T24297] skb_clone+0x151/0x1f0 [ 456.160317][T24297] __netlink_deliver_tap+0x2c9/0x500 [ 456.160360][T24297] netlink_unicast+0x66b/0x690 [ 456.160391][T24297] netlink_sendmsg+0x58b/0x6b0 [ 456.160423][T24297] ? __pfx_netlink_sendmsg+0x10/0x10 [ 456.160526][T24297] __sock_sendmsg+0x145/0x180 [ 456.160658][T24297] ____sys_sendmsg+0x31e/0x4a0 [ 456.160697][T24297] ___sys_sendmsg+0x17b/0x1d0 [ 456.160749][T24297] __x64_sys_sendmsg+0xd4/0x160 [ 456.160815][T24297] x64_sys_call+0x17ba/0x3000 [ 456.160845][T24297] do_syscall_64+0xca/0x2b0 [ 456.160887][T24297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.160913][T24297] RIP: 0033:0x7f04e594f749 [ 456.160971][T24297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 456.160993][T24297] RSP: 002b:00007f04e43af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 456.161016][T24297] RAX: ffffffffffffffda RBX: 00007f04e5ba5fa0 RCX: 00007f04e594f749 [ 456.161046][T24297] RDX: 0000000020000004 RSI: 00002000000007c0 RDI: 0000000000000003 [ 456.161058][T24297] RBP: 00007f04e43af090 R08: 0000000000000000 R09: 0000000000000000 [ 456.161074][T24297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 456.161171][T24297] R13: 00007f04e5ba6038 R14: 00007f04e5ba5fa0 R15: 00007ffe6ba292a8 [ 456.161193][T24297] [ 456.177575][T24286] netlink: 44 bytes leftover after parsing attributes in process `syz.9.6818'. [ 456.389037][T16817] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.416255][T24306] loop3: detected capacity change from 0 to 512 [ 456.429834][T24306] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.6825: EA inode hash validation failed [ 456.465108][T24306] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.6825: corrupted inode contents [ 456.495616][T24306] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #15: comm syz.3.6825: mark_inode_dirty error [ 456.519949][T24306] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.6825: corrupted inode contents [ 456.551942][T24306] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3000: inode #15: comm syz.3.6825: mark_inode_dirty error [ 456.571323][T24306] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3003: inode #15: comm syz.3.6825: mark inode dirty (error -117) [ 456.603677][T24306] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -117) [ 456.612852][T24306] EXT4-fs (loop3): 1 orphan inode deleted [ 456.619741][T24306] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 456.663031][T24330] loop9: detected capacity change from 0 to 1024 [ 456.677923][T24330] EXT4-fs: Ignoring removed nobh option [ 456.683617][T24330] EXT4-fs: inline encryption not supported [ 456.709279][T22265] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.721341][T24330] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 456.780082][T16817] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.827793][T24348] netlink: 'syz.9.6841': attribute type 1 has an invalid length. [ 456.860278][T24348] 8021q: adding VLAN 0 to HW filter on device bond1 [ 456.918921][T24352] bond1: (slave geneve2): making interface the new active one [ 456.950664][T24352] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 456.969688][T24348] loop9: detected capacity change from 0 to 2048 [ 457.024705][T24348] Alternate GPT is invalid, using primary GPT. [ 457.031161][T24348] loop9: p2 p3 p7 [ 457.360462][T24375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.384275][T24375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.646175][T24378] 9p: Bad value for 'port' [ 458.367948][T24409] 9p: Bad value for 'port' [ 458.848577][T24447] __nla_validate_parse: 7 callbacks suppressed [ 458.848595][T24447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6879'. [ 458.887331][T24447] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6879'. [ 459.817654][T24521] loop3: detected capacity change from 0 to 512 [ 459.824567][T24521] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 459.855284][T24521] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 459.874675][T24521] FAULT_INJECTION: forcing a failure. [ 459.874675][T24521] name failslab, interval 1, probability 0, space 0, times 0 [ 459.887444][T24521] CPU: 1 UID: 0 PID: 24521 Comm: syz.3.6912 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 459.887536][T24521] Tainted: [W]=WARN [ 459.887543][T24521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 459.887556][T24521] Call Trace: [ 459.887564][T24521] [ 459.887574][T24521] __dump_stack+0x1d/0x30 [ 459.887661][T24521] dump_stack_lvl+0x95/0xd0 [ 459.887681][T24521] dump_stack+0x15/0x1b [ 459.887703][T24521] should_fail_ex+0x265/0x280 [ 459.887734][T24521] should_failslab+0x8c/0xb0 [ 459.887808][T24521] kmem_cache_alloc_lru_noprof+0x6d/0x4c0 [ 459.887872][T24521] ? __d_alloc+0x37/0x340 [ 459.887908][T24521] __d_alloc+0x37/0x340 [ 459.887972][T24521] d_alloc_parallel+0x54/0xcd0 [ 459.888024][T24521] ? __rcu_read_unlock+0x4f/0x70 [ 459.888049][T24521] ? __d_lookup+0x316/0x340 [ 459.888086][T24521] ? try_to_unlazy+0x2a7/0x400 [ 459.888251][T24521] path_openat+0x8c6/0x23b0 [ 459.888300][T24521] do_filp_open+0x109/0x230 [ 459.888343][T24521] do_sys_openat2+0xa6/0x150 [ 459.888450][T24521] __x64_sys_openat+0xf2/0x120 [ 459.888521][T24521] x64_sys_call+0x2b07/0x3000 [ 459.888551][T24521] do_syscall_64+0xca/0x2b0 [ 459.888646][T24521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.888673][T24521] RIP: 0033:0x7f04e594f749 [ 459.888695][T24521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 459.888720][T24521] RSP: 002b:00007f04e43af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 459.888787][T24521] RAX: ffffffffffffffda RBX: 00007f04e5ba5fa0 RCX: 00007f04e594f749 [ 459.888803][T24521] RDX: 0000000000080642 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 459.888818][T24521] RBP: 00007f04e43af090 R08: 0000000000000000 R09: 0000000000000000 [ 459.888834][T24521] R10: 0000000000000150 R11: 0000000000000246 R12: 0000000000000001 [ 459.888849][T24521] R13: 00007f04e5ba6038 R14: 00007f04e5ba5fa0 R15: 00007ffe6ba292a8 [ 459.888919][T24521] [ 460.090720][T24525] 9p: Bad value for 'port' [ 460.123699][T22265] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.239140][T24538] loop3: detected capacity change from 0 to 8192 [ 460.418361][T24543] netlink: 83992 bytes leftover after parsing attributes in process `syz.6.6918'. [ 460.427740][T24543] netlink: zone id is out of range [ 460.432890][T24543] netlink: zone id is out of range [ 460.438101][T24543] netlink: zone id is out of range [ 460.443229][T24543] netlink: zone id is out of range [ 460.448447][T24543] netlink: zone id is out of range [ 460.453763][T24543] netlink: zone id is out of range [ 460.458968][T24543] netlink: zone id is out of range [ 460.464145][T24543] netlink: zone id is out of range [ 460.483269][T24543] netlink: set zone limit has 8 unknown bytes [ 460.808903][T24553] loop3: detected capacity change from 0 to 512 [ 460.817051][T24553] EXT4-fs error (device loop3): __ext4_fill_super:5553: inode #2: comm syz.3.6923: casefold flag without casefold feature [ 460.830044][T24553] EXT4-fs (loop3): get root inode failed [ 460.835815][T24553] EXT4-fs (loop3): mount failed [ 460.919146][ T29] kauditd_printk_skb: 1416 callbacks suppressed [ 460.919199][ T29] audit: type=1400 audit(460.894:50658): avc: denied { associate } for pid=24549 comm="syz.1.6921" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 460.976047][T24555] 9p: Bad value for 'port' [ 461.009424][ T29] audit: type=1326 audit(460.984:50659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24552 comm="syz.3.6923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e594f749 code=0x7ffc0000 [ 461.035759][ T29] audit: type=1326 audit(461.014:50660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24552 comm="syz.3.6923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e594f749 code=0x7ffc0000 [ 461.059025][ T29] audit: type=1326 audit(461.014:50661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24552 comm="syz.3.6923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f04e594f749 code=0x7ffc0000 [ 461.082021][ T29] audit: type=1326 audit(461.014:50662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24552 comm="syz.3.6923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e594f749 code=0x7ffc0000 [ 461.105021][ T29] audit: type=1326 audit(461.014:50663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24552 comm="syz.3.6923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e594f749 code=0x7ffc0000 [ 461.128071][ T29] audit: type=1326 audit(461.014:50664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24552 comm="syz.3.6923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f04e594f749 code=0x7ffc0000 [ 461.151112][ T29] audit: type=1326 audit(461.014:50665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24552 comm="syz.3.6923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e594f749 code=0x7ffc0000 [ 461.174183][ T29] audit: type=1326 audit(461.014:50666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24552 comm="syz.3.6923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e594f749 code=0x7ffc0000 [ 461.197233][ T29] audit: type=1326 audit(461.014:50667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24552 comm="syz.3.6923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f04e594f749 code=0x7ffc0000 [ 461.415104][T24575] loop3: detected capacity change from 0 to 8192 [ 461.975381][T24584] netlink: 292 bytes leftover after parsing attributes in process `syz.3.6935'. [ 462.036408][T24590] loop3: detected capacity change from 0 to 512 [ 462.045522][T24590] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.6938: EA inode hash validation failed [ 462.058407][T24590] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.6938: corrupted inode contents [ 462.070663][T24590] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #15: comm syz.3.6938: mark_inode_dirty error [ 462.070762][T24582] loop9: detected capacity change from 0 to 512 [ 462.088686][T24590] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.6938: corrupted inode contents [ 462.097528][T24582] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 462.101876][T24590] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3000: inode #15: comm syz.3.6938: mark_inode_dirty error [ 462.117862][T24582] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #2: block 9: comm syz.9.6934: lblock 0 mapped to illegal pblock 9 (length 1) [ 462.123165][T24590] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3003: inode #15: comm syz.3.6938: mark inode dirty (error -117) [ 462.140625][T24582] EXT4-fs (loop9): mount failed [ 462.149570][T24590] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -117) [ 462.163087][T24590] EXT4-fs (loop3): 1 orphan inode deleted [ 462.169448][T24590] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 462.210426][T24590] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6938'. [ 462.248370][T22265] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.388575][T24624] loop6: detected capacity change from 0 to 512 [ 462.400172][T24624] EXT4-fs warning (device loop6): ext4_xattr_inode_get:560: inode #11: comm syz.6.6952: EA inode hash validation failed [ 462.417801][T24624] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #15: comm syz.6.6952: corrupted inode contents [ 462.430442][T24624] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #15: comm syz.6.6952: mark_inode_dirty error [ 462.442097][T24624] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #15: comm syz.6.6952: corrupted inode contents [ 462.455272][T24624] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3000: inode #15: comm syz.6.6952: mark_inode_dirty error [ 462.467777][T24624] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3003: inode #15: comm syz.6.6952: mark inode dirty (error -117) [ 462.480677][T24624] EXT4-fs warning (device loop6): ext4_evict_inode:273: xattr delete (err -117) [ 462.490260][T24624] EXT4-fs (loop6): 1 orphan inode deleted [ 462.496697][T24624] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 462.515151][T24624] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6952'. [ 462.528827][T24624] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 462.536348][T24624] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 462.551860][T24624] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 462.559409][T24624] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 462.669403][T23355] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.687474][T24651] ªªªªªª: renamed from dummy0 (while UP) [ 462.796556][T24668] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6970'. [ 462.813166][T24668] hsr_slave_1 (unregistering): left promiscuous mode [ 463.109414][T24690] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.6975'. [ 463.118688][T24690] netlink: zone id is out of range [ 463.450801][T24709] netlink: 44 bytes leftover after parsing attributes in process `syz.7.6986'. [ 463.807845][T24741] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6997'. [ 463.888685][T24746] netlink: 'syz.3.7000': attribute type 4 has an invalid length. [ 463.932375][T24748] netlink: 44 bytes leftover after parsing attributes in process `syz.7.7001'. [ 464.409853][T24787] loop3: detected capacity change from 0 to 512 [ 464.424367][T24787] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 464.451340][T24787] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #2: block 9: comm syz.3.7010: lblock 0 mapped to illegal pblock 9 (length 1) [ 464.489495][T24787] EXT4-fs (loop3): mount failed [ 464.584311][T24795] loop3: detected capacity change from 0 to 512 [ 464.609809][T24795] EXT4-fs: Ignoring removed i_version option [ 464.613869][T24765] chnl_net:caif_netlink_parms(): no params data found [ 464.615888][T24795] EXT4-fs: Ignoring removed bh option [ 464.676914][T24795] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 464.726646][T24813] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.748487][T24765] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.755663][T24765] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.760702][T24795] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz.3.7015: iget: bad i_size value: 2533274857506816 [ 464.796348][T24765] bridge_slave_0: entered allmulticast mode [ 464.811757][T22265] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.828286][T24765] bridge_slave_0: entered promiscuous mode [ 464.853989][T24813] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.878069][T24765] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.885160][T24765] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.923371][T24765] bridge_slave_1: entered allmulticast mode [ 464.941274][T24765] bridge_slave_1: entered promiscuous mode [ 464.966668][T24813] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.994196][T24828] loop3: detected capacity change from 0 to 512 [ 465.010001][T24828] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 465.034546][T24828] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #2: block 9: comm syz.3.7024: lblock 0 mapped to illegal pblock 9 (length 1) [ 465.058891][T24813] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.077914][T24828] EXT4-fs (loop3): mount failed [ 465.090353][T24765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 465.128923][T24765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 465.149073][ T5223] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.194526][T24765] team0: Port device team_slave_0 added [ 465.200278][ T5223] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.226478][T24765] team0: Port device team_slave_1 added [ 465.237179][ T5223] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.260031][ T5223] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.271376][T24765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.278403][T24765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.304374][T24765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.331093][T24765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.338162][T24765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.364119][T24765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 465.383266][ T4829] bridge_slave_0: left allmulticast mode [ 465.388977][ T4829] bridge_slave_0: left promiscuous mode [ 465.394641][ T4829] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.498298][T24834] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7026'. [ 465.598567][ T4829] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 465.608024][ T4829] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 465.617048][ T4829] bond0 (unregistering): Released all slaves [ 465.640763][T24765] hsr_slave_0: entered promiscuous mode [ 465.647045][T24765] hsr_slave_1: entered promiscuous mode [ 465.653050][T24765] debugfs: 'hsr0' already exists in 'hsr' [ 465.658860][T24765] Cannot create hsr debugfs directory [ 465.679572][ T4829] hsr_slave_0: left promiscuous mode [ 465.686050][ T4829] hsr_slave_1: left promiscuous mode [ 465.716602][ T4829] team0 (unregistering): Port device team_slave_1 removed [ 465.727272][ T4829] team0 (unregistering): Port device team_slave_0 removed [ 465.738995][T24846] IPv6: NLM_F_CREATE should be specified when creating new route [ 466.076291][T24859] netlink: 'syz.3.7036': attribute type 21 has an invalid length. [ 466.136951][ T29] kauditd_printk_skb: 1127 callbacks suppressed [ 466.136967][ T29] audit: type=1400 audit(466.114:51795): avc: denied { setopt } for pid=24862 comm="syz.3.7038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 466.182910][T24765] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 466.192280][T24765] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 466.201388][T24765] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 466.210759][T24765] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 466.260678][ T29] audit: type=1326 audit(466.234:51796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24879 comm="syz.3.7042" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f04e594f749 code=0x0 [ 466.306037][T24765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.321033][T24765] 8021q: adding VLAN 0 to HW filter on device team0 [ 466.332119][ T4829] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.339216][ T4829] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.353635][T24882] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7043'. [ 466.367162][T24765] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 466.377656][T24765] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 466.392116][ T4829] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.399200][ T4829] bridge0: port 2(bridge_slave_1) entered forwarding state [ 466.448745][T24889] loop9: detected capacity change from 0 to 512 [ 466.466419][T24889] EXT4-fs warning (device loop9): ext4_xattr_inode_get:560: inode #11: comm syz.9.7044: EA inode hash validation failed [ 466.490072][T24889] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #15: comm syz.9.7044: corrupted inode contents [ 466.505749][T24889] EXT4-fs error (device loop9): ext4_dirty_inode:6502: inode #15: comm syz.9.7044: mark_inode_dirty error [ 466.517610][T24889] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #15: comm syz.9.7044: corrupted inode contents [ 466.527611][T24765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 466.536399][T24889] EXT4-fs error (device loop9): ext4_xattr_delete_inode:3000: inode #15: comm syz.9.7044: mark_inode_dirty error [ 466.549663][T24889] EXT4-fs error (device loop9): ext4_xattr_delete_inode:3003: inode #15: comm syz.9.7044: mark inode dirty (error -117) [ 466.562969][T24889] EXT4-fs warning (device loop9): ext4_evict_inode:273: xattr delete (err -117) [ 466.576334][T24889] EXT4-fs (loop9): 1 orphan inode deleted [ 466.582834][T24889] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 466.649462][T24889] netlink: 44 bytes leftover after parsing attributes in process `syz.9.7044'. [ 466.690547][T16817] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.744405][T24911] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7046'. [ 466.752608][T24765] veth0_vlan: entered promiscuous mode [ 466.774111][T24765] veth1_vlan: entered promiscuous mode [ 466.801070][T24765] veth0_macvtap: entered promiscuous mode [ 466.808647][T24765] veth1_macvtap: entered promiscuous mode [ 466.819305][T24765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 466.831029][T24765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 466.844819][ T4829] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.858640][ T4829] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.870848][ T4829] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.885825][ T29] audit: type=1400 audit(466.854:51797): avc: denied { mounton } for pid=24765 comm="syz-executor" path="/root/syzkaller.xsHCf6/syz-tmp" dev="sda1" ino=2075 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 466.909866][ T29] audit: type=1400 audit(466.854:51798): avc: denied { mount } for pid=24765 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 466.931583][ T29] audit: type=1400 audit(466.854:51799): avc: denied { mount } for pid=24765 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 466.953294][ T29] audit: type=1400 audit(466.854:51800): avc: denied { mounton } for pid=24765 comm="syz-executor" path="/root/syzkaller.xsHCf6/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 466.979797][ T29] audit: type=1400 audit(466.854:51801): avc: denied { mounton } for pid=24765 comm="syz-executor" path="/root/syzkaller.xsHCf6/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=97391 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 466.987340][ T4829] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.074064][T24924] FAULT_INJECTION: forcing a failure. [ 467.074064][T24924] name failslab, interval 1, probability 0, space 0, times 0 [ 467.084947][T24928] FAULT_INJECTION: forcing a failure. [ 467.084947][T24928] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 467.086904][T24924] CPU: 0 UID: 0 PID: 24924 Comm: syz.7.7005 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 467.087043][T24924] Tainted: [W]=WARN [ 467.087071][T24924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 467.087110][T24924] Call Trace: [ 467.087131][T24924] [ 467.087151][T24924] __dump_stack+0x1d/0x30 [ 467.087229][T24924] dump_stack_lvl+0x95/0xd0 [ 467.087372][T24924] dump_stack+0x15/0x1b [ 467.087468][T24924] should_fail_ex+0x265/0x280 [ 467.087547][T24924] should_failslab+0x8c/0xb0 [ 467.087616][T24924] kmem_cache_alloc_noprof+0x69/0x4b0 [ 467.087749][T24924] ? skb_clone+0x151/0x1f0 [ 467.087846][T24924] skb_clone+0x151/0x1f0 [ 467.087934][T24924] __netlink_deliver_tap+0x2c9/0x500 [ 467.088067][T24924] netlink_unicast+0x66b/0x690 [ 467.088175][T24924] netlink_sendmsg+0x58b/0x6b0 [ 467.088296][T24924] ? __pfx_netlink_sendmsg+0x10/0x10 [ 467.088429][T24924] __sock_sendmsg+0x145/0x180 [ 467.088489][T24924] ____sys_sendmsg+0x31e/0x4a0 [ 467.088598][T24924] ___sys_sendmsg+0x17b/0x1d0 [ 467.088773][T24924] __x64_sys_sendmsg+0xd4/0x160 [ 467.088910][T24924] x64_sys_call+0x17ba/0x3000 [ 467.088988][T24924] do_syscall_64+0xca/0x2b0 [ 467.089150][T24924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.089213][T24924] RIP: 0033:0x7fd55928f749 [ 467.089262][T24924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 467.089380][T24924] RSP: 002b:00007fd557cf7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 467.089440][T24924] RAX: ffffffffffffffda RBX: 00007fd5594e5fa0 RCX: 00007fd55928f749 [ 467.089481][T24924] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000006 [ 467.089520][T24924] RBP: 00007fd557cf7090 R08: 0000000000000000 R09: 0000000000000000 [ 467.089567][T24924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 467.089608][T24924] R13: 00007fd5594e6038 R14: 00007fd5594e5fa0 R15: 00007fff036fc6f8 [ 467.089683][T24924] [ 467.089743][T24924] netlink: 'syz.7.7005': attribute type 21 has an invalid length. [ 467.099841][T24928] CPU: 1 UID: 0 PID: 24928 Comm: syz.9.7051 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 467.100072][T24928] Tainted: [W]=WARN [ 467.100094][T24928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 467.100140][T24928] Call Trace: [ 467.100153][T24928] [ 467.100168][T24928] __dump_stack+0x1d/0x30 [ 467.100237][T24928] dump_stack_lvl+0x95/0xd0 [ 467.100331][T24928] dump_stack+0x15/0x1b [ 467.100394][T24928] should_fail_ex+0x265/0x280 [ 467.100465][T24928] should_fail+0xb/0x20 [ 467.100582][T24928] should_fail_usercopy+0x1a/0x20 [ 467.100683][T24928] _copy_to_user+0x20/0xa0 [ 467.100771][T24928] simple_read_from_buffer+0xb5/0x130 [ 467.100841][T24928] proc_fail_nth_read+0x10e/0x150 [ 467.100932][T24928] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 467.101090][T24928] vfs_read+0x1a8/0x770 [ 467.101155][T24928] ? __rcu_read_unlock+0x4f/0x70 [ 467.101269][T24928] ? __fget_files+0x184/0x1c0 [ 467.101355][T24928] ? mutex_lock+0x58/0x90 [ 467.101467][T24928] ksys_read+0xda/0x1a0 [ 467.101537][T24928] __x64_sys_read+0x40/0x50 [ 467.101642][T24928] x64_sys_call+0x2889/0x3000 [ 467.101726][T24928] do_syscall_64+0xca/0x2b0 [ 467.101838][T24928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.101902][T24928] RIP: 0033:0x7f52b0b0e15c [ 467.101953][T24928] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 467.102031][T24928] RSP: 002b:00007f52af56f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 467.102130][T24928] RAX: ffffffffffffffda RBX: 00007f52b0d65fa0 RCX: 00007f52b0b0e15c [ 467.102171][T24928] RDX: 000000000000000f RSI: 00007f52af56f0a0 RDI: 0000000000000008 [ 467.102212][T24928] RBP: 00007f52af56f090 R08: 0000000000000000 R09: 0000000000000000 [ 467.102273][T24928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 467.102355][T24928] R13: 00007f52b0d66038 R14: 00007f52b0d65fa0 R15: 00007ffff1ebf228 [ 467.102423][T24928] [ 467.225818][ T29] audit: type=1400 audit(466.994:51802): avc: denied { mounton } for pid=24765 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 467.527062][ T29] audit: type=1400 audit(466.994:51803): avc: denied { mount } for pid=24765 comm="syz-executor" name="/" dev="gadgetfs" ino=3927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 467.549108][ T29] audit: type=1400 audit(467.014:51804): avc: denied { write } for pid=24765 comm="syz-executor" name="cgroup.procs" dev="cgroup" ino=396 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 467.649563][T24944] 9p: Bad value for 'port' [ 467.760778][T24949] netlink: 83992 bytes leftover after parsing attributes in process `syz.7.7057'. [ 467.770049][T24949] net_ratelimit: 8 callbacks suppressed [ 467.770068][T24949] netlink: zone id is out of range [ 467.780805][T24949] netlink: zone id is out of range [ 467.786102][T24949] netlink: zone id is out of range [ 467.791283][T24949] netlink: zone id is out of range [ 467.796440][T24949] netlink: zone id is out of range [ 467.802046][T24949] netlink: zone id is out of range [ 467.815648][T24949] netlink: set zone limit has 8 unknown bytes [ 468.162689][T24964] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7063'. [ 468.177092][T24964] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7063'. [ 468.346634][T24972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.365592][T24972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.759465][T24980] infiniband syb2: RDMA CMA: cma_listen_on_dev, error -98 [ 469.268044][T24985] 9p: Bad value for 'port' [ 469.800498][T25014] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.7078'. [ 469.809825][T25014] netlink: zone id is out of range [ 469.814992][T25014] netlink: zone id is out of range [ 469.821139][T25014] netlink: zone id is out of range [ 470.270917][T25031] loop6: detected capacity change from 0 to 512 [ 470.279043][T25031] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 470.293676][T25031] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #2: block 9: comm syz.6.7086: lblock 0 mapped to illegal pblock 9 (length 1) [ 470.308667][T25031] EXT4-fs (loop6): mount failed [ 470.472290][T25040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.492593][T25040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.606131][T25045] SELinux: policydb version 0 does not match my version range 15-35 [ 470.614275][T25045] SELinux: failed to load policy [ 470.647898][T25045] loop3: detected capacity change from 0 to 512 [ 470.654736][T25045] EXT4-fs: Ignoring removed oldalloc option [ 470.662497][T25045] EXT4-fs (loop3): 1 truncate cleaned up [ 470.668670][T25045] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 471.145943][ T29] kauditd_printk_skb: 166 callbacks suppressed [ 471.145956][ T29] audit: type=1326 audit(471.124:51971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25042 comm="syz.7.7091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd5592c2005 code=0x7ffc0000 [ 471.175629][T25058] FAULT_INJECTION: forcing a failure. [ 471.175629][T25058] name failslab, interval 1, probability 0, space 0, times 0 [ 471.188436][T25058] CPU: 0 UID: 0 PID: 25058 Comm: syz.9.7094 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 471.188549][T25058] Tainted: [W]=WARN [ 471.188556][T25058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 471.188642][T25058] Call Trace: [ 471.188652][T25058] [ 471.188659][T25058] __dump_stack+0x1d/0x30 [ 471.188680][T25058] dump_stack_lvl+0x95/0xd0 [ 471.188776][T25058] dump_stack+0x15/0x1b [ 471.188795][T25058] should_fail_ex+0x265/0x280 [ 471.188822][T25058] should_failslab+0x8c/0xb0 [ 471.188919][T25058] __kmalloc_cache_noprof+0x65/0x4c0 [ 471.188942][T25058] ? alloc_fs_context+0x46/0x590 [ 471.189015][T25058] alloc_fs_context+0x46/0x590 [ 471.189037][T25058] fs_context_for_mount+0x22/0x30 [ 471.189113][T25058] do_new_mount+0xea/0x6a0 [ 471.189133][T25058] ? security_capable+0x83/0x90 [ 471.189254][T25058] path_mount+0x4ab/0xb80 [ 471.189338][T25058] ? user_path_at+0xbf/0x130 [ 471.189364][T25058] __se_sys_mount+0x28c/0x2e0 [ 471.189431][T25058] ? fput+0x8f/0xc0 [ 471.189465][T25058] __x64_sys_mount+0x67/0x80 [ 471.189546][T25058] x64_sys_call+0x2cca/0x3000 [ 471.189576][T25058] do_syscall_64+0xca/0x2b0 [ 471.189672][T25058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.189715][T25058] RIP: 0033:0x7f52b0b0f749 [ 471.189734][T25058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 471.189756][T25058] RSP: 002b:00007f52af56f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 471.189777][T25058] RAX: ffffffffffffffda RBX: 00007f52b0d65fa0 RCX: 00007f52b0b0f749 [ 471.189788][T25058] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000000 [ 471.189800][T25058] RBP: 00007f52af56f090 R08: 0000200000000540 R09: 0000000000000000 [ 471.189818][T25058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 471.189833][T25058] R13: 00007f52b0d66038 R14: 00007f52b0d65fa0 R15: 00007ffff1ebf228 [ 471.189925][T25058] [ 471.350130][ T29] audit: type=1326 audit(471.164:51972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25042 comm="syz.7.7091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd5592c2005 code=0x7ffc0000 [ 471.414338][ T29] audit: type=1326 audit(471.164:51973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25042 comm="syz.7.7091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd5592c2005 code=0x7ffc0000 [ 471.437325][ T29] audit: type=1326 audit(471.164:51974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25042 comm="syz.7.7091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd5592c2005 code=0x7ffc0000 [ 471.460855][ T29] audit: type=1326 audit(471.164:51975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25042 comm="syz.7.7091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd5592c2005 code=0x7ffc0000 [ 471.484102][ T29] audit: type=1326 audit(471.164:51976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25042 comm="syz.7.7091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd5592c2005 code=0x7ffc0000 [ 471.645642][ T29] audit: type=1326 audit(471.354:51977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25042 comm="syz.7.7091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd55928f749 code=0x7ffc0000 [ 471.668953][ T29] audit: type=1326 audit(471.354:51978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25042 comm="syz.7.7091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd55928f749 code=0x7ffc0000 [ 471.742202][ T29] audit: type=1400 audit(471.714:51979): avc: denied { read } for pid=25061 comm="syz.7.7096" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 471.744634][T22265] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.937246][T25072] 9p: Bad value for 'port' [ 472.131271][T25085] loop3: detected capacity change from 0 to 8192 [ 472.751913][T25103] netlink: 83992 bytes leftover after parsing attributes in process `syz.9.7108'. [ 472.778876][T25103] net_ratelimit: 5 callbacks suppressed [ 472.778889][T25103] netlink: set zone limit has 8 unknown bytes [ 473.024863][T25105] loop6: detected capacity change from 0 to 512 [ 473.052587][T25105] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 473.120256][T25105] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #2: block 9: comm syz.6.7111: lblock 0 mapped to illegal pblock 9 (length 1) [ 473.187554][T25105] EXT4-fs (loop6): mount failed [ 473.277058][T25117] 9p: Bad value for 'port' [ 473.373155][T25123] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7118'. [ 473.403280][T25123] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7118'. [ 473.519538][ T29] audit: type=1326 audit(473.494:51980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25129 comm="syz.1.7120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa411c0f749 code=0x7ffc0000 [ 473.535158][T25130] pimreg3: entered allmulticast mode [ 473.565938][T25131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.574488][T25131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.843155][T25137] netlink: 83992 bytes leftover after parsing attributes in process `syz.9.7121'. [ 473.852625][T25137] netlink: zone id is out of range [ 473.857761][T25137] netlink: zone id is out of range [ 473.880100][T25137] netlink: set zone limit has 8 unknown bytes [ 474.082728][T25143] loop3: detected capacity change from 0 to 512 [ 474.106447][T25143] EXT4-fs error (device loop3): __ext4_fill_super:5553: inode #2: comm syz.3.7124: casefold flag without casefold feature [ 474.119724][T25143] EXT4-fs (loop3): get root inode failed [ 474.125418][T25143] EXT4-fs (loop3): mount failed [ 474.378590][T25148] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.407175][T25149] 9p: Bad value for 'port' [ 474.422305][T25148] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.488274][T25148] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.529205][T25148] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.620575][ T5215] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.641168][ T5215] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.656107][ T5215] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.664612][ T5215] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.730774][T25174] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7136'. [ 475.014881][T25196] netlink: 83992 bytes leftover after parsing attributes in process `syz.9.7138'. [ 475.024281][T25196] netlink: zone id is out of range [ 475.029422][T25196] netlink: zone id is out of range [ 475.035491][T25196] netlink: zone id is out of range [ 475.055805][T25196] netlink: set zone limit has 8 unknown bytes [ 475.331415][T25200] FAULT_INJECTION: forcing a failure. [ 475.331415][T25200] name failslab, interval 1, probability 0, space 0, times 0 [ 475.344252][T25200] CPU: 1 UID: 0 PID: 25200 Comm: syz.7.7146 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 475.344280][T25200] Tainted: [W]=WARN [ 475.344287][T25200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 475.344327][T25200] Call Trace: [ 475.344427][T25200] [ 475.344437][T25200] __dump_stack+0x1d/0x30 [ 475.344466][T25200] dump_stack_lvl+0x95/0xd0 [ 475.344492][T25200] dump_stack+0x15/0x1b [ 475.344576][T25200] should_fail_ex+0x265/0x280 [ 475.344610][T25200] should_failslab+0x8c/0xb0 [ 475.344637][T25200] __kmalloc_node_track_caller_noprof+0xb9/0x5b0 [ 475.344662][T25200] ? sidtab_sid2str_get+0xa0/0x130 [ 475.344732][T25200] kmemdup_noprof+0x2b/0x70 [ 475.344769][T25200] sidtab_sid2str_get+0xa0/0x130 [ 475.344796][T25200] security_sid_to_context_core+0x1eb/0x2e0 [ 475.344909][T25200] security_sid_to_context+0x27/0x40 [ 475.344934][T25200] selinux_lsmprop_to_secctx+0x67/0xf0 [ 475.344967][T25200] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 475.345060][T25200] audit_log_subj_ctx+0xa4/0x3e0 [ 475.345079][T25200] ? skb_put+0xa9/0xf0 [ 475.345106][T25200] audit_log_task_context+0x48/0x70 [ 475.345152][T25200] audit_log_task+0xf4/0x250 [ 475.345237][T25200] audit_seccomp+0x61/0x100 [ 475.345265][T25200] ? __seccomp_filter+0x832/0x1260 [ 475.345363][T25200] __seccomp_filter+0x843/0x1260 [ 475.345486][T25200] ? __schedule+0x85f/0xcd0 [ 475.345518][T25200] __secure_computing+0x82/0x150 [ 475.345552][T25200] syscall_trace_enter+0xcf/0x1e0 [ 475.345584][T25200] do_syscall_64+0xa4/0x2b0 [ 475.345695][T25200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.345721][T25200] RIP: 0033:0x7fd55928f749 [ 475.345739][T25200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 475.345761][T25200] RSP: 002b:00007fd557cf7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 475.345796][T25200] RAX: ffffffffffffffda RBX: 00007fd5594e5fa0 RCX: 00007fd55928f749 [ 475.345807][T25200] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 475.345818][T25200] RBP: 00007fd557cf7090 R08: 0000000000000000 R09: 0000000000000000 [ 475.345829][T25200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 475.345895][T25200] R13: 00007fd5594e6038 R14: 00007fd5594e5fa0 R15: 00007fff036fc6f8 [ 475.345913][T25200] [ 475.675199][T25203] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.736962][T25203] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.839131][T25203] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.930486][T25203] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.970942][T25229] SELinux: Context Ü is not valid (left unmapped). [ 476.050407][T25234] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7156'. [ 476.074054][T25234] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7156'. [ 476.118897][ T4786] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.134226][ T4786] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.148951][ T4786] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.167884][ T4786] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.244554][T25236] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.7158'. [ 476.253812][T25236] netlink: zone id is out of range [ 476.258990][T25236] netlink: zone id is out of range [ 476.415483][ T29] kauditd_printk_skb: 396 callbacks suppressed [ 476.415500][ T29] audit: type=1326 audit(732.374:52376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25239 comm="syz.7.7160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd55928f749 code=0x7ffc0000 [ 476.444845][ T29] audit: type=1326 audit(732.374:52377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25239 comm="syz.7.7160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd55928f749 code=0x7ffc0000 [ 476.467814][ T29] audit: type=1326 audit(732.374:52378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25239 comm="syz.7.7160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd55928f749 code=0x7ffc0000 [ 476.490834][ T29] audit: type=1326 audit(732.374:52379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25239 comm="syz.7.7160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd55928f749 code=0x7ffc0000 [ 476.513831][ T29] audit: type=1326 audit(732.374:52380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25239 comm="syz.7.7160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd55928f749 code=0x7ffc0000 [ 476.536725][ T29] audit: type=1326 audit(732.374:52381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25239 comm="syz.7.7160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd55928f749 code=0x7ffc0000 [ 476.748344][ T29] audit: type=1326 audit(732.544:52382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25239 comm="syz.7.7160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd55928f749 code=0x7ffc0000 [ 476.771505][ T29] audit: type=1326 audit(732.544:52383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25239 comm="syz.7.7160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd55928f783 code=0x7ffc0000 [ 476.794307][ T29] audit: type=1326 audit(732.664:52384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25239 comm="syz.7.7160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd55928f749 code=0x7ffc0000 [ 476.817453][ T29] audit: type=1326 audit(732.664:52385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25239 comm="syz.7.7160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd55928f749 code=0x7ffc0000 [ 476.892306][T25243] rdma_op ffff88814574f180 conn xmit_rdma 0000000000000000 [ 476.906124][T25243] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7161'. [ 476.965843][T25251] loop3: detected capacity change from 0 to 512 [ 477.002993][T25251] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.7161: bg 0: block 248: padding at end of block bitmap is not set [ 477.019746][T25251] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.7161: Failed to acquire dquot type 1 [ 477.032625][T25251] EXT4-fs (loop3): 1 truncate cleaned up [ 477.039612][T25251] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 477.156305][T25243] erspan1: entered allmulticast mode [ 477.297406][T25273] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.7166'. [ 477.353189][T22265] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.704464][T25286] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.758442][T25286] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.839146][T25286] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.926794][T25294] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.955222][T25286] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.017469][T25294] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.042398][T25297] loop6: detected capacity change from 0 to 512 [ 478.058565][T25297] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 478.074981][T25294] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.093029][T25297] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #2: block 9: comm syz.6.7180: lblock 0 mapped to illegal pblock 9 (length 1) [ 478.118364][T25297] EXT4-fs (loop6): mount failed [ 478.157366][T25294] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.217363][T25321] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7188'. [ 478.249378][ T4813] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.257821][ T4813] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.283396][T25321] vlan3: entered allmulticast mode [ 478.306761][ T4813] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.325526][ T4813] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.358968][T25324] 9p: Bad value for 'port' [ 478.676978][T25339] netlink: 83992 bytes leftover after parsing attributes in process `syz.6.7192'. [ 478.686263][T25339] net_ratelimit: 5 callbacks suppressed [ 478.686277][T25339] netlink: zone id is out of range [ 478.697062][T25339] netlink: zone id is out of range [ 478.719173][T25339] netlink: set zone limit has 8 unknown bytes [ 478.950893][T25346] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7197'. [ 479.113860][T25350] xt_hashlimit: max too large, truncated to 1048576 [ 479.390525][T25364] loop6: detected capacity change from 0 to 512 [ 479.406159][T25364] EXT4-fs error (device loop6): __ext4_fill_super:5553: inode #2: comm syz.6.7204: casefold flag without casefold feature [ 479.419653][T25364] EXT4-fs (loop6): get root inode failed [ 479.425345][T25364] EXT4-fs (loop6): mount failed [ 479.519310][T25367] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.7202'. [ 479.528581][T25367] netlink: zone id is out of range [ 479.533761][T25367] netlink: zone id is out of range [ 479.540020][T25367] netlink: zone id is out of range [ 479.562242][T25367] netlink: set zone limit has 8 unknown bytes [ 479.725422][T25370] loop7: detected capacity change from 0 to 8192 [ 480.392681][T25383] siw: device registration error -23 [ 480.456073][T25388] 9p: Bad value for 'port' [ 480.475921][ T4813] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.553696][ T4813] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.644072][ T4813] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.697030][ T4813] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.955819][T25403] 9p: Bad value for 'port' [ 481.140987][T25410] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7222'. [ 481.393060][T25429] netlink: 83992 bytes leftover after parsing attributes in process `syz.9.7223'. [ 481.402345][T25429] netlink: zone id is out of range [ 481.407479][T25429] netlink: zone id is out of range [ 481.422882][T25429] netlink: set zone limit has 8 unknown bytes [ 482.236610][ T29] kauditd_printk_skb: 956 callbacks suppressed [ 482.236625][ T29] audit: type=1326 audit(738.164:53340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25391 comm="syz.7.7215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd55928f749 code=0x7ffc0000 [ 482.266333][ T29] audit: type=1326 audit(738.214:53341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25391 comm="syz.7.7215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd55928f749 code=0x7ffc0000 [ 482.289321][ T29] audit: type=1326 audit(738.214:53342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25391 comm="syz.7.7215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd55928f749 code=0x7ffc0000 [ 482.312403][ T29] audit: type=1326 audit(738.214:53343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25391 comm="syz.7.7215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd55928f749 code=0x7ffc0000 [ 482.335475][ T29] audit: type=1326 audit(738.214:53344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25391 comm="syz.7.7215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7fd55928f749 code=0x7ffc0000 [ 482.358390][ T29] audit: type=1326 audit(738.244:53345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25391 comm="syz.7.7215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7fd55928f749 code=0x7ffc0000 [ 482.381402][ T29] audit: type=1326 audit(738.244:53346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25391 comm="syz.7.7215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd5592c2005 code=0x7ffc0000 [ 482.482232][T25431] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.7224'. [ 482.502998][ T29] audit: type=1326 audit(738.474:53347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25391 comm="syz.7.7215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd55928f749 code=0x7ffc0000 [ 482.526062][ T29] audit: type=1326 audit(738.474:53348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25391 comm="syz.7.7215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd55928f749 code=0x7ffc0000 [ 482.549031][ T29] audit: type=1326 audit(738.474:53349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25391 comm="syz.7.7215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd55928f749 code=0x7ffc0000 [ 482.878890][T25441] IPv6: NLM_F_CREATE should be specified when creating new route [ 482.913303][T25439] SELinux: policydb version 0 does not match my version range 15-35 [ 482.921854][T25439] SELinux: failed to load policy [ 482.929485][T25439] loop3: detected capacity change from 0 to 512 [ 482.936479][T25439] EXT4-fs: Ignoring removed oldalloc option [ 482.946738][T25439] EXT4-fs (loop3): 1 truncate cleaned up [ 482.952903][T25439] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 483.003406][T25459] netlink: 20 bytes leftover after parsing attributes in process `syz.9.7239'. [ 483.053788][T25459] ip6t_rpfilter: unknown options [ 483.063789][T22265] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.084789][T25459] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7239'. [ 483.108415][T25466] loop3: detected capacity change from 0 to 512 [ 483.123693][T25466] EXT4-fs error (device loop3): __ext4_fill_super:5553: inode #2: comm syz.3.7242: casefold flag without casefold feature [ 483.145959][T25466] EXT4-fs (loop3): get root inode failed [ 483.151700][T25466] EXT4-fs (loop3): mount failed [ 483.510206][T25484] 9p: Bad value for 'port' [ 483.792073][T25493] FAULT_INJECTION: forcing a failure. [ 483.792073][T25493] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 483.805285][T25493] CPU: 0 UID: 0 PID: 25493 Comm: syz.3.7251 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 483.805321][T25493] Tainted: [W]=WARN [ 483.805329][T25493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 483.805405][T25493] Call Trace: [ 483.805411][T25493] [ 483.805417][T25493] __dump_stack+0x1d/0x30 [ 483.805439][T25493] dump_stack_lvl+0x95/0xd0 [ 483.805456][T25493] dump_stack+0x15/0x1b [ 483.805488][T25493] should_fail_ex+0x265/0x280 [ 483.805512][T25493] should_fail+0xb/0x20 [ 483.805530][T25493] should_fail_usercopy+0x1a/0x20 [ 483.805557][T25493] _copy_from_user+0x1c/0xb0 [ 483.805588][T25493] __se_sys_io_uring_setup+0x11f/0x1d0 [ 483.805639][T25493] __x64_sys_io_uring_setup+0x31/0x40 [ 483.805669][T25493] x64_sys_call+0x244c/0x3000 [ 483.805696][T25493] do_syscall_64+0xca/0x2b0 [ 483.805820][T25493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.805915][T25493] RIP: 0033:0x7f04e594f749 [ 483.805932][T25493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 483.806021][T25493] RSP: 002b:00007f04e43aefc8 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 483.806077][T25493] RAX: ffffffffffffffda RBX: 00007f04e5ba5fa0 RCX: 00007f04e594f749 [ 483.806088][T25493] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000111 [ 483.806099][T25493] RBP: 0000200000000340 R08: 0000000000000000 R09: 0000000000000000 [ 483.806113][T25493] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 483.806128][T25493] R13: 0000000000000000 R14: 0000000000000111 R15: 0000000000000000 [ 483.806151][T25493] [ 484.175574][T25500] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7255'. [ 484.190518][T25500] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7255'. [ 484.194316][T25503] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7256'. [ 484.227059][T25503] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7256'. [ 484.302456][T25509] loop3: detected capacity change from 0 to 512 [ 484.311009][T25509] EXT4-fs error (device loop3): __ext4_fill_super:5553: inode #2: comm syz.3.7259: casefold flag without casefold feature [ 484.327197][T25509] EXT4-fs (loop3): get root inode failed [ 484.333025][T25509] EXT4-fs (loop3): mount failed [ 484.418475][T25516] SELinux: failed to load policy [ 484.506476][T25521] 9p: Bad value for 'port' [ 484.518915][T25522] 9p: Bad value for 'port' [ 484.709648][T25527] loop3: detected capacity change from 0 to 512 [ 484.725598][T25527] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 484.750104][T25527] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #2: block 9: comm syz.3.7266: lblock 0 mapped to illegal pblock 9 (length 1) [ 484.755130][T25544] IPv6: NLM_F_CREATE should be specified when creating new route [ 484.781539][T25527] EXT4-fs (loop3): mount failed [ 484.827451][T25547] FAULT_INJECTION: forcing a failure. [ 484.827451][T25547] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 484.840655][T25547] CPU: 0 UID: 0 PID: 25547 Comm: syz.3.7274 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 484.840694][T25547] Tainted: [W]=WARN [ 484.840703][T25547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 484.840720][T25547] Call Trace: [ 484.840729][T25547] [ 484.840739][T25547] __dump_stack+0x1d/0x30 [ 484.840802][T25547] dump_stack_lvl+0x95/0xd0 [ 484.840828][T25547] dump_stack+0x15/0x1b [ 484.840925][T25547] should_fail_ex+0x265/0x280 [ 484.840949][T25547] should_fail+0xb/0x20 [ 484.840968][T25547] should_fail_usercopy+0x1a/0x20 [ 484.840998][T25547] _copy_from_user+0x1c/0xb0 [ 484.841035][T25547] copy_from_bpfptr+0x5c/0x90 [ 484.841142][T25547] bpf_prog_load+0x73b/0x1140 [ 484.841183][T25547] ? security_bpf+0x2b/0x90 [ 484.841219][T25547] __sys_bpf+0x469/0x7c0 [ 484.841255][T25547] __x64_sys_bpf+0x41/0x50 [ 484.841307][T25547] x64_sys_call+0x28e1/0x3000 [ 484.841331][T25547] do_syscall_64+0xca/0x2b0 [ 484.841376][T25547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.841438][T25547] RIP: 0033:0x7f04e594f749 [ 484.841456][T25547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 484.841482][T25547] RSP: 002b:00007f04e43af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 484.841507][T25547] RAX: ffffffffffffffda RBX: 00007f04e5ba5fa0 RCX: 00007f04e594f749 [ 484.841524][T25547] RDX: 0000000000000094 RSI: 0000200000000880 RDI: 0000000000000005 [ 484.841536][T25547] RBP: 00007f04e43af090 R08: 0000000000000000 R09: 0000000000000000 [ 484.841628][T25547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 484.841645][T25547] R13: 00007f04e5ba6038 R14: 00007f04e5ba5fa0 R15: 00007ffe6ba292a8 [ 484.841671][T25547] [ 485.054078][T25552] loop3: detected capacity change from 0 to 512 [ 485.090526][T25552] EXT4-fs error (device loop3): __ext4_fill_super:5553: inode #2: comm syz.3.7276: casefold flag without casefold feature [ 485.103728][T25552] EXT4-fs (loop3): get root inode failed [ 485.109479][T25552] EXT4-fs (loop3): mount failed [ 485.145079][T25556] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.283404][T25559] netlink: 83992 bytes leftover after parsing attributes in process `syz.7.7275'. [ 485.292810][T25559] net_ratelimit: 3 callbacks suppressed [ 485.292821][T25559] netlink: zone id is out of range [ 485.303504][T25559] netlink: zone id is out of range [ 485.325184][T25559] netlink: set zone limit has 8 unknown bytes [ 485.887008][T25556] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.027748][T25565] 9p: Bad value for 'port' [ 486.650750][T25556] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.666605][T25575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.694437][T25575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.716649][T25577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7282'. [ 486.785491][T25578] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7282'. [ 486.814059][T25556] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.863656][T25582] FAULT_INJECTION: forcing a failure. [ 486.863656][T25582] name failslab, interval 1, probability 0, space 0, times 0 [ 486.876394][T25582] CPU: 0 UID: 0 PID: 25582 Comm: syz.7.7284 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 486.876434][T25582] Tainted: [W]=WARN [ 486.876443][T25582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 486.876458][T25582] Call Trace: [ 486.876466][T25582] [ 486.876529][T25582] __dump_stack+0x1d/0x30 [ 486.876560][T25582] dump_stack_lvl+0x95/0xd0 [ 486.876584][T25582] dump_stack+0x15/0x1b [ 486.876617][T25582] should_fail_ex+0x265/0x280 [ 486.876647][T25582] should_failslab+0x8c/0xb0 [ 486.876672][T25582] __kmalloc_node_noprof+0xbe/0x5c0 [ 486.876694][T25582] ? qdisc_alloc+0x65/0x410 [ 486.876739][T25582] qdisc_alloc+0x65/0x410 [ 486.876769][T25582] ? nla_strcmp+0xc3/0xe0 [ 486.876800][T25582] qdisc_create+0xf5/0x9e0 [ 486.876830][T25582] tc_modify_qdisc+0xf9c/0x1480 [ 486.876966][T25582] ? __mutex_lock_slowpath+0xa/0x10 [ 486.876996][T25582] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 486.877024][T25582] rtnetlink_rcv_msg+0x65a/0x6d0 [ 486.877055][T25582] netlink_rcv_skb+0x123/0x220 [ 486.877119][T25582] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 486.877149][T25582] rtnetlink_rcv+0x1c/0x30 [ 486.877171][T25582] netlink_unicast+0x5c0/0x690 [ 486.877210][T25582] netlink_sendmsg+0x58b/0x6b0 [ 486.877290][T25582] ? __pfx_netlink_sendmsg+0x10/0x10 [ 486.877332][T25582] __sock_sendmsg+0x145/0x180 [ 486.877430][T25582] ____sys_sendmsg+0x31e/0x4a0 [ 486.877468][T25582] ___sys_sendmsg+0x17b/0x1d0 [ 486.877508][T25582] __x64_sys_sendmsg+0xd4/0x160 [ 486.877569][T25582] x64_sys_call+0x17ba/0x3000 [ 486.877604][T25582] do_syscall_64+0xca/0x2b0 [ 486.877647][T25582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.877674][T25582] RIP: 0033:0x7fd55928f749 [ 486.877725][T25582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 486.877747][T25582] RSP: 002b:00007fd557cf7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 486.877801][T25582] RAX: ffffffffffffffda RBX: 00007fd5594e5fa0 RCX: 00007fd55928f749 [ 486.877878][T25582] RDX: 0000000020008010 RSI: 00002000000002c0 RDI: 0000000000000004 [ 486.877905][T25582] RBP: 00007fd557cf7090 R08: 0000000000000000 R09: 0000000000000000 [ 486.877947][T25582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 486.877962][T25582] R13: 00007fd5594e6038 R14: 00007fd5594e5fa0 R15: 00007fff036fc6f8 [ 486.877980][T25582] [ 487.131820][ T4791] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.170756][ T4791] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.201116][ T4791] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.219376][ T4791] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.282385][T25598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.298746][ T29] kauditd_printk_skb: 503 callbacks suppressed [ 487.298759][ T29] audit: type=1400 audit(743.274:53853): avc: denied { setopt } for pid=25596 comm="syz.6.7290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 487.323156][T25598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.409099][ T29] audit: type=1326 audit(743.324:53854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25596 comm="syz.6.7290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f003440f749 code=0x7ffc0000 [ 487.432187][ T29] audit: type=1326 audit(743.324:53855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25596 comm="syz.6.7290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f003440f749 code=0x7ffc0000 [ 487.455245][ T29] audit: type=1326 audit(743.324:53856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25596 comm="syz.6.7290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f003440f749 code=0x7ffc0000 [ 487.478293][ T29] audit: type=1326 audit(743.324:53857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25596 comm="syz.6.7290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f003440f749 code=0x7ffc0000 [ 487.501424][ T29] audit: type=1326 audit(743.324:53858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25596 comm="syz.6.7290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f003440f749 code=0x7ffc0000 [ 487.524390][ T29] audit: type=1326 audit(743.324:53859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25596 comm="syz.6.7290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f003440f749 code=0x7ffc0000 [ 487.547407][ T29] audit: type=1326 audit(743.324:53860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25596 comm="syz.6.7290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f003440f749 code=0x7ffc0000 [ 487.570379][ T29] audit: type=1326 audit(743.324:53861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25596 comm="syz.6.7290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f003440f749 code=0x7ffc0000 [ 487.593393][ T29] audit: type=1326 audit(743.324:53862): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25596 comm="syz.6.7290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f003440f749 code=0x7ffc0000 [ 487.685543][T25604] loop6: detected capacity change from 0 to 512 [ 487.798353][T25604] EXT4-fs error (device loop6): __ext4_fill_super:5553: inode #2: comm syz.6.7293: casefold flag without casefold feature [ 487.853567][T25604] EXT4-fs (loop6): get root inode failed [ 487.859286][T25604] EXT4-fs (loop6): mount failed [ 487.960245][T25611] loop7: detected capacity change from 0 to 512 [ 487.984876][T25611] EXT4-fs error (device loop7): __ext4_fill_super:5553: inode #2: comm syz.7.7296: casefold flag without casefold feature [ 488.018447][T25611] EXT4-fs (loop7): get root inode failed [ 488.024147][T25611] EXT4-fs (loop7): mount failed [ 488.104417][T25616] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7298'. [ 488.136874][T25616] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7298'. [ 488.179910][T25617] 9p: Bad value for 'port' [ 488.337563][T25622] 9p: Bad value for 'port' [ 488.470611][T25628] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7303'. [ 488.567238][T25646] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7310'. [ 488.577002][T25646] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7310'. [ 488.756021][T25663] loop7: detected capacity change from 0 to 512 [ 488.769338][T25666] loop6: detected capacity change from 0 to 512 [ 488.782354][T25663] EXT4-fs warning (device loop7): ext4_xattr_inode_get:560: inode #11: comm syz.7.7318: EA inode hash validation failed [ 488.796678][T25666] EXT4-fs error (device loop6): __ext4_fill_super:5553: inode #2: comm syz.6.7319: casefold flag without casefold feature [ 488.818214][T25663] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #15: comm syz.7.7318: corrupted inode contents [ 488.834267][T25666] EXT4-fs (loop6): get root inode failed [ 488.839953][T25666] EXT4-fs (loop6): mount failed [ 488.868984][T25663] EXT4-fs error (device loop7): ext4_dirty_inode:6502: inode #15: comm syz.7.7318: mark_inode_dirty error [ 488.908522][T25663] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #15: comm syz.7.7318: corrupted inode contents [ 488.963894][T25663] EXT4-fs error (device loop7): ext4_xattr_delete_inode:3000: inode #15: comm syz.7.7318: mark_inode_dirty error [ 488.996287][T25663] EXT4-fs error (device loop7): ext4_xattr_delete_inode:3003: inode #15: comm syz.7.7318: mark inode dirty (error -117) [ 489.025532][T25663] EXT4-fs warning (device loop7): ext4_evict_inode:273: xattr delete (err -117) [ 489.044834][T25663] EXT4-fs (loop7): 1 orphan inode deleted [ 489.055413][T25663] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 489.095823][T25663] netlink: 44 bytes leftover after parsing attributes in process `syz.7.7318'. [ 489.115053][T25663] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 489.122493][T25663] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 489.133819][T25674] 9p: Bad value for 'port' [ 489.140517][T25663] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 489.147948][T25663] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 489.288067][T24765] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.353131][T25682] infiniband syz0: set active [ 489.357960][T25682] infiniband syz0: added bond0 [ 489.383192][T25682] RDS/IB: syz0: added [ 489.393003][T25682] smc: adding ib device syz0 with port count 1 [ 489.405375][T25682] smc: ib device syz0 port 1 has no pnetid [ 489.769451][T25704] loop3: detected capacity change from 0 to 512 [ 489.776939][T25706] SELinux: failed to load policy [ 489.785712][T25704] EXT4-fs error (device loop3): __ext4_fill_super:5553: inode #2: comm syz.3.7334: casefold flag without casefold feature [ 489.813756][T25704] EXT4-fs (loop3): get root inode failed [ 489.819512][T25704] EXT4-fs (loop3): mount failed [ 489.891271][T25711] loop6: detected capacity change from 0 to 512 [ 489.909258][T25711] EXT4-fs warning (device loop6): ext4_xattr_inode_get:560: inode #11: comm syz.6.7337: EA inode hash validation failed [ 489.932656][T25711] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #15: comm syz.6.7337: corrupted inode contents [ 489.965144][T25711] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #15: comm syz.6.7337: mark_inode_dirty error [ 489.997689][T25711] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #15: comm syz.6.7337: corrupted inode contents [ 490.010600][T25717] 9p: Bad value for 'port' [ 490.023655][T25714] loop7: detected capacity change from 0 to 8192 [ 490.027506][T25711] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3000: inode #15: comm syz.6.7337: mark_inode_dirty error [ 490.046866][T25711] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3003: inode #15: comm syz.6.7337: mark inode dirty (error -117) [ 490.052718][T25719] SELinux: failed to load policy [ 490.064587][T25711] EXT4-fs warning (device loop6): ext4_evict_inode:273: xattr delete (err -117) [ 490.079189][T25711] EXT4-fs (loop6): 1 orphan inode deleted [ 490.085903][T25711] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 490.172075][T25725] netlink: 44 bytes leftover after parsing attributes in process `syz.6.7337'. [ 490.216363][T23355] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.295848][T25738] SELinux: policydb version 0 does not match my version range 15-35 [ 490.308977][T25738] SELinux: failed to load policy [ 490.314481][T25735] SELinux: policydb version 0 does not match my version range 15-35 [ 490.323888][T25735] SELinux: failed to load policy [ 490.333464][T25735] loop3: detected capacity change from 0 to 512 [ 490.340703][T25735] EXT4-fs: Ignoring removed oldalloc option [ 490.349619][T25729] loop9: detected capacity change from 0 to 512 [ 490.356847][T25735] EXT4-fs (loop3): 1 truncate cleaned up [ 490.358934][T25729] EXT4-fs: Ignoring removed oldalloc option [ 490.370519][T25735] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 490.378042][T25729] EXT4-fs (loop9): 1 truncate cleaned up [ 490.391598][T25729] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 490.439755][T22265] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.469956][T16817] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.544650][T25755] loop3: detected capacity change from 0 to 512 [ 490.554314][T25755] EXT4-fs error (device loop3): __ext4_fill_super:5553: inode #2: comm syz.3.7352: casefold flag without casefold feature [ 490.567540][T25755] EXT4-fs (loop3): get root inode failed [ 490.573713][T25755] EXT4-fs (loop3): mount failed [ 490.711748][T25762] loop7: detected capacity change from 0 to 512 [ 490.730299][T25762] EXT4-fs warning (device loop7): ext4_xattr_inode_get:560: inode #11: comm syz.7.7355: EA inode hash validation failed [ 490.743668][T25762] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #15: comm syz.7.7355: corrupted inode contents [ 490.755908][T25762] EXT4-fs error (device loop7): ext4_dirty_inode:6502: inode #15: comm syz.7.7355: mark_inode_dirty error [ 490.768755][T25762] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #15: comm syz.7.7355: corrupted inode contents [ 490.780926][T25762] EXT4-fs error (device loop7): ext4_xattr_delete_inode:3000: inode #15: comm syz.7.7355: mark_inode_dirty error [ 490.793203][T25762] EXT4-fs error (device loop7): ext4_xattr_delete_inode:3003: inode #15: comm syz.7.7355: mark inode dirty (error -117) [ 490.806577][T25762] EXT4-fs warning (device loop7): ext4_evict_inode:273: xattr delete (err -117) [ 490.815901][T25762] EXT4-fs (loop7): 1 orphan inode deleted [ 490.822275][T25762] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 490.848036][T25770] 9p: Bad value for 'port' [ 490.886252][T25762] netlink: 44 bytes leftover after parsing attributes in process `syz.7.7355'. [ 490.908050][T24765] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.950400][T25775] SELinux: policydb version 0 does not match my version range 15-35 [ 490.959151][T25775] SELinux: failed to load policy [ 490.967669][T25775] EXT4-fs: Ignoring removed oldalloc option [ 490.975536][T25775] EXT4-fs (loop7): 1 truncate cleaned up [ 490.981892][T25775] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 491.006516][T24765] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.585340][T25800] netlink: zone id is out of range [ 491.590562][T25800] netlink: zone id is out of range [ 491.595751][T25800] netlink: zone id is out of range [ 491.600924][T25800] netlink: zone id is out of range [ 491.623395][T25800] netlink: set zone limit has 8 unknown bytes [ 492.081604][T25821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.116133][T25821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.317574][ T29] kauditd_printk_skb: 812 callbacks suppressed [ 492.317592][ T29] audit: type=1326 audit(748.294:54675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25816 comm="syz.9.7376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52b0b0f749 code=0x7ffc0000 [ 492.347800][ T29] audit: type=1326 audit(748.294:54676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25816 comm="syz.9.7376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f52b0b0f807 code=0x7ffc0000 [ 492.370749][ T29] audit: type=1326 audit(748.294:54677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25816 comm="syz.9.7376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f52b0ac6bdd code=0x7ffc0000 [ 492.393656][ T29] audit: type=1326 audit(748.294:54678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25816 comm="syz.9.7376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f52b0b43e89 code=0x7ffc0000 [ 492.416883][ T29] audit: type=1326 audit(748.294:54679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25816 comm="syz.9.7376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f52b0ac6c47 code=0x7ffc0000 [ 492.439830][ T29] audit: type=1326 audit(748.294:54680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25816 comm="syz.9.7376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52b0b0f749 code=0x7ffc0000 [ 492.462965][ T29] audit: type=1326 audit(748.294:54681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25816 comm="syz.9.7376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52b0b0f749 code=0x7ffc0000 [ 492.486118][ T29] audit: type=1326 audit(748.324:54682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25816 comm="syz.9.7376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52b0b0f749 code=0x7ffc0000 [ 492.509186][ T29] audit: type=1326 audit(748.324:54683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25816 comm="syz.9.7376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f52b0ac6357 code=0x7ffc0000 [ 492.532258][ T29] audit: type=1326 audit(748.324:54684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25816 comm="syz.9.7376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f52b0ac63b6 code=0x7ffc0000 [ 492.751095][T25862] __nla_validate_parse: 3 callbacks suppressed [ 492.751114][T25862] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7395'. [ 492.893565][T25863] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.7387'. [ 492.902990][T25863] netlink: zone id is out of range [ 492.908146][T25863] netlink: zone id is out of range [ 492.913482][T25863] netlink: zone id is out of range [ 492.918624][T25863] netlink: zone id is out of range [ 492.939197][T25863] netlink: set zone limit has 8 unknown bytes [ 493.183041][T25871] SELinux: failed to load policy [ 493.542930][T25886] siw: device registration error -23 [ 493.751761][T25891] set_capacity_and_notify: 2 callbacks suppressed [ 493.751776][T25891] loop7: detected capacity change from 0 to 512 [ 493.781889][T25891] EXT4-fs warning (device loop7): ext4_xattr_inode_get:560: inode #11: comm syz.7.7407: EA inode hash validation failed [ 493.843565][T25891] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #15: comm syz.7.7407: corrupted inode contents [ 493.900932][T25891] EXT4-fs error (device loop7): ext4_dirty_inode:6502: inode #15: comm syz.7.7407: mark_inode_dirty error [ 493.934198][T25891] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #15: comm syz.7.7407: corrupted inode contents [ 493.981290][T25896] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7408'. [ 493.990245][T25896] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7408'. [ 493.999786][T25891] EXT4-fs error (device loop7): ext4_xattr_delete_inode:3000: inode #15: comm syz.7.7407: mark_inode_dirty error [ 494.012836][T25891] EXT4-fs error (device loop7): ext4_xattr_delete_inode:3003: inode #15: comm syz.7.7407: mark inode dirty (error -117) [ 494.038359][T25891] EXT4-fs warning (device loop7): ext4_evict_inode:273: xattr delete (err -117) [ 494.073088][T25891] EXT4-fs (loop7): 1 orphan inode deleted [ 494.275718][T25891] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 494.343912][T25891] netlink: 44 bytes leftover after parsing attributes in process `syz.7.7407'. [ 494.381803][T24765] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.416226][T25922] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.490596][T25922] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.568606][T25922] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.608725][T25950] loop6: detected capacity change from 0 to 512 [ 494.660323][T25950] EXT4-fs warning (device loop6): ext4_xattr_inode_get:560: inode #11: comm syz.6.7427: EA inode hash validation failed [ 494.680970][T25922] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.706735][T25960] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7430'. [ 494.726927][T25950] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #15: comm syz.6.7427: corrupted inode contents [ 494.763475][T25960] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7430'. [ 494.777848][T25950] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #15: comm syz.6.7427: mark_inode_dirty error [ 494.806446][T25950] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #15: comm syz.6.7427: corrupted inode contents [ 494.818468][ T4804] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.834401][T25950] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3000: inode #15: comm syz.6.7427: mark_inode_dirty error [ 494.859633][T25950] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3003: inode #15: comm syz.6.7427: mark inode dirty (error -117) [ 494.889362][ T4804] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.898426][T25950] EXT4-fs warning (device loop6): ext4_evict_inode:273: xattr delete (err -117) [ 494.910442][ T4804] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.934468][T25950] EXT4-fs (loop6): 1 orphan inode deleted [ 494.958550][T25950] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 494.964277][ T4804] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.047655][T25911] chnl_net:caif_netlink_parms(): no params data found [ 495.085830][T25982] netlink: 44 bytes leftover after parsing attributes in process `syz.6.7427'. [ 495.147409][T23355] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.289777][T25990] siw: device registration error -23 [ 495.603186][T25994] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7442'. [ 495.627276][T25996] team0: Device gtp0 is of different type [ 495.638490][T25994] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7442'. [ 495.648251][T25911] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.655416][T25911] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.664000][T25911] bridge_slave_0: entered allmulticast mode [ 495.670803][T25911] bridge_slave_0: entered promiscuous mode [ 495.682233][T25997] loop7: detected capacity change from 0 to 128 [ 495.707327][T25911] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.714546][T25911] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.721915][T25911] bridge_slave_1: entered allmulticast mode [ 495.729039][T25911] bridge_slave_1: entered promiscuous mode [ 495.752894][T25911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 495.764450][T26000] loop3: detected capacity change from 0 to 512 [ 495.773660][T25911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 495.783257][T26000] EXT4-fs error (device loop3): __ext4_fill_super:5553: inode #2: comm syz.3.7444: casefold flag without casefold feature [ 495.800152][T26000] EXT4-fs (loop3): get root inode failed [ 495.806082][T26000] EXT4-fs (loop3): mount failed [ 495.829482][ T4800] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.856730][T25911] team0: Port device team_slave_0 added [ 495.863971][T25911] team0: Port device team_slave_1 added [ 495.886747][T25911] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 495.893779][T25911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 495.919890][T25911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 495.968874][T25911] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 495.975982][T25911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 496.002041][T25911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 496.022185][ T4800] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.069227][T26018] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.072949][T26022] 9p: Bad value for 'port' [ 496.106735][ T4800] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.143718][T25911] hsr_slave_0: entered promiscuous mode [ 496.176601][T25911] hsr_slave_1: entered promiscuous mode [ 496.185539][T25911] debugfs: 'hsr0' already exists in 'hsr' [ 496.191305][T25911] Cannot create hsr debugfs directory [ 496.198178][T26018] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.230750][ T4800] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.267322][T26018] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.359064][T26018] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.370720][T26041] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.400268][ T4800] bridge_slave_1: left allmulticast mode [ 496.406638][ T4800] bridge_slave_1: left promiscuous mode [ 496.412408][ T4800] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.424685][ T4800] bridge_slave_0: left allmulticast mode [ 496.430508][ T4800] bridge_slave_0: left promiscuous mode [ 496.436212][ T4800] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.527315][ T4800] bond1 (unregistering): (slave geneve2): Releasing active interface [ 496.907148][ T4804] smc: removing ib device syz0 [ 496.912436][ T4800] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 496.922415][ T4800] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 496.932072][ T4800] bond0 (unregistering): Released all slaves [ 496.940965][ T4800] bond1 (unregistering): Released all slaves [ 496.963955][T26041] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.001606][ T2683] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.019779][ T2683] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.046971][T26041] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.071711][ T4795] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.086551][ T4795] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.127605][T26041] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.155860][T26055] loop6: detected capacity change from 0 to 512 [ 497.168106][T26055] EXT4-fs error (device loop6): __ext4_fill_super:5553: inode #2: comm syz.6.7461: casefold flag without casefold feature [ 497.193488][T26057] loop7: detected capacity change from 0 to 1024 [ 497.214343][T26055] EXT4-fs (loop6): get root inode failed [ 497.220138][T26055] EXT4-fs (loop6): mount failed [ 497.228345][T26057] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.7460: bad orphan inode 134217728 [ 497.264734][T26057] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 497.295287][T26057] FAULT_INJECTION: forcing a failure. [ 497.295287][T26057] name failslab, interval 1, probability 0, space 0, times 0 [ 497.308228][T26057] CPU: 1 UID: 0 PID: 26057 Comm: syz.7.7460 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 497.308285][T26057] Tainted: [W]=WARN [ 497.308293][T26057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 497.308308][T26057] Call Trace: [ 497.308315][T26057] [ 497.308324][T26057] __dump_stack+0x1d/0x30 [ 497.308350][T26057] dump_stack_lvl+0x95/0xd0 [ 497.308424][T26057] dump_stack+0x15/0x1b [ 497.308449][T26057] should_fail_ex+0x265/0x280 [ 497.308500][T26057] should_failslab+0x8c/0xb0 [ 497.308518][T26057] kmem_cache_alloc_noprof+0x69/0x4b0 [ 497.308539][T26057] ? skb_clone+0x151/0x1f0 [ 497.308573][T26057] skb_clone+0x151/0x1f0 [ 497.308687][T26057] __netlink_deliver_tap+0x2c9/0x500 [ 497.308731][T26057] netlink_unicast+0x66b/0x690 [ 497.308822][T26057] netlink_sendmsg+0x58b/0x6b0 [ 497.308864][T26057] ? __pfx_netlink_sendmsg+0x10/0x10 [ 497.308900][T26057] __sock_sendmsg+0x145/0x180 [ 497.308918][T26057] ____sys_sendmsg+0x31e/0x4a0 [ 497.308949][T26057] ___sys_sendmsg+0x17b/0x1d0 [ 497.309001][T26057] __x64_sys_sendmsg+0xd4/0x160 [ 497.309040][T26057] x64_sys_call+0x17ba/0x3000 [ 497.309074][T26057] do_syscall_64+0xca/0x2b0 [ 497.309105][T26057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.309174][T26057] RIP: 0033:0x7fd55928f749 [ 497.309193][T26057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 497.309245][T26057] RSP: 002b:00007fd557cf7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 497.309268][T26057] RAX: ffffffffffffffda RBX: 00007fd5594e5fa0 RCX: 00007fd55928f749 [ 497.309283][T26057] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 000000000000000d [ 497.309298][T26057] RBP: 00007fd557cf7090 R08: 0000000000000000 R09: 0000000000000000 [ 497.309314][T26057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 497.309326][T26057] R13: 00007fd5594e6038 R14: 00007fd5594e5fa0 R15: 00007fff036fc6f8 [ 497.309408][T26057] [ 497.402523][T25911] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 497.523231][T25911] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 497.532495][T25911] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 497.541354][T25911] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 497.560204][ T4800] veth1_macvtap: left promiscuous mode [ 497.576763][T26068] 9p: Bad value for 'port' [ 497.581366][ T4800] veth0_macvtap: left promiscuous mode [ 497.589998][T24765] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.594342][ T4800] veth1_vlan: left promiscuous mode [ 497.604457][ T4800] veth0_vlan: left promiscuous mode [ 497.774129][ T4800] team0 (unregistering): Port device team_slave_1 removed [ 497.786507][ T4800] team0 (unregistering): Port device team_slave_0 removed [ 497.906882][T26075] __nla_validate_parse: 3 callbacks suppressed [ 497.906970][T26075] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.7464'. [ 497.922377][T26075] netlink: zone id is out of range [ 497.927525][T26075] netlink: zone id is out of range [ 497.932774][T26075] netlink: zone id is out of range [ 497.937916][T26075] netlink: zone id is out of range [ 497.959296][T26075] netlink: set zone limit has 8 unknown bytes [ 498.058481][T25911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 498.124915][T25911] 8021q: adding VLAN 0 to HW filter on device team0 [ 498.142891][ T1389] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.150001][ T1389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 498.185015][T26081] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7467'. [ 498.199872][ T2683] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.206993][ T2683] bridge0: port 2(bridge_slave_1) entered forwarding state [ 498.249841][T25911] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 498.260243][T25911] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 498.368156][T26090] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7468'. [ 498.387738][T25911] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 498.674071][T26100] loop6: detected capacity change from 0 to 512 [ 498.691006][T26100] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 498.723327][T25911] veth0_vlan: entered promiscuous mode [ 498.736660][T26100] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #2: block 9: comm syz.6.7471: lblock 0 mapped to illegal pblock 9 (length 1) [ 498.754604][T25911] veth1_vlan: entered promiscuous mode [ 498.777640][T26100] EXT4-fs (loop6): mount failed [ 498.792820][T25911] veth0_macvtap: entered promiscuous mode [ 498.816788][T25911] veth1_macvtap: entered promiscuous mode [ 498.839929][T25911] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 498.851633][ T29] kauditd_printk_skb: 192 callbacks suppressed [ 498.851652][ T29] audit: type=1326 audit(754.824:54877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26121 comm="syz.6.7477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f003440f749 code=0x7ffc0000 [ 498.855346][T25911] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 498.879178][ T29] audit: type=1326 audit(754.824:54878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26121 comm="syz.6.7477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f003440f749 code=0x7ffc0000 [ 498.911224][ T29] audit: type=1326 audit(754.834:54879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26121 comm="syz.6.7477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f003440f749 code=0x7ffc0000 [ 498.924049][ T2683] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.934225][ T29] audit: type=1326 audit(754.834:54880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26121 comm="syz.6.7477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f003440f749 code=0x7ffc0000 [ 499.005989][ T2683] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.042588][ T2683] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.056370][ T29] audit: type=1326 audit(754.854:54881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26121 comm="syz.6.7477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f003440f749 code=0x7ffc0000 [ 499.071988][ T2683] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.079588][ T29] audit: type=1326 audit(754.854:54882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26121 comm="syz.6.7477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f003440f749 code=0x7ffc0000 [ 499.111089][ T29] audit: type=1326 audit(754.854:54883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26121 comm="syz.6.7477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f003440f749 code=0x7ffc0000 [ 499.134110][ T29] audit: type=1326 audit(754.944:54884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26121 comm="syz.6.7477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f003440f749 code=0x7ffc0000 [ 499.157135][ T29] audit: type=1326 audit(754.944:54885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26121 comm="syz.6.7477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f003440f749 code=0x7ffc0000 [ 499.201394][ T4800] Bluetooth: hci0: Frame reassembly failed (-84) [ 499.222939][T26133] loop9: detected capacity change from 0 to 1024 [ 499.240744][T26133] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 499.359947][ T29] audit: type=1326 audit(755.334:54886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26154 comm="syz.1.7489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa411c0f749 code=0x7ffc0000 [ 499.517650][ T2683] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.548772][ T2683] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.581012][ T2683] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.636706][ T2683] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.990678][T26191] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.7500'. [ 500.000019][T26191] netlink: zone id is out of range [ 500.005217][T26191] netlink: zone id is out of range [ 500.010452][T26191] netlink: zone id is out of range [ 500.015634][T26191] netlink: zone id is out of range [ 500.038995][T26191] netlink: set zone limit has 8 unknown bytes [ 500.409416][T26196] netlink: 96 bytes leftover after parsing attributes in process `syz.7.7506'. [ 500.445943][T26198] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.461784][T26200] loop7: detected capacity change from 0 to 512 [ 500.470788][T26200] EXT4-fs error (device loop7): __ext4_fill_super:5553: inode #2: comm syz.7.7508: casefold flag without casefold feature [ 500.484590][T26200] EXT4-fs (loop7): get root inode failed [ 500.490350][T26200] EXT4-fs (loop7): mount failed [ 500.527242][T26198] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.637425][T26198] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.655783][T26215] 9p: Bad value for 'port' [ 500.707366][T26198] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.781968][T26227] loop3: detected capacity change from 0 to 1024 [ 500.806316][T26227] EXT4-fs: Ignoring removed bh option [ 500.838425][T26227] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 500.938459][T26234] loop7: detected capacity change from 0 to 512 [ 500.945114][T26234] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 500.955927][T26234] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #2: block 9: comm syz.7.7520: lblock 0 mapped to illegal pblock 9 (length 1) [ 500.970375][T26234] EXT4-fs (loop7): mount failed [ 501.205351][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 501.205640][ T3519] ================================================================== [ 501.219668][ T3519] BUG: KCSAN: data-race in data_alloc / prb_reserve [ 501.226272][ T3519] [ 501.228621][ T3519] write to 0xffffffff86869478 of 8 bytes by task 44 on cpu 0: [ 501.236075][ T3519] data_alloc+0x31c/0x390 [ 501.240439][ T3519] prb_reserve+0x8d7/0xad0 [ 501.244875][ T3519] vprintk_store+0x53c/0x830 [ 501.249500][ T3519] vprintk_emit+0x15a/0x5c0 [ 501.254042][ T3519] vprintk_default+0x26/0x30 [ 501.258635][ T3519] vprintk+0x1d/0x30 [ 501.262538][ T3519] _printk+0x79/0xa0 [ 501.266593][ T3519] bt_err+0x9d/0xd0 [ 501.270439][ T3519] hci_dev_open_sync+0xfa4/0x2290 [ 501.275504][ T3519] hci_power_on+0xef/0x390 [ 501.279934][ T3519] process_scheduled_works+0x4ce/0x9d0 [ 501.285409][ T3519] worker_thread+0x582/0x770 [ 501.290014][ T3519] kthread+0x489/0x510 [ 501.294097][ T3519] ret_from_fork+0x149/0x290 [ 501.298789][ T3519] ret_from_fork_asm+0x1a/0x30 [ 501.303573][ T3519] [ 501.305906][ T3519] read to 0xffffffff86869478 of 8 bytes by task 3519 on cpu 1: [ 501.313461][ T3519] prb_reserve+0x207/0xad0 [ 501.317903][ T3519] vprintk_store+0x53c/0x830 [ 501.322613][ T3519] vprintk_emit+0x15a/0x5c0 [ 501.327236][ T3519] vprintk_default+0x26/0x30 [ 501.331849][ T3519] vprintk+0x1d/0x30 [ 501.335779][ T3519] _printk+0x79/0xa0 [ 501.339686][ T3519] bt_err+0x9d/0xd0 [ 501.343522][ T3519] hci_cmd_timeout+0x97/0x140 [ 501.348211][ T3519] process_scheduled_works+0x4ce/0x9d0 [ 501.353692][ T3519] worker_thread+0x582/0x770 [ 501.358297][ T3519] kthread+0x489/0x510 [ 501.362382][ T3519] ret_from_fork+0x149/0x290 [ 501.366993][ T3519] ret_from_fork_asm+0x1a/0x30 [ 501.371786][ T3519] [ 501.374119][ T3519] value changed: 0x00000000000653f0 -> 0x000000000010b320 [ 501.381230][ T3519] [ 501.383563][ T3519] Reported by Kernel Concurrency Sanitizer on: [ 501.389722][ T3519] CPU: 1 UID: 0 PID: 3519 Comm: kworker/u9:1 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 501.401197][ T3519] Tainted: [W]=WARN [ 501.405007][ T3519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 501.415071][ T3519] Workqueue: hci0 hci_cmd_timeout [ 501.420107][ T3519] ================================================================== [ 501.205351][ T3519] Bluetooth: hci0: command 0x1003 tx timeout [ 501.544052][T22265] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.011129][ T4790] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.022664][ T4790] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.034130][ T4790] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.045674][ T4790] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.872697][T25911] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.