last executing test programs: 5m7.376183125s ago: executing program 4 (id=569): r0 = socket(0x1e, 0x4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x401, 0xfffffffe, 0x0, 0xffffffff}, 0x10) close(r0) 5m7.353145676s ago: executing program 4 (id=570): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000001c0)="34c9387f61fdcb64ad861b80cfbd9d0a3cafc9746534efdfcbcd62fa582e8113cd8efb01beb860fb0df62dac2ce091b9b00cc91fc19e44"}, {&(0x7f0000000300)="f45096d4e284bd49733c6e0041f6aa66d34475d1cd7e0302f184f397f79ae778b310cf9715ea4d7bdc189c877735e5f009dd1dd653818ab7dbc1feba966c9223910d9082dc47ff8e4ff5d7493f686c271d0df9d1f6011b0aab325675415cb84a6bf2470b9a4ca9f4cc3520c9e41db54682c5effb7d9ce7817643618e9180e4f8c627c71c586a6f0659f32edab4c048a6c5e038eefdbf706a12c89d9a788de80da9384437cce97b2479ddc536df993f37279fb22d4663a12b4487346497587c186ce4e0b3b0b46a7a3b1c609c872682688c04a163492a322edb355bdc7678cdd8c2adaed4c37bf612b6214a7fe247333ad1"}, {&(0x7f0000000400)="326b341acae5fe8dc65a1f5d1de0b6992b69e9db699e9beb3844fb84a94757452c17a075f55fba300798a2d37a606a51f7721b231361970c1a5b17d76b2104307eb79fc2592c49b877d3e468429b0ecb4f666c61a7eebf5a86825e704099930d2b07ccf5806eb3f0bf603521852aed13a94e902a0f3fade0820b306fa9b3d7fe5532e3e6ee406d2ff62b1f94aa8703c109fbde4269ecf204ed4133d5f5daac1e309856ea996ac92f0e1a21a935cddb131d8e6616d0d9ca2f61d8321b5673cef525f2088a4e8f7ae9bb02489600a23399d667aaaa11e3ed489c97e25c31ac84dc9f8bf1328cd668626ae4c39b046672bcbbc3bd49"}, {&(0x7f0000000500)="3f1bad8be2b9accdb7689cedc52c5a875130eb1d9d115a1261bcaaabd3b64b53473683703c8a1ff58d9f936af3cbe18d84c0e8df2b34b7836d7c61e0d8f4565d8694b51fbd534a1e085b3421e498789587ece6287ad2c45086434c459bc417e5a9b385c911156f7ba08500733680698c0397027353c0d66e7692e9513f31ef6ef5e769c60966fafcbb92ad5082af03d7a47a6a84e480784bece9a3aebfff8bc7e464db1b2972c75e574393b3ba0468a788707f65c4e2855c89653027"}, {&(0x7f00000005c0)="b408977b423fb72e9fd21438991248274f0c8c19229d0d9d7f6942cfe7d4bf6f595f067049ca5cef9eb135bee920ed73717ec8808fa883f8c8dd470f924a25bab11d22b28a887c3c556f7c2b2dcf11b42834cd03bb341afee399a1e4c167a3f29167ea6f22443cc38758c55dd5ef5aeab0"}, {&(0x7f0000000700)="9bdd216bd3a5420a0da60f2b7d15ab42516c30d51acd98af90bb0d5033d3fe618de16b021ee1835246d806e2f778ce2020fa001cb883f177661081c2a5ac03d2e2e7f2cb08a70a6edbdcd41c55c54893871d9b181b9b8d325e469fec1f768e893d416ad04cf32daed063e34710f2009242f00685a8c9a4886607ec48433eb749445ec58193aebdb0f45ba8c3c32d0bcfefa55e769287903225a71393627368cd9cc76aa5424820a563a852f607d217bd89cc30f9f6db6b42"}, {&(0x7f0000000940)="d49b26b6d5152c9e4f8a2604f35260b1a8ad1300520de0775ec0fc5684823017f9769df92bb5eeeabf37445cc056584f72fee242fea9dce48a0d001e11a8e8f4098ca96e0ff71ddc4c69330622e7705c5ec06f08e7d248334c82810ecc89a6477331333c9a7c778de8f96ede55d3a291d69055f8a749ca8f4e818943478d39ba877e711873338e332763ecbd3254127d742d9c4b1c5bd409db2f740f"}, {&(0x7f00000007c0)="59a73b7562a7be62a115ae28bebbd41f8597fc6d0a539cfc72b42bad47918b88d9a8284f9369dc79cefdd8290d15b4560cec15ea242a1fd1f2f6c4805b5acd412118ae30e675c434c65a307f22b07bcdec2571e2715797828849dd2fd703c26660d5f6712812ac299b823c9ba10a449cd2857749e6b560dd11022ba55076bbb1b7f43c60cd04bbb468e7de25c03909deb97c299d42d99c69f6823a798314eff52a64ab97f58a26f8e870a42f9d2caf275136d8747e2e7e507de3bdb3fd63128621921ca990f55b44c6fccd122a91c551838e82c37e62552d94b09b84f75a9228110e02be240a5b71"}], 0x0, 0x0, 0x0, 0x4004001}}], 0x4000000000001dc, 0x8881) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setgroups(0x0, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r7, 0x0, 0x0) modify_ldt$write(0x1, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) ioctl$TCSETS(r8, 0x40045431, 0x0) syz_open_pts(r8, 0x0) 5m6.348261685s ago: executing program 4 (id=591): r0 = socket(0x1e, 0x4, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x401, 0xfffffffe, 0x0, 0xffffffff}, 0x10) close(r0) 5m6.347813555s ago: executing program 4 (id=592): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = socket(0x1, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r2}, 0x10) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) r4 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='cpu>00\t&&') sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f0000000080)=@in={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000140)="359cb65e965807db42bea80ab0ba4b3665e382175963d4636a4ce7133e240798dce10df46db7596c810638da88ca1fae0217cbe512202cbde50361bd1d4af956a208734f87b7c225cf61c96d0e0159d2e1fa3695217be4c1e8533e40c9a6f938241c0e8890f6e1b6ffcbce", 0x6b}], 0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="3000006f8bf5b3cb8a9b00000000008400000001000000000000020c0004000100"/44, @ANYRES32=0x0], 0x30}], 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000040)={'bond0\x00', @ifru_settings={0x6, 0x8, @sync=0x0}}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000004c0)='kfree\x00', r5, 0x0, 0x8000006}, 0x18) lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f0000000980)='system_u:object_r:netutils_exec_t:s0\x00', 0xf, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) 5m5.680990878s ago: executing program 4 (id=609): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000004100)=@newtfilter={0x468, 0x28, 0x575ac7824d421509, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r4, {0xa}, {0x6}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x43c, 0x2, [@TCA_BPF_ACT={0x438, 0x1, [@m_police={0x434, 0x14, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1e71fdfe, 0x3, 0x5, 0x50, 0x9, 0x4, 0x1, 0x5d, 0xffff, 0x7ff, 0x0, 0x9, 0x200, 0xa9, 0x9, 0x1, 0x5, 0xfffffffe, 0x100, 0x8, 0x2, 0x15, 0xffff, 0x5, 0x0, 0x2, 0xe3ce, 0x1, 0x2, 0x7, 0x2, 0x80000000, 0x1, 0xe870, 0x5, 0x9, 0xfffffffd, 0x6, 0x0, 0xb, 0x80000000, 0x1, 0xfca5, 0x6, 0x8, 0xfffb, 0x4a8, 0x80000001, 0x4, 0x3, 0x5, 0x10000, 0x8, 0x3, 0xc, 0x5, 0x7, 0x80000000, 0x3, 0x800, 0x5, 0xa, 0x7, 0x3, 0x0, 0x7, 0xff, 0xd, 0x3, 0x7ff, 0x7fffffff, 0x3, 0xb18, 0x3, 0x3, 0x1000, 0x3, 0xfffffff7, 0x402, 0x6, 0x3, 0x400, 0xffffffff, 0x8001, 0x9, 0x7, 0x5, 0x5, 0x47c77d11, 0x0, 0xffff, 0x13ab59f8, 0x7ff, 0x7, 0x5, 0xc8874fe6, 0x9, 0x0, 0x4, 0x2, 0x0, 0x8, 0x3, 0x1, 0x5, 0x5, 0x18f, 0x5, 0x10, 0x7, 0xf73b, 0x2, 0x6, 0xf, 0x8, 0x85, 0x5, 0x5, 0x1, 0xf8, 0x3, 0x7, 0x0, 0xf, 0x3, 0x0, 0x2, 0x7, 0x0, 0x88, 0xb, 0x75ad9917, 0xce0, 0x5, 0x0, 0x0, 0x8000, 0x8, 0x838, 0x8, 0x7, 0x5, 0x8, 0x5, 0x2, 0x9, 0x200, 0xf4d, 0x5, 0xa5e6, 0xffff8001, 0x7, 0x8, 0x3, 0x8001, 0x3, 0x6, 0x5, 0x7f, 0xfffffffa, 0x2, 0x3ff, 0x7f4a, 0x0, 0x2, 0x9, 0x66, 0x5, 0x2, 0x0, 0xe, 0xb, 0x5, 0x1, 0x0, 0xf52, 0x8, 0x9, 0x3ff, 0x7, 0x11f, 0xf47, 0x2, 0x87, 0xece, 0x7, 0xffffffff, 0x3, 0x101, 0xf090, 0xa, 0x9, 0x6, 0x6, 0x80, 0x5, 0x3, 0x2, 0x7, 0xffffffff, 0x6, 0x8, 0x8, 0x4, 0x51ed, 0xe0, 0x7, 0x5, 0x7, 0x800000, 0x1, 0x0, 0x9, 0x6, 0xd, 0xfe44, 0x5, 0x6, 0x9, 0x5, 0x2, 0x0, 0x8, 0x2, 0xfffffffd, 0x0, 0x10001, 0x3, 0x7, 0x3ff, 0x4000000, 0x89, 0x80, 0x200, 0xd0bb, 0xfffffff9, 0x9, 0xc, 0x4, 0x4, 0x4, 0x5e, 0xf1, 0x7, 0xffffe87c, 0xc0, 0x10, 0x0, 0x9, 0x2, 0x9, 0x0, 0x0, 0x400, 0x6, 0x6]}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x468}}, 0x40) 5m5.637642519s ago: executing program 4 (id=613): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000180)={0x0, @adiantum, 0x0, @desc1}) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0000200, @private=0xffffffff}, 0x10) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) close(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@private0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000000080)=0xe8) mount$9p_fd(0x0, &(0x7f0000000c40)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@directio}, {@cache_fscache}, {@noextend}, {@version_L}, {@ignoreqv}, {@afid={'afid', 0x3d, 0x7}}, {@directio}], [{@uid_lt={'uid<', r3}}, {@euid_gt={'euid>', r3}}, {@smackfsroot={'smackfsroot', 0x3d, '{['}}]}}) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0xf1c38fa000000000}, 0x18) sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) 4m50.492807134s ago: executing program 32 (id=613): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000180)={0x0, @adiantum, 0x0, @desc1}) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0000200, @private=0xffffffff}, 0x10) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) close(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@private0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000000080)=0xe8) mount$9p_fd(0x0, &(0x7f0000000c40)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@directio}, {@cache_fscache}, {@noextend}, {@version_L}, {@ignoreqv}, {@afid={'afid', 0x3d, 0x7}}, {@directio}], [{@uid_lt={'uid<', r3}}, {@euid_gt={'euid>', r3}}, {@smackfsroot={'smackfsroot', 0x3d, '{['}}]}}) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0xf1c38fa000000000}, 0x18) sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) 3m35.374567077s ago: executing program 5 (id=2350): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb8500"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x18) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x10) 3m35.374290777s ago: executing program 5 (id=2351): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') ioctl$BTRFS_IOC_RM_DEV(r0, 0x8004b709, 0x0) 3m35.330579898s ago: executing program 5 (id=2352): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) getsockopt$bt_hci(r1, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) r2 = socket(0x10, 0x803, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd8, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0xe4ff, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93, 0xfc}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0xfffffffc}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5, 0x0, 0x0, 0x0, 0x4000000}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffd}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff}, {}, {}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x3}, {}, {0x20, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1, 0x3}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x15, 0x0, 0x48510}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x3ff, 0x40000000}, {}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x400000}, {0x4, 0x0, 0x200}, {}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffff}, {}, {0x0, 0x0, 0x6, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x2, 0x0, 0x20000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x2e9c, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000, 0x0, 0xfffffffc}, {0x0, 0x80000000, 0x0, 0x7dff800}], [{}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x5}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x1}, {}, {0x5}, {}, {0x3}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {0x3}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {0x0, 0x1}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {0x2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000800)='kfree_skb\x00', r9}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r10}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$tipc(r11, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, 0x0}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r6, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r7], 0x3c}}, 0x0) 3m35.21269606s ago: executing program 5 (id=2357): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES64=r0, @ANYRES8=r0], 0x50) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000200), 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) fdatasync(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff}) rt_sigaction(0x3c, 0x0, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) 3m34.926490815s ago: executing program 5 (id=2361): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x90, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x18) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x2) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) 3m34.851427616s ago: executing program 5 (id=2363): syslog(0x2, &(0x7f0000000000)=""/41, 0x29) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/disk', 0x141a82, 0x33) r0 = io_uring_setup(0x5bc9, &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x0}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001400)=[{0xffffffffffffffff, 0x2}], &(0x7f0000001440), 0x1}, 0x20) symlink(0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x1) syz_usb_disconnect(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) syz_emit_ethernet(0x176, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaa48847000000000000000000000000603f599001340600fe8000000000000000000000000000aafe8000000000000000000000000000000000000000000000c204000000000000000c000000000000fc02000000000000000000000000000000000000000000000000ffff00000000fe800000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000fc00"/190, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000907800006c3e4af6e95497a4e1f23137ae5d9ab0d6a6a3ff1ff52b15b109af0f93abe7bddfe72723968479f91c26bda6d7d589fb8cb68c4f8760051117d27ab8434eb2818254ab55825a80ba277e953c42c3e3a34d6f1998abd85935442e96e25dc77ffb0469578ffae16aa69caf18e96b08085370c0c242147969cf393604407755c55c4b539a2e36241dc73a3d65b8b2585660c1365e7ec6c7a536a08d21e53aa4e60cad0bd8eb60a00943"], 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r3}}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) write$P9_RLERRORu(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) memfd_secret(0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r6}, 0x10) ioprio_get$pid(0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f00000008c0)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x0, 0xb00, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc}]}], {0x14, 0x10}}, 0xa0}}, 0x0) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000800000003003c02ffffffef3501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ee2d010203010902"], 0x0) ioctl$EVIOCRMFF(r1, 0x40045506, &(0x7f0000000200)) 3m19.79038775s ago: executing program 33 (id=2363): syslog(0x2, &(0x7f0000000000)=""/41, 0x29) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/disk', 0x141a82, 0x33) r0 = io_uring_setup(0x5bc9, &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x0}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001400)=[{0xffffffffffffffff, 0x2}], &(0x7f0000001440), 0x1}, 0x20) symlink(0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x1) syz_usb_disconnect(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) syz_emit_ethernet(0x176, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaa48847000000000000000000000000603f599001340600fe8000000000000000000000000000aafe8000000000000000000000000000000000000000000000c204000000000000000c000000000000fc02000000000000000000000000000000000000000000000000ffff00000000fe800000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000fc00"/190, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000907800006c3e4af6e95497a4e1f23137ae5d9ab0d6a6a3ff1ff52b15b109af0f93abe7bddfe72723968479f91c26bda6d7d589fb8cb68c4f8760051117d27ab8434eb2818254ab55825a80ba277e953c42c3e3a34d6f1998abd85935442e96e25dc77ffb0469578ffae16aa69caf18e96b08085370c0c242147969cf393604407755c55c4b539a2e36241dc73a3d65b8b2585660c1365e7ec6c7a536a08d21e53aa4e60cad0bd8eb60a00943"], 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r3}}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) write$P9_RLERRORu(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) memfd_secret(0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r6}, 0x10) ioprio_get$pid(0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f00000008c0)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x0, 0xb00, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc}]}], {0x14, 0x10}}, 0xa0}}, 0x0) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000800000003003c02ffffffef3501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ee2d010203010902"], 0x0) ioctl$EVIOCRMFF(r1, 0x40045506, &(0x7f0000000200)) 2m17.004807763s ago: executing program 2 (id=3695): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x20, &(0x7f0000000280)={&(0x7f0000000040)=""/109, 0x6d, 0x0, &(0x7f00000004c0)=""/198, 0xc6}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = fsopen(&(0x7f0000000040)='tracefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x8, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}], {0x14}}, 0x64}}, 0x0) 2m16.973385123s ago: executing program 2 (id=3696): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffff5d, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x3e}, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x800, 0x0, 0x6, 0x10000000000}}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x3}}, 0xe8) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1028}}, 0x20000050) 2m16.944894354s ago: executing program 2 (id=3699): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prlimit64(0x0, 0xa, 0x0, &(0x7f0000000440)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xf7}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) 2m16.776310097s ago: executing program 2 (id=3703): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400)={[{@sysvgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r1 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100)=0x0, &(0x7f00000007c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd=r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="1a", 0x1}], 0x1}) io_uring_enter(r1, 0x4d10, 0x2, 0x3, 0x0, 0x0) 2m16.702110928s ago: executing program 2 (id=3705): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x15c, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x148, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xb0, 0x3, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0xea3, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x15c}}, 0x0) 2m15.825487456s ago: executing program 2 (id=3724): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000160a0145f600000000000000020000010900020073797a32000000000900010073797a300000000010000380"], 0x64}}, 0x4000000) syz_emit_ethernet(0x66, &(0x7f0000000a80)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0xff, @local, @mcast2, {[], @dest_unreach={0x1, 0x3, 0x0, 0x4, '\x00', {0x0, 0x6, "d85b28", 0xd, 0x6, 0x0, @empty, @loopback}}}}}}}, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b700000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=rdma,port=0x001000']) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) signalfd(0xffffffffffffffff, &(0x7f0000000300)={[0x3]}, 0x8) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa8, 0x0, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x800}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xfffffffc}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6558}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x890d}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xfffffffe}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4080000}, 0x4000) 2m15.807151366s ago: executing program 34 (id=3724): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000160a0145f600000000000000020000010900020073797a32000000000900010073797a300000000010000380"], 0x64}}, 0x4000000) syz_emit_ethernet(0x66, &(0x7f0000000a80)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0xff, @local, @mcast2, {[], @dest_unreach={0x1, 0x3, 0x0, 0x4, '\x00', {0x0, 0x6, "d85b28", 0xd, 0x6, 0x0, @empty, @loopback}}}}}}}, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b700000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=rdma,port=0x001000']) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) signalfd(0xffffffffffffffff, &(0x7f0000000300)={[0x3]}, 0x8) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa8, 0x0, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x800}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xfffffffc}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6558}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x890d}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xfffffffe}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4080000}, 0x4000) 2.477696392s ago: executing program 1 (id=5997): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRESDEC=0x0, @ANYRES32=r0, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) chdir(&(0x7f0000000480)='./cgroup\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRESDEC=0x0, @ANYBLOB="be7096299d57727a45001519c73e8569fe1f55067850626bed968539e3e01f85c46e4029ffa4bb1258259adb9ffeea1ffd6593240fcbd84f8e6bf441dcdd7109b900930b15bb93094b3bae", @ANYRESOCT=r1, @ANYRES16, @ANYRESOCT=r2], 0x48) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xa0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) kexec_load(0x5, 0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x62, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x2424, 0x0, 0x800000, 0x0, 0x2, 0x200, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0x1, 0xffffffffffffffff, 0x1) readv(0xffffffffffffffff, 0x0, 0x0) poll(0x0, 0x0, 0x7f) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r5, 0xa, 0x13) fcntl$setlease(r5, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="010200"/14], 0x14}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000828bd7000ffdbdf252e00000005002b00000000000a0001007770616e330000000600060002000000"], 0x30}, 0x1, 0x0, 0x0, 0x4044004}, 0x4008141) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085da15822129be067b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) copy_file_range(r7, 0x0, r7, 0x0, 0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() 2.302293325s ago: executing program 7 (id=6005): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000540)='kfree\x00'}, 0x10) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$selinux_attr(r1, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) 2.291259086s ago: executing program 7 (id=6006): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e0000005800028014000600200100000000000000000000000000020500160001000000140007"], 0x8c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=@gettfilter={0x24, 0x2e, 0x10, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x4}, {0xe, 0xffe0}, {0x4, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20000049) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xc}, {0x0, 0xe}, {0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0xc801}, 0x4000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000800)=[{{&(0x7f00000006c0)=@un=@abs={0x1, 0x0, 0x4e21}, 0x80, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"/770], 0x2d8}}], 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00'}) socket$nl_route(0x10, 0x3, 0x0) r3 = epoll_create(0x3ff) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)={0xa0000000}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)=0x0) timer_settime(r8, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r10 = fcntl$dupfd(r9, 0x0, r9) read$snapshot(r10, 0x0, 0xffffffbf) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r5}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', 0xffffffffffffffff, 0x0, 0xb}, 0x18) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000280)={0x2000000}) 2.198514918s ago: executing program 1 (id=6007): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYBLOB="0000000000000000b7"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x40001) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x0, 0x0, "0062ba7d82000000000000000000f7fffeff00"}) r1 = syz_open_pts(r0, 0x8182) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x17) 1.484102132s ago: executing program 6 (id=6013): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4004110) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}, 0x1, 0x0, 0x0, 0x480d5}, 0x0) 1.457997942s ago: executing program 6 (id=6015): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000380)='timer_start\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) r1 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}]}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r5, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000005000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4000) close(r1) 1.438244712s ago: executing program 6 (id=6016): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce220000000020010010000000000000ffff7fc5f603ff65"], 0xfdef) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[], 0xfdef) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x3fe, @loopback}], 0x1c) sendto$inet6(r2, &(0x7f0000000100)="b8", 0x1, 0x2000c851, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r7}, 0x9) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) sendmsg$tipc(r5, &(0x7f0000000180)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x3, {0x41, 0x0, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4090}, 0x0) 1.437296302s ago: executing program 7 (id=6017): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x10000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x75, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000), 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r7, {0x4}}, './file0\x00'}) r11 = socket$nl_audit(0x10, 0x3, 0x9) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r11, &(0x7f0000000140)={0xa0002028}) sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="440000000906010200120000000c0000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c000280080001407f000001"], 0x44}, 0x1, 0x0, 0x0, 0x10008086}, 0x4000050) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000"], 0xdc}}, 0x0) syz_open_procfs(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1.362273944s ago: executing program 1 (id=6018): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x4, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x200) syz_usb_disconnect(r0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120110deffffff086d040ec24000010203010902240001014030060904006c020301000409210900090122360b090581030002070108"], 0x0) ioctl$EVIOCRMFF(r0, 0x83c0550b, 0x0) 1.297980785s ago: executing program 3 (id=6020): socket(0x2, 0x80805, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) socket(0x10, 0x2, 0x0) close(0x3) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x101, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x4b2, &(0x7f0000000f80)="$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") 1.275918915s ago: executing program 3 (id=6021): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r2, 0x5608) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e880000850000007000000095", @ANYRES64=r0, @ANYRESOCT=r0, @ANYRES64=r0, @ANYRES8=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, [@printk={@ld}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x691, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x12, 0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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") 1.245452516s ago: executing program 6 (id=6022): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x1e, 0x4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) close_range(r0, 0xffffffffffffffff, 0x0) 1.222554437s ago: executing program 6 (id=6023): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) 907.046332ms ago: executing program 3 (id=6024): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000380000000000019078ac1e0001183f2500000000680000000100007f0000017f00000100186371ae9b1c03"], 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x5}, 0x0, 0x10000, 0x0, 0x1, 0x6, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) statfs(&(0x7f0000000000)='./file1\x00', 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRESOCT=0x0], 0x48) socket(0x10, 0x803, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='io_uring_link\x00', r3, 0x0, 0x4}, 0x18) r4 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfffffffc}, &(0x7f00000007c0)=0x0, &(0x7f0000000800)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x4007, @fd, 0x9, 0x0, 0x0, 0x1, 0x1}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x2000000000000245, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r8}, 0x18) r9 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r9, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) ioctl$BTRFS_IOC_FS_INFO(r2, 0x8400941f, &(0x7f0000000300)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7, 0x0, 0x2}, 0x18) syz_emit_ethernet(0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="910418166421b54fa0aaaa05000442"], 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00'}) 854.189373ms ago: executing program 6 (id=6025): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000009e010000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000015000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f00000003c0)={0x3, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000a40)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@norecovery}, {@resuid}, {@quota}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa1000000", @ANYRES32=r4], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x2008042, &(0x7f0000000040), 0x1, 0x571, &(0x7f0000000780)="$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") r6 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0902000000000000000001000000050002000a00000014000700ff00000000000000000000000000000108000b00"], 0x38}}, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000100)=0x5e1, 0x4) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000100)=0x5e1, 0x4) bind$inet6(r7, &(0x7f0000000500)={0xa, 0x5e20, 0xc8, @ipv4={'\x00', '\xff\xff', @private}, 0x4}, 0x1c) bind$inet6(r3, &(0x7f0000000500)={0xa, 0x5e20, 0xffffffff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xe}}, 0x6}, 0x1c) write(r2, &(0x7f00000009c0)="3bf58d7d45d32c", 0x7) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f00000004c0), 0xd}, 0x11844, 0x9, 0x1, 0x0, 0x800001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7fffeffd) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ff0f00000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800dd00b70300000000008385000000710000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 835.635964ms ago: executing program 3 (id=6026): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000380)='timer_start\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) r1 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}]}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r5, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000005000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4000) close(r1) 817.485675ms ago: executing program 3 (id=6027): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f00000006c0)={0x102102180, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x58) 734.423976ms ago: executing program 3 (id=6028): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYBLOB="0000000000000000b7"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x40001) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x0, 0x0, "0062ba7d82000000000000000000f7fffeff00"}) r1 = syz_open_pts(r0, 0x8182) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x17) 556.1123ms ago: executing program 7 (id=6030): syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setparam(r0, &(0x7f0000000100)=0x7) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) unlink(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 478.883481ms ago: executing program 1 (id=6032): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x18) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0xb6}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="3eed50d0125719a810f88e3f47186fe4dae74182dfd109a2587c4797410c9b8e39bd3d9aa144d5908647c30c8db69b5c17084c9b1bfbb8680737c4f88abcdbc7d294d72ab1b344270915df9ddf5635644c351c22b29d948ac4106bce7107570beed63077cfbc98ef71699eae65d37724d995b553e7a3ade619b522313ab382caf879feb48942878e605ee3ee2872794e3abe22a3f025068b628a5d92468092a5cc649bbbd978b5772e537939432a502122235ced312dafd108c9ffeb0b38cc16da9418ca01d485a6afb5827da4df6e1121ec307de14bb32b6a977608e4576a998182dd93d592ff43e55bfdbbce23ecd501e43b3e93ef8d9d01711dff54c301e299d3801a3cffe6c9883fbd0e47124dc02569f62d48b878fcb58ce99fcffcd2a5166eff3ad93cf1d137274993d86a3b3730d63ded759f6ca88fa449e5575b15321e5a58a1f888eed7466db4976ce35f6d2efb5ad05d99a66482dc607cb5acb24d326803bd337519cc98103f59c63b5962cd72e4497d1b00817d6e09de70270a09b493c2226617b1c9ef9d506be00d6e07f14633a966f04ecca90fb8d2b963ad6f3817935bd6534fa3da1c5dc468789cbf1192f3c0bff3777f1edd2ada5d35f88f12f29e952c44445ce623509d66811c80a9e0f13ad85aba37d86ff0da4dda601d9e8acb264233bc939fb056316612cff687d5c44157be05bcc88b333ff2a40041d98f1acfe6e2231a84e09bd7a54a0442cf87ce3ee8fd8da39da1862862ae40fc3cb3055c8b70e62f243850707341f51426bb3e71c7a4fffefab060db786000618b05eb087a424a2f30f6a232ff44b605f70ceec0a8f70e37907f6e0bbba21e9d5b7ecb6d287742b75c101ba79525918c3473eae38f3c177249dfa8816661c9921f0b0c858d53ab87c8407b97950c842111002edd1d1e80b801b495da28bcd5409bc971e55dab1857e188ac9728efc8f9a4543945f86ade13b445eacecbbf848a96410ac37c57e3e9e8bc8b8fadd559d225c7468639da2b5d1208558b51e94c14faa7947a7c60e81a96bb5d194cc7289adbc02ebb4b49be1f1efc429db2f9b79b5a22919dba0c35341042c5776942c52365367c4bfc95b42be383cca7107161ded7e851d0126da33d581f1e2b08d0c061e86d31e7a83f9b51c79b4034c7deda7697034e1404c6e8e459f76c2efe64350146c7437ef808e04ca14df5f6f500264fd977272bbf8fc096774e8eb61d0963430751ac1425a073f84346b0eba368cba7fa34adc420800d4f99927280eba199f9695cf88124fafc3a2b1226d2f2ab3ea27c69a127650cf5c725b54c02bd8729033cf699ce7f030f9a3442056244da3cfb61a8126dba11377624f39eb009242152fd7b8b88de7dd86057f29bfcb7b7df0e65e7e9ac9eeaa41afa62743698bff03d5b2d51fb6bca2d92294e8e177cfa3661b26f1c040e9bed983b7bc0aa154eb9c92e4ee25091318c53113a1c23ac62d2d71504cba99041f29a4f332133292cf20abec9222a2acca57cac48fa6c0668ee5eecb494741a64d33b011dcca74696d4614c5b45a5d20983b1708d365ed3ffa60f9161972a611c22642c3c259b41f943f6d7a8b60f284d325e38fe76f0645e069ff70cae38850ccf973193b6232c987df26239a574691f7f07fffa6deae1eb0324fe546573c36f2a2c31cd442517a9b036ae6a2a491e7343864693c107a5dc2585820863c146c1ba6caa4fea9b87d567716f4c8ca1a9d2848055cd750512d3b7415d090019dc8a04a1a1d28931093cd8f00e94c407ca1fa2a5ce903d9df26e008c07cd13afa783220e1bd5e6b60645f3dbb6ecb4156fedafa2dd25498c6a99d94f0b38125ea7741b75109dcac9f80635f79f5c8a0483bb9f05a3a5bf721c7541edb252449f8b13e63c370a6146332f03ca1f1b6fe0bed984f13744bb7fa0fe322e83ddf9ffb2083e94f33604a0a199220c450dad94bf154805e7f9e4350ca2d81adf2978c87dcc8a8a7d56297ec124bfef0d28f35777205e973272c87e01070f14f5b14daa3b5104d9ff6b296c4f16ed49eb42d35e7ba3bccb7a26c33a263df88aadd596e9d9de0abbd4d449df11081f2cd62e1d8962b9b9feb25a3b8e03537d61a61c11ac22b7211d12c84e60a6abcc219e558b2513d8c530b3c7a57cdc47de545aafbb2a13c0e6c75b1b92fa241c713c83a09c92b2b61d565120372a9143415583c9596f27a663d4967cd653b08cebd6cb96c1f0dc80d57267ac9a8281d7149bde880828ee27d69a6818db58320db29d1b044eaf6ab8a5108bc522de406990b5393b1f7e7bab71bf6cf8eed1cd59c7607d662e8b313f5c4fce0f59b1027371381011b63dd5b2b09739082c0d62ffad96e30153a395234937d377c32fe7af82aca3a19d0ebc4a5c5fb5ff190f14d5695c703b571fb4bf03756635cafc6cf6267eab836c347a9d07e8089fc105346934cf3364e5be370b3c42b94bc5ae3d17a817398566a2953251eb91697d67278145df9a4b917bcca1bf211780b22f4caacfcb7604c84f943d05f6fdf8edbd258d7d8dbf84f9d99e57472c5b1c2337d749a1f345e662e2536d23c7a63bbbbf00f8b5b0a2106a0342ab27b9a10b82e82668cd49e0cbb09d7be0217645f1dda3be59c8232fa290d34791cda52aa5b5cec6339ab96a2eb3f5328cc7c0e6717c2824344547a2ed518f6b2b4e4fe5b684596aa6a9d3988fc5d5ff4cb46cec99d951b8386b10949a163af974b7543df97b4882a4ed60e927a1deb67c5f814235bef65fea79a2c712815be7403c93a3707fb90d4604ec3a6a3b0928f253f6ab6bd56c958e026c8c58172c4ac2a3efe2ecd5cea70c8313f9ac2d638bc296ba99e2ca86d2fd06b5402cdcddc3f3c9845d5ae77f6f36963b91e8f6cdccd17abe8d40ed02463af4bb0e496344f350097f1cc13313fa1e172b63556ed2b8a8121c01a5fb343ff7767821626fc49b0d6bd522e1c9bf137d5a5bccb4bc8dbb64c83a82ef6c2894f3896c9f6bf0c3764011d53eeb6db9ea9dae22d3ebcca4942d5828c0bca0d9ea37701d5a06c066ac4fe318e11e9c0d6c658ac810fb5d7836cfffe4ccbb0934e5567d74695980a156d4bf1c18861c5a29ccd349999dc20562d00e1f6c1851ae563541086438d60b975c8ceb466414ff60efa0b2dee790fd0659ffa98b92414c13d5a6825368f56c4984412205041cd8e006c7127d4395ecdffb5addf80ef938ce54a367154c4fc286d5f969325c12b13655a9a956dd3b98281f537e837669fc55d8930676e807aa8cd046e0f4583d59f86cb99f3f7a7ddde1fb39111fdec7677d2fee4b8f4814a5def5ebcc67c653384ce80eaffd880405f7edf8fd3ea049f040595df4a75e2f892e7a85e0ba351fb8d263bfff7168bb85017b360fcd2ba89346682a6ea7ccc46afbdb5ab444e3f477238b2ab503bde914d3cf1789539cde9c0621152cd97bff9f235d88a1ef4ea4309db3a05d401af7fb82784b050ef529dab4f1f003eb29710a962f7538c521e617e2f0efac36182d09985e1d725cc38c3833a53742a02f76fb2854a9e45f0febacf3bda83f11183ef5b9fef02ebcdf56d4104b175bad937d8f61964f97d673577cdcbbb48d8eb62b063ee6563b9ff053719baff871bcd83822d865b2f7ef023076425ac5cd71b1f2309de0c6f14cc9c4d3e8fad945f756a7c8a084ea1bfdf5ac6e740043e7f7bdaca06774b084ae314c2636529d4fdcd965c7f8c07156572620b827d694efdc9d2bfc5aa9391220a83765f2c71fcd48d4acaed60afb53d1013fa3b15e948ec4159f7d130ef85b594018346e99034c18738285223ea53a6b1d5cf11a607de2e19608ba03ec970a915b773824261f3fc931dd6d3b934d89f07baf14776314c3eeb8cd0537ef5736f565fbd14e520d4ab2f77ed9597b76ff91f8d1f99ebd6e473efda7accb273975a06944d1037032129992b994ca791a09b4d83980a1e494b0f97098df5f6fb6bbb02722adb11dc319c565c2c363cbd19d9fb3efb4613b62d6584cd53f7bd80e3e89304f444ce9dd1835661e3bb4de02ccf568a2a5daaf0d56898d4286c3fb62e22af62d7ac318685834467f337561dde2e0c1e2827cdffcf42c17728ee64b3ff4ccc0227590badd0bd7e448b8cca0892d6a5e0130d2ac665f47c6b28daa101c1b319869bdd39fa924d6d9ba7d72feda5f21ac78641c7d4801d41c7879721b3be4dab40d9c4a78552440101f373489cc5240b0144a9ce32691a784b6dfe971a21bb5980ff67da2d1bb90b223c9e192a39c1aeadd1f5c790811079c0b51a97105c99b6f95d71bb3ea47c33d9dcb0a53c929c44499e184a3cd722c908d3b0d157e28ffdeb2ed7192e780d96a7a2f0fd5a87bdc973e049da0caf931f26f5a21813e2e602ceb2259997e0205ce48fd9424bd6d4d75dd4301f429ee30745cd839a40dbeab4c3db2f0f10bbaea071ca41d1392385681730a3678a5f60f604dbe19cb9d7dd234337e327451b8cc65394af399432ef7fc3765d055874ebdca14e5999292d6f72f31e92bacf25db5ef8f5212952c1910de06ddbe1687a0e1837922f2228289916ed3aeb7b9cc24da3ae47139e371930afa6d3573df6732c26c0c7ae06d9cedfa77160711bcb06e6553338deae4c5731cf53cc154113096d02f3036d7d9edfcdc331e4bb860c5208489212e904eab70e7f860b0379895cbdecbf7a0b7a25e5b853c7dbe08a4e296a30afec8cf5a9f6ea4aef32a508655d539a770b21e660c9ee1d7688c56abeb7cf1afccc8d59780cf26312589e0c8e1bc00ad7b1325cd9a5dd69246e0b33407c381ea09265154aec297e4ccdf9785a1042a83e77c13d4ce4360782f2428f9916b5cd123b089eb683d30c1e895b9944aa905a1a5b52301d8cc5e4741834ead6ebdb5dc05c9c49c5e883e99d40b9838037beaf876534d747856103e59caf6266fbbe760b6ef83d004634b74f14f8eb4aef93c4cc9cbbd78d83d532c70feef51ea3f170b25d81a6a9b074bfca7e9b3771bf83517e0dd9d0600f70b86b20f61fe36076f8bada334b2390fa954973bc901619a3cfd039349cb328625f495ab288dbdd6dbfd022c2a83f59e0b998619a12e35891b5ae9e83a71765507b4a571cd2241e5885c705244c1022688bef7c5065fbcf219fc01753adb611b3fbc09403dcb10a4f99d788667eff75fa27074ca8481a633530e26163ccf7dada049d23e717e067b6fa5b2f652bc50abda9e7ccdc5f2f3c35ecc2c4431c819c9691be4422e379750774e9f39dae06f26423c8a4278789c9f3111b43f6dd25b0ad47c4cc5fda3f3ed82079c9366e0adced883488f429c1d7e1b351fd0bb204dd7977ef224c4df6d7a5f7697bc6500a7d03a8a914154779fa7092bf1be6bad4092367ce5d295a5d5d0e7c469f372ca2011d612637025e89f178ae9ada0c5b73bcb7d7c034ff595263cd4216e3c76ba5f3d81932a088a90bf8043e877e299c670ef1622a098d5519d9adc4ee7d4cd00e5934a4375fa83fdb81214b892482b31bdde59a70aaf25cb7f417c3a2a91c4e54b48149f6c41d9d396ee6ff13e3028c64a7c9b1f2e7c6e67184a3d52d6f570db3d225c947423c4c6533f22df57d15c5e5a3183422bd378b06fe4732a9401dcb19840fb8fa5c50a0ff497fef362c507753e46b8881d3e767f3b1d893a3805941c94f2efa05ce34b9ea81d716984af6834230d4707a87089d40779503ee6a9bb245d7d997f14acb80e89731c042bbbbe3dcd05177b0ee0eec23455830ef5b65aca357f2b0b887e0b9821c0", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0x17}], 0x4, 0x0, 0x0, 0x8000}, 0x0) dup2(r5, r4) close_range(r3, 0xffffffffffffffff, 0x0) 428.966402ms ago: executing program 1 (id=6033): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce220000000020010010000000000000ffff7fc5f603ff65"], 0xfdef) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[], 0xfdef) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x3fe, @loopback}], 0x1c) sendto$inet6(r2, &(0x7f0000000100)="b8", 0x1, 0x2000c851, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) socket$tipc(0x1e, 0x5, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r7}, 0x9) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) sendmsg$tipc(r5, &(0x7f0000000180)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x3, {0x41, 0x0, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4090}, 0x0) 382.286273ms ago: executing program 7 (id=6034): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x19, 0x4, 0x8, 0x5}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r5}, 0x10) r6 = io_uring_setup(0x1694, &(0x7f00000002c0)={0x0, 0x5baa, 0x40}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/oops_count', 0x200, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r7, r1}, 0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000380), &(0x7f0000000580)=r7}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x800}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1e, 0x0, 0x0, 0x0, 0x800}, 0x94) io_setup(0x8, &(0x7f0000000280)) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r10}, 0x10) r11 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r11, 0x4c80, 0x7000000) syz_emit_ethernet(0xd81, &(0x7f0000000840)={@broadcast, @broadcast, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x2, 0x9, 0xd73, 0x68, 0x0, 0x5, 0x21, 0x0, @empty, @loopback}, {{0x4e20, 0x4e21, 0x4, 0x1, 0x2, 0x0, 0x0, 0x9, 0x6, "e3322c", 0x12, "f0431e"}, "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"}}}}}, 0x0) sendto$l2tp6(r8, &(0x7f0000001600)="495d4f25ec0e3f7df529d9bf456463126fb0a5a820ce7346b56a0e88580cdcbe2c707e778bb2b52fc7f3b1815195c11a3d424aaf1f05c2c0eb6beaefc5fe82461b608743609aa158bda5daccc207026e95e40d573163ff84719dcde5b70cc5c15db1029e2095716a0132b67e189929fa539673f700a2075cbbb1a753dda8b9855fd9e5e5652ce05168058595e9c5420c99a9672310e37b22f71d8f5e28e4ff5f8da468abf719787aee03ddf863cd8959639eb148903150f1c1dec9143d05d41dffaf20ae2d98d08d67160f32b191686cc4699c5a615b75dd4b18f67ce350bfa725f5421c69afe534f47f95b63c5f895c3d60482545831d9f005f0bf1c3c39b060e567482e18a41a94eb787f1dbfe3e234848d88f32644000104216c83662d102f2ca8654055f67da3574f4df215b4839a9b244f2a9f96f4ffb23e7f7ec66c3ada2a38c9e1962e5bf770817be5f8ebe5b934a0e0d2db82868ab8570be433bf89cbaaf0e910c98096ef7b1688e011543f012b81676029f684a1242b59a1f01b1b954235bb38b741aa2d61db37a257c6dd5fc15a96b9a6d5dc5b24a530a723257f3f409c6040d6529e8b3c631731e9dc7ea74e89e25798c53b9c76c324aa4e3602ff7c6f219c1e09d524113ebdf9f536e04f27d087517f57651b208be7a570e1c3f5f3d9b109148e3db5a507aa8906c553811c57550a69eb5333249340054bfac83069783cd12af3038aa96a87c01fa3413f3506f90f2c6004b676656dd2bb4fee283f8b0d1acf9fdbf627e700dded34af451e4749240ab5d8b58363a5d6832ca80faff88df3803264d37ccf6f7fcdd55fa8dd60f2af9e3e49c0befb9ed0f4df407b8e370fb1b6d361d918545b522a74d674c60582e607fdfbed9063ac09addd470609130a128b7cf2f3dc4c30630e11ceffb9ed27ab94d34060ec00d7879a7c2893683580a063cc61a6b8c16161174a1edd70261f7680dea9a8581abe97fe45f249b7786bebaeaf654ec7dea4ae4cddeb3c56bbdf2bbc83d5904e867c98759d9cdded8636da1f747de56389ea73f991bb6e9c761abf30d6adbf8e9aea28c90cce3dd7a706c691f19a4360f4297cedd191021b7e014ff63a0f21673abe681d51733c313ff9c28c25468627799086e9421c34c2053112d21d649d859fb545e9e7b6fe99400dd4125e0520aeeec76bcf28f07e04225ce6256a226ac43bebaba98e364500258f1b53b8d325392e095ec4d703c509072a2605c6d4760a84e7c18f4aa3f32d3b45d8ec7591533cde55b1ce3167d22a584da9b9706ca5325bbaf6df38fbe92873decdd9e0cac0e257e6d07370256d4449086c22ea571a0db4b5a520a115b9ce5946d90717ce14ced0facffc3d472ddb2ed895e23350897a1180a4c968632d6211f4867d66b1376b8628c45f52fd5e38744fedafebcf928aa4310da978c10c0afcc6e101df51da12a5ccc40537a41cc7b9feaf8bdd9e010695ae67b2e0c10d614d0a1f59db6e10602524a39f0da0ab1cb8916929f13077020f1f0178bd38100e730e45910fd309952018cc0b4d78d355fe5a77cf758129b3fef40366875959e6310377d928e4cbd54c0c0b4efabd6b4bf934bb8b687f499aa6f0b4aeb30f43501621f9c5d1bd0c5d0b62d5062e8fc24a665f508eb52b24b6d2a4e8ee663107cab84bcddc1e53e974a1cb88cc2ed1d94a2b237cfc23b189bc8138ebbfb3fbb394440acf3f84c37f6e5916d02a0725ebcf414f4ec703055e886aeaa8ad33335040e5415402d5372cd5aa848eb688582d1a99cd8969bdc7ad48430dc34087f65583b914a3ba01927863fc054857b84641321a7357bfbb77a9e4c14dcb09f7816b8523a5ad4ee12c55dfbb33fb359e2d27b94068c6a32f6baca6dcbdaa413beb8e315392a0dd97d693f0fc830893341bc49619224f1c4ebf51a47f48e1c8c97b407a5cb4ec7959c8f22ded6bd1e4f79964c7e770f9a1d85a5c0683b4195cc236feab35cbc0d0c1eea6b33b2dea06bae7c1488128f4172a7f429c02515cbcbd2d2912484a71be83d5da137e4e6401dee4353a179e71280e791825504d75070263e1fed9368725cf58eab7b5dffdc2c388f4cace7a0086140acdf4561a961acdfa4317051a3bc46856422cee1ca8ea05155da88e8efad47f8a698890a153b7a26170a0e957976a347eba052f13813365e54aae9c15479e012b903d19a135f96d7204aa78e38a6f7dd0368aef9139f851255c8a5dc997d0af7a966750500d53a8cb8f39adc6d63d6466d722dfa11d0d3e8a14027141429cad3a514821fa2c81643016c15cfa341e7e18c20771435e297cd6330a78fc40ca075adf87dc452ec2a5f50ab1d206cac50ff8ba813b3743270d6d43b73caee5b21138f0a5c23c96973ecae63456c6c9f3ea340462b4ce5c9a258073176cc009f74fbd99c90781b4fb5b28da764d9f67aa1cda5e64216b9c6fc46dbfeb2384c1ef9518f391b87a8ea0d206d91aecb83fe2432057d9672b10b4aa9044b97655a8e0ff9d0d24c1c70b1f1b1cd015f45c5b1928690f1b54297d82997bbb9bd45643bb1bbe3b4b3e1ac3452f29798ea96b54dc517099f943f9cb3d1f593145f9c7ba8d74cc589165883e7d2ba16641dbb1cc7d17dc5040ebef0685bbc5d629072730940501bf1a3092e19503941ddd2724fb442f159e5d5d7a51e4c7a5622134a4b9ef86280d93454c5d55aae85b66a0264b21e65d3a8acbc78abcefcdbe4b1aa8b9fa30bc9f874ee5888f129baea749ed7c8d88b539ed38dadfcab30350ff6695e308a34be883bb96972615760acfdc593953c041eb7734d966ac84cff0c1e747414ff478d0d2184ab85e96b318f5a6f46583de3bdc2ebf92713988935f5a33d0df6a5185cc6a2ac3d7dde1d3a28d03f8142cc6c9a08b6335d8da035056f7a465845992408e6f68c9207ff67b7a94d25b8c13040675e12b3bdd86ce23e43808a9f168d71f74e013da14993762703650258c22d3b6f936be1e6243828959f4c0c6864bf77154e0f23fa6a8f72c76cf709e916512bf16de2dc1c6577a4e32b9f27eb2fc7fcf52a7fe8373cf56cc5feb14bf1437cfcca2ed248f34ae7b0772b9204806eaac7cb49adac92b23887f075c11f0d61e6107ef7f285be2b71936ae1fe88c7a19c7e9fd6be7656c340ac9c4bdf99aa46121755359d709b0040c587073cc1d1330beafc9b7cc63ac1c919f71d2c8b21c5148aefa0c196b71c5cbea6a45949ca676ccdee1ae5b5639b0047ed7b6210dc4c9ae65f87128876e0d5e54fb1f5d0dff53ea6092a81d18213402ddd6a4971c1f9133e0b4bfcaf538f4edb656ae29a44b212bf7982e5ba9ecaf9d973ec0f0488c44893ef8ec0b249ecf297c1be69bf9167bbfe0dbcb0dc93d8d60629f4e412befbea5069cb90a6fc23024b2c84b15c459bd234e0a54f8f106f570f3dcdc25474b147d09c896a1b9b08318880249a2cf4c9904286e1875530c605fe1494e6afcb51eb6fccd9079e15ed6e95ea80e834294db201012200219f0f64b2703d544e3d0a93f56374ae6494a23e97cfb0962b38a3a893f18a896245f6afc67cf20aa074f098df92a957f47108bda5fda9c7b72ac4d0de83648e191ea84616a91b423112a2f2bf6cc2a892b20ecc3657e3e4c1416780586e9a417cfbd73735924d7688661bf95c5e7d77183c4b5f3f39fcdebd86c041a04c2ccfa8343dfb7f6ac0d928f28296cf82657c0dcd37542fcf172a1cfb2edca559923afe3027092dc091feea025ed45507c4ef0d69330edb76a43b3c585720f3365f5723aefb8bb9f47aaa6a1d76db3992f2580c687c529653be58616b02233f1f9dc60b642e7e588ce627f3ee2105ffd5f2c26d7a68ef9a9e60a14f148bc901bedbfd0108a4603601e18ad14b7a79a36fe4fe1d8616b347de0f643f7e04078820e25ce5a0890e039680fc886eb49f73c1c3d27dad2da626f20ef68a0f1fb864284056eaa6aa90ae1abfc9d41911d44fd576e94d458f3bb0f8a8a40ad3ae2191962b38fe55f2bb6881367d8e07547fd68e0c0adc7c3b9dbe3dce0f48bc7205f6f7da43b1d90664575c6687ff829a4b31410ec386c491fba224c409a38f5f4f85e9671adfa9ce7e42aa3128066896143b2c6c1ab0df050d59deb562dde04105dd7f88967220a961eb45bf16fc366b952b3f320eabb2fdd6f023d714ef1c303655bb78acf6d76156c68262c3e025b49512cddf5010f757c64017f6a6b85baa2013bb86ce5646506f198e83735f4bffdb32cc4e82fa250bf08dbab33ecf6c1dae5948be740e8cde26f015a064d9f0c5d5a3118afef8edd1118f2830adf051fef7265449190344b32cbbbad8bec1dbfa8f843e2fde6bd7153f7a2e02f3f222cb12d671d597885caa42aced4cf6e11566a48405448fcca0948a8a191862b632b0e77060176f50d32c0219b0476f83385551989f4fceb5ba97ab6201231eb2c35378ce95cf27e12f0ba7a4bd67f61b46821fbc4792f9ccee7504d5268ff3696ee9ee83d66de81588163b9fa6553dc8f8d99d635af7a0d2bd80e99ae7237d9cbd770be2580eda42e8ad7d41b0fcff0771b300b8ba38867a2d2b9125ddac7fbe0f0259eea407de8037018486d115e0a9162fff27d7aa93378a542ce6becabfcbb66cf31191247231f5b0c4e407641e5c464856404ca1cbdc8adf7479ae6d01cfdb1304f440d89663266c2a9e754f249c1256fdcc1817b6946c334dca1b5b28d24ca4fc4d603c31e710374b415cb8d43e6c9b6e81ba6ff21e9f10f221bb528c74e61cefc56762292f56af97200b15a0d06bd223a93433951d7e7952f427a7d27ea3f1b979d8f639755f4b45c521caf837c397a24e447e1d6d716abba04c6171c9ca6713b5e77f904fbfa9de860ca31efbbeedbf7d8fe14a655025d5796eb59df93bfecf953d9ea97ad922d745016e23ff3709a94cf01b959fd4e34fa106baa08f67c138ea1fd5182f49ac6e3b5705b3e754233e855abeb8bd85455a623c33f2c0ea1b0d7fb06e1db4e1eb3f72a5d4c7f6364c9732449fcf252ecca1e8bb1c533a8c7c9e11b9f998a23de0a5f7db714e27837026d2d490e98dbaedac41941b077f463269b952e76dfce4db4ddc4d8eba74d228d6c89ce23656f200c505f49a88415c1af5b7402e7d7ffcc50007c11f2b7c3abbbf014f665a1601683ec051b906f2cf62f877f24e36d9d0aa340dcce668ad793276f8a9b761118a9ec574c815bc1a02d66d1323dc077a17b416a9ec434386306eeb19f9764c30e44a34f79f6e5950aba55e2094ff311d91533e86c1dd39d64f8c966fe50c5364118485d8691f21e653b0d73e1c18fdc5ab7b880d08fcd6e611867d7f7c19a206a44d8194ca4a6f22d143a714f342d441d4c1e401b77afcea9a887f68775141db34ca8626962371856e412eef401fe2b8d2ab0d52e4bb24c5ee8d35584a4074c5cece0582a45b305d29dc5fcadab310208e3e747e5675c51eae465a4164e61ff75110c10ba60d5971e0c53a68ed0e132c07b6e5cd6a12f7cf89b25b41580b0a085e713faf74c3ee06903fb000dae6c981832c06b40f75551849cd2e118fa9e2a20d1d755069f5b9b552757fd634db9e7248d6df212d9d5428b67158288316faa78a09d5d2fb78b82aa21f33537b23a6a2df7c6a3f0d403ec422ce4f92532a1cb097e447662d935cddc708066f651e81b2af574aa6a36257e47ef5fe1cbd3a856e30661cd56f7ac5a04d253b65ff0c6962b082d48e37e8452d0f91c036f53da72567a93b53b7557437e8691dbd0621cb1afd0c108795", 0x1000, 0x20044000, &(0x7f0000000040)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x20) 301.214465ms ago: executing program 0 (id=6035): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0xb}, 0x18) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) 278.796865ms ago: executing program 7 (id=6036): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x10000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x75, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000), 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r6, {0x4}}, './file0\x00'}) r10 = socket$nl_audit(0x10, 0x3, 0x9) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r10, &(0x7f0000000140)={0xa0002028}) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="440000000906010200120000000c0000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c000280080001407f000001"], 0x44}, 0x1, 0x0, 0x0, 0x10008086}, 0x4000050) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000"], 0xdc}}, 0x0) syz_open_procfs(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 183.533547ms ago: executing program 0 (id=6037): bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB="020000004c00000000002c0000000000f1ff0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\a\x00'/24], 0x48) 183.011617ms ago: executing program 1 (id=6038): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000004200"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0xffb}], 0x1}}], 0x1, 0x2, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c022300040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 117.298108ms ago: executing program 0 (id=6039): mkdir(&(0x7f0000000580)='./file0\x00', 0x92) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x101}, 0x18) (async) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) (async) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r3}, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r4) (async) inotify_add_watch(0xffffffffffffffff, 0x0, 0xa4000960) (async) rmdir(0x0) (async) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x10000, 0xfffffffd}) (async, rerun: 32) clock_adjtime(0x0, &(0x7f0000000100)={0x105f0827e8, 0xfb, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde1, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x401, 0x3}) (rerun: 32) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000802, 0x0, 0x0) (async, rerun: 32) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) (rerun: 32) 71.482799ms ago: executing program 0 (id=6040): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000540)='kfree\x00'}, 0x10) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$selinux_attr(r1, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) 66.175269ms ago: executing program 0 (id=6041): socket(0x2, 0x80805, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) socket(0x10, 0x2, 0x0) close(0x3) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x101, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x4b2, &(0x7f0000000f80)="$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") 0s ago: executing program 0 (id=6042): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x4, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) syz_read_part_table(0x105a, &(0x7f0000001180)="$eJzsz80JAjEQBtAJ++/BLcBGLECwAtuwBcFmBC9iQR4tQhBWsstuCerhvUMm34QkTPBTbV6KcpuiHk5dRJNb5XJcRHoNEZv1FJupDGNtL9UU74/nbr6w785dyptbP+Z3XSyP5X469vOv1SoO1y+MCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB/7xMAAP//fU4Mug==") kernel console output (not intermixed with test programs): =4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19368 comm="syz.6.5364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaba76eba9 code=0x7ffc0000 [ 328.345251][ T29] audit: type=1326 audit(327.778:35117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19368 comm="syz.6.5364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaba76eba9 code=0x7ffc0000 [ 328.395517][ T29] audit: type=1326 audit(327.778:35118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19368 comm="syz.6.5364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feaba76eba9 code=0x7ffc0000 [ 328.395559][ T29] audit: type=1326 audit(327.778:35119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19368 comm="syz.6.5364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaba76eba9 code=0x7ffc0000 [ 328.488023][T19381] unsupported nla_type 52263 [ 328.490034][T19381] smc: net device bond0 erased user defined pnetid SYZ0 [ 328.550999][T19389] loop6: detected capacity change from 0 to 1024 [ 328.557989][T19389] EXT4-fs: Ignoring removed nobh option [ 328.563712][T19389] EXT4-fs: Ignoring removed bh option [ 328.854246][T19409] sch_fq: defrate 4294967295 ignored. [ 329.328407][T19383] syz.0.5370 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 329.343312][T19383] CPU: 1 UID: 0 PID: 19383 Comm: syz.0.5370 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 329.343381][T19383] Tainted: [W]=WARN [ 329.343389][T19383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 329.343439][T19383] Call Trace: [ 329.343446][T19383] [ 329.343455][T19383] __dump_stack+0x1d/0x30 [ 329.343474][T19383] dump_stack_lvl+0xe8/0x140 [ 329.343491][T19383] dump_stack+0x15/0x1b [ 329.343507][T19383] dump_header+0x81/0x220 [ 329.343574][T19383] oom_kill_process+0x342/0x400 [ 329.343608][T19383] out_of_memory+0x979/0xb80 [ 329.343688][T19383] try_charge_memcg+0x5e6/0x9e0 [ 329.343715][T19383] obj_cgroup_charge_pages+0xa6/0x150 [ 329.343746][T19383] __memcg_kmem_charge_page+0x9f/0x170 [ 329.343843][T19383] __alloc_frozen_pages_noprof+0x188/0x360 [ 329.343884][T19383] alloc_pages_mpol+0xb3/0x250 [ 329.343942][T19383] alloc_pages_noprof+0x90/0x130 [ 329.343976][T19383] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 329.344058][T19383] __kvmalloc_node_noprof+0x30f/0x4e0 [ 329.344087][T19383] ? ip_set_alloc+0x1f/0x30 [ 329.344110][T19383] ? ip_set_alloc+0x1f/0x30 [ 329.344186][T19383] ? __kmalloc_cache_noprof+0x189/0x320 [ 329.344242][T19383] ip_set_alloc+0x1f/0x30 [ 329.344261][T19383] hash_netiface_create+0x282/0x740 [ 329.344284][T19383] ? __pfx_hash_netiface_create+0x10/0x10 [ 329.344306][T19383] ip_set_create+0x3c9/0x960 [ 329.344389][T19383] ? __nla_parse+0x40/0x60 [ 329.344466][T19383] nfnetlink_rcv_msg+0x4c3/0x590 [ 329.344501][T19383] netlink_rcv_skb+0x123/0x220 [ 329.344521][T19383] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 329.344611][T19383] nfnetlink_rcv+0x16b/0x1690 [ 329.344632][T19383] ? nlmon_xmit+0x4f/0x60 [ 329.344658][T19383] ? consume_skb+0x49/0x150 [ 329.344710][T19383] ? nlmon_xmit+0x4f/0x60 [ 329.344737][T19383] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 329.344764][T19383] ? __dev_queue_xmit+0x1200/0x2000 [ 329.344799][T19383] ? __dev_queue_xmit+0x182/0x2000 [ 329.344835][T19383] ? ref_tracker_free+0x37d/0x3e0 [ 329.344920][T19383] ? __netlink_deliver_tap+0x4dc/0x500 [ 329.344946][T19383] netlink_unicast+0x5bd/0x690 [ 329.344966][T19383] netlink_sendmsg+0x58b/0x6b0 [ 329.345012][T19383] ? __pfx_netlink_sendmsg+0x10/0x10 [ 329.345070][T19383] __sock_sendmsg+0x142/0x180 [ 329.345139][T19383] ____sys_sendmsg+0x31e/0x4e0 [ 329.345166][T19383] ___sys_sendmsg+0x17b/0x1d0 [ 329.345205][T19383] __x64_sys_sendmsg+0xd4/0x160 [ 329.345232][T19383] x64_sys_call+0x191e/0x2ff0 [ 329.345301][T19383] do_syscall_64+0xd2/0x200 [ 329.345329][T19383] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 329.345356][T19383] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 329.345465][T19383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.345483][T19383] RIP: 0033:0x7fd85bb0eba9 [ 329.345497][T19383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 329.345542][T19383] RSP: 002b:00007fd85a56f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 329.345560][T19383] RAX: ffffffffffffffda RBX: 00007fd85bd55fa0 RCX: 00007fd85bb0eba9 [ 329.345616][T19383] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 329.345685][T19383] RBP: 00007fd85bb91e19 R08: 0000000000000000 R09: 0000000000000000 [ 329.345698][T19383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 329.345709][T19383] R13: 00007fd85bd56038 R14: 00007fd85bd55fa0 R15: 00007ffe683ecd08 [ 329.345725][T19383] [ 329.345732][T19383] memory: usage 307200kB, limit 307200kB, failcnt 6118 [ 329.370941][T19383] memory+swap: usage 309348kB, limit 9007199254740988kB, failcnt 0 [ 329.698977][T19383] kmem: usage 307124kB, limit 9007199254740988kB, failcnt 0 [ 329.706690][T19383] Memory cgroup stats for /syz0: [ 329.707766][T19383] cache 0 [ 329.715647][T19383] rss 0 [ 329.718432][T19383] shmem 0 [ 329.721395][T19383] mapped_file 0 [ 329.724840][T19383] dirty 0 [ 329.727750][T19383] writeback 0 [ 329.731043][T19383] workingset_refault_anon 1021 [ 329.735790][T19383] workingset_refault_file 8433 [ 329.740599][T19383] swap 2199552 [ 329.744023][T19383] swapcached 4096 [ 329.747646][T19383] pgpgin 274048 [ 329.751074][T19383] pgpgout 274029 [ 329.754642][T19383] pgfault 313660 [ 329.758156][T19383] pgmajfault 581 [ 329.761683][T19383] inactive_anon 0 [ 329.765285][T19383] active_anon 4096 [ 329.769043][T19383] inactive_file 0 [ 329.772662][T19383] active_file 73728 [ 329.776439][T19383] unevictable 0 [ 329.779867][T19383] hierarchical_memory_limit 314572800 [ 329.785229][T19383] hierarchical_memsw_limit 9223372036854771712 [ 329.791379][T19383] total_cache 0 [ 329.794923][T19383] total_rss 0 [ 329.798177][T19383] total_shmem 0 [ 329.801634][T19383] total_mapped_file 0 [ 329.805636][T19383] total_dirty 0 [ 329.809064][T19383] total_writeback 0 [ 329.812886][T19383] total_workingset_refault_anon 1021 [ 329.818150][T19383] total_workingset_refault_file 8433 [ 329.823448][T19383] total_swap 2199552 [ 329.827389][T19383] total_swapcached 4096 [ 329.831529][T19383] total_pgpgin 274048 [ 329.835478][T19383] total_pgpgout 274029 [ 329.839565][T19383] total_pgfault 313660 [ 329.843613][T19383] total_pgmajfault 581 [ 329.847768][T19383] total_inactive_anon 0 [ 329.851905][T19383] total_active_anon 4096 [ 329.856115][T19383] total_inactive_file 0 [ 329.860266][T19383] total_active_file 73728 [ 329.864590][T19383] total_unevictable 0 [ 329.868542][T19383] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.5370,pid=19382,uid=0 [ 329.883152][T19383] Memory cgroup out of memory: Killed process 19382 (syz.0.5370) total-vm:93892kB, anon-rss:1068kB, file-rss:22436kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 330.061208][T19424] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_batadv, syncid = 3, id = 0 [ 330.087157][T19430] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5384'. [ 330.114986][T19434] sch_tbf: burst 19869 is lower than device lo mtu (65550) ! [ 330.430596][T19451] sch_fq: defrate 4294967295 ignored. [ 330.468083][T19457] FAULT_INJECTION: forcing a failure. [ 330.468083][T19457] name failslab, interval 1, probability 0, space 0, times 0 [ 330.480853][T19457] CPU: 1 UID: 0 PID: 19457 Comm: syz.3.5393 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 330.480882][T19457] Tainted: [W]=WARN [ 330.480889][T19457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 330.480901][T19457] Call Trace: [ 330.480907][T19457] [ 330.480915][T19457] __dump_stack+0x1d/0x30 [ 330.480935][T19457] dump_stack_lvl+0xe8/0x140 [ 330.481023][T19457] dump_stack+0x15/0x1b [ 330.481038][T19457] should_fail_ex+0x265/0x280 [ 330.481059][T19457] should_failslab+0x8c/0xb0 [ 330.481079][T19457] kmem_cache_alloc_node_noprof+0x57/0x320 [ 330.481157][T19457] ? __alloc_skb+0x101/0x320 [ 330.481243][T19457] ? __rtnl_unlock+0x95/0xb0 [ 330.481263][T19457] __alloc_skb+0x101/0x320 [ 330.481281][T19457] netlink_ack+0xfd/0x500 [ 330.481305][T19457] netlink_rcv_skb+0x192/0x220 [ 330.481381][T19457] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 330.481417][T19457] rtnetlink_rcv+0x1c/0x30 [ 330.481441][T19457] netlink_unicast+0x5bd/0x690 [ 330.481462][T19457] netlink_sendmsg+0x58b/0x6b0 [ 330.481564][T19457] ? __pfx_netlink_sendmsg+0x10/0x10 [ 330.481591][T19457] __sock_sendmsg+0x142/0x180 [ 330.481623][T19457] ____sys_sendmsg+0x31e/0x4e0 [ 330.481647][T19457] ___sys_sendmsg+0x17b/0x1d0 [ 330.481758][T19457] __x64_sys_sendmsg+0xd4/0x160 [ 330.481788][T19457] x64_sys_call+0x191e/0x2ff0 [ 330.481811][T19457] do_syscall_64+0xd2/0x200 [ 330.481897][T19457] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 330.481921][T19457] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 330.481949][T19457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.482007][T19457] RIP: 0033:0x7ff69cd2eba9 [ 330.482021][T19457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.482038][T19457] RSP: 002b:00007ff69b78f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 330.482057][T19457] RAX: ffffffffffffffda RBX: 00007ff69cf75fa0 RCX: 00007ff69cd2eba9 [ 330.482107][T19457] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000005 [ 330.482120][T19457] RBP: 00007ff69b78f090 R08: 0000000000000000 R09: 0000000000000000 [ 330.482132][T19457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.482147][T19457] R13: 00007ff69cf76038 R14: 00007ff69cf75fa0 R15: 00007ffdd1ec24c8 [ 330.482167][T19457] [ 330.930037][T19474] loop6: detected capacity change from 0 to 1024 [ 330.943535][T19474] EXT4-fs: Ignoring removed nobh option [ 330.949108][T19474] EXT4-fs: Ignoring removed bh option [ 331.043495][T19481] loop6: detected capacity change from 0 to 2048 [ 331.140843][T19490] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.5400: bg 0: block 345: padding at end of block bitmap is not set [ 331.161724][T19490] EXT4-fs (loop6): Remounting filesystem read-only [ 331.172064][ T3444] EXT4-fs warning (device loop6): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 331.264390][T19495] bridge0: entered allmulticast mode [ 331.284549][T19495] pim6reg: entered allmulticast mode [ 331.391592][T19502] netlink: 324 bytes leftover after parsing attributes in process `syz.6.5408'. [ 331.423114][T19502] serio: Serial port ptm0 [ 331.456570][T19497] loop7: detected capacity change from 0 to 1024 [ 331.463743][T19497] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 331.474011][T19497] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 331.483936][T19497] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 331.495141][T19497] EXT4-fs error (device loop7): ext4_get_journal_inode:5800: inode #5: comm syz.7.5406: unexpected bad inode w/o EXT4_IGET_BAD [ 331.508308][T19497] EXT4-fs (loop7): no journal found [ 331.513534][T19497] EXT4-fs (loop7): can't get journal size [ 331.519552][T19497] EXT4-fs (loop7): too many log groups per flexible block group [ 331.527231][T19497] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 331.535421][T19497] EXT4-fs (loop7): mount failed [ 331.733354][T19515] lo speed is unknown, defaulting to 1000 [ 331.755424][T19532] sch_fq: defrate 4294967295 ignored. [ 331.764542][T19531] netlink: 'syz.7.5415': attribute type 7 has an invalid length. [ 331.772323][T19531] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5415'. [ 331.803794][T19531] loop7: detected capacity change from 0 to 512 [ 331.807430][T19515] chnl_net:caif_netlink_parms(): no params data found [ 331.810985][T19531] EXT4-fs: Ignoring removed nomblk_io_submit option [ 331.850522][T19515] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.858201][T19515] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.867503][T19515] bridge_slave_0: entered allmulticast mode [ 331.874054][T19515] bridge_slave_0: entered promiscuous mode [ 331.880966][T19515] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.888763][T19515] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.897093][T19515] bridge_slave_1: entered allmulticast mode [ 331.903688][T19515] bridge_slave_1: entered promiscuous mode [ 331.922899][T19515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.933722][T19515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.972126][T19540] netlink: 'syz.3.5416': attribute type 13 has an invalid length. [ 331.980660][T19515] team0: Port device team_slave_0 added [ 331.987600][T19515] team0: Port device team_slave_1 added [ 332.005830][T19540] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 332.039251][T19540] loop3: detected capacity change from 0 to 512 [ 332.051270][T19515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.058209][T19515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.084744][T19515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.096931][T19515] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.104008][T19515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.130550][T19515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.142272][T19540] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm +}[@: error while reading EA inode 32 err=-116 [ 332.154853][T19540] EXT4-fs (loop3): Remounting filesystem read-only [ 332.161403][T19540] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 332.179143][T19540] EXT4-fs (loop3): 1 orphan inode deleted [ 332.203085][T19515] hsr_slave_0: entered promiscuous mode [ 332.209198][T19515] hsr_slave_1: entered promiscuous mode [ 332.216334][T19515] debugfs: 'hsr0' already exists in 'hsr' [ 332.222723][T19515] Cannot create hsr debugfs directory [ 332.264340][T19558] loop7: detected capacity change from 0 to 256 [ 332.272889][T19558] /dev/loop7: Can't open blockdev [ 332.298440][T19563] FAULT_INJECTION: forcing a failure. [ 332.298440][T19563] name failslab, interval 1, probability 0, space 0, times 0 [ 332.311098][T19563] CPU: 1 UID: 0 PID: 19563 Comm: syz.7.5425 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 332.311167][T19563] Tainted: [W]=WARN [ 332.311175][T19563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 332.311187][T19563] Call Trace: [ 332.311193][T19563] [ 332.311201][T19563] __dump_stack+0x1d/0x30 [ 332.311221][T19563] dump_stack_lvl+0xe8/0x140 [ 332.311239][T19563] dump_stack+0x15/0x1b [ 332.311256][T19563] should_fail_ex+0x265/0x280 [ 332.311325][T19563] should_failslab+0x8c/0xb0 [ 332.311347][T19563] __kmalloc_noprof+0xa5/0x3e0 [ 332.311369][T19563] ? bpf_test_init+0xa9/0x160 [ 332.311434][T19563] bpf_test_init+0xa9/0x160 [ 332.311468][T19563] bpf_prog_test_run_xdp+0x274/0x910 [ 332.311492][T19563] ? strncpy_from_user+0x1eb/0x230 [ 332.311518][T19563] ? __rcu_read_unlock+0x4f/0x70 [ 332.311581][T19563] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 332.311602][T19563] bpf_prog_test_run+0x227/0x390 [ 332.311628][T19563] __sys_bpf+0x4b9/0x7b0 [ 332.311727][T19563] __x64_sys_bpf+0x41/0x50 [ 332.311752][T19563] x64_sys_call+0x2aea/0x2ff0 [ 332.311774][T19563] do_syscall_64+0xd2/0x200 [ 332.311809][T19563] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 332.311848][T19563] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 332.311891][T19563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.311912][T19563] RIP: 0033:0x7fcf80d2eba9 [ 332.311928][T19563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.311946][T19563] RSP: 002b:00007fcf7f78f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 332.311959][T19563] RAX: ffffffffffffffda RBX: 00007fcf80f75fa0 RCX: 00007fcf80d2eba9 [ 332.311967][T19563] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 332.312037][T19563] RBP: 00007fcf7f78f090 R08: 0000000000000000 R09: 0000000000000000 [ 332.312044][T19563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.312133][T19563] R13: 00007fcf80f76038 R14: 00007fcf80f75fa0 R15: 00007ffff7e6d978 [ 332.312172][T19563] [ 332.313149][T19515] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.549312][T19573] loop7: detected capacity change from 0 to 1024 [ 332.556253][T19573] EXT4-fs: Ignoring removed nobh option [ 332.561879][T19573] EXT4-fs: Ignoring removed bh option [ 332.573763][T19515] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.596145][T19575] netlink: 'syz.7.5429': attribute type 13 has an invalid length. [ 332.612676][T19575] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 332.629755][T19515] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.639625][T19575] loop7: detected capacity change from 0 to 512 [ 332.673874][T19582] loop7: detected capacity change from 0 to 512 [ 332.682471][T19515] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.716912][T19585] xt_socket: unknown flags 0xe4 [ 332.739338][T19587] netlink: 'syz.0.5433': attribute type 25 has an invalid length. [ 332.747836][T19587] netlink: 'syz.0.5433': attribute type 28 has an invalid length. [ 332.756433][ T29] kauditd_printk_skb: 83 callbacks suppressed [ 332.756445][ T29] audit: type=1400 audit(332.258:35203): avc: denied { write } for pid=19586 comm="syz.0.5433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 332.785882][T19587] netlink: zone id is out of range [ 332.791047][T19587] netlink: zone id is out of range [ 332.796247][T19587] netlink: zone id is out of range [ 332.801361][T19587] netlink: zone id is out of range [ 332.806797][ T29] audit: type=1326 audit(332.288:35204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19586 comm="syz.0.5433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd85bb0eba9 code=0x7ffc0000 [ 332.810832][T19515] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 332.830285][ T29] audit: type=1326 audit(332.288:35205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19586 comm="syz.0.5433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd85bb0eba9 code=0x7ffc0000 [ 332.860059][ T29] audit: type=1326 audit(332.288:35206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19586 comm="syz.0.5433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd85bb0eba9 code=0x7ffc0000 [ 332.873764][T19587] netlink: zone id is out of range [ 332.883525][ T29] audit: type=1326 audit(332.288:35207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19586 comm="syz.0.5433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd85bb0eba9 code=0x7ffc0000 [ 332.903883][T19587] netlink: zone id is out of range [ 332.910933][ T29] audit: type=1326 audit(332.288:35208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19586 comm="syz.0.5433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd85bb0eba9 code=0x7ffc0000 [ 332.917497][T19587] netlink: zone id is out of range [ 332.939559][ T29] audit: type=1326 audit(332.288:35209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19586 comm="syz.0.5433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd85bb0eba9 code=0x7ffc0000 [ 332.945251][T19587] netlink: zone id is out of range [ 332.967022][ T29] audit: type=1326 audit(332.288:35210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19586 comm="syz.0.5433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd85bb0eba9 code=0x7ffc0000 [ 332.995684][ T29] audit: type=1326 audit(332.288:35211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19586 comm="syz.0.5433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd85bb0eba9 code=0x7ffc0000 [ 333.019351][ T29] audit: type=1326 audit(332.288:35212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19586 comm="syz.0.5433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd85bb0eba9 code=0x7ffc0000 [ 333.045046][T19515] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 333.055230][T19515] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 333.066346][T19515] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 333.134433][T19515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.143182][T19606] loop7: detected capacity change from 0 to 2048 [ 333.148312][T19515] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.161519][T19607] sch_fq: defrate 4294967295 ignored. [ 333.163363][T19606] loop7: detected capacity change from 0 to 512 [ 333.169109][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.180142][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.190141][T19609] IPVS: set_ctl: invalid protocol: 39 172.30.1.1:20004 [ 333.204662][T19515] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 333.215084][T19515] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 333.231674][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.238721][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.336594][T19515] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.370401][T19623] netlink: 'syz.0.5440': attribute type 13 has an invalid length. [ 333.486139][T19636] netlink: 296 bytes leftover after parsing attributes in process `syz.0.5442'. [ 333.507877][T19636] netlink: 'syz.0.5442': attribute type 39 has an invalid length. [ 333.548035][T19515] veth0_vlan: entered promiscuous mode [ 333.565524][T19515] veth1_vlan: entered promiscuous mode [ 333.590562][T19515] veth0_macvtap: entered promiscuous mode [ 333.615239][T19515] veth1_macvtap: entered promiscuous mode [ 333.642660][T19515] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 333.654887][T19515] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 333.658869][T19655] netlink: 256 bytes leftover after parsing attributes in process `syz.7.5447'. [ 333.674480][ T312] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.683593][ T312] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.695238][ T312] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.715068][ T312] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.747775][T19664] netlink: 'syz.6.5412': attribute type 13 has an invalid length. [ 333.782863][T19664] loop6: detected capacity change from 0 to 512 [ 333.792060][T19664] EXT4-fs error (device loop6): ext4_xattr_inode_iget:442: comm +}[@: error while reading EA inode 32 err=-116 [ 333.804058][T19664] EXT4-fs (loop6): Remounting filesystem read-only [ 333.810646][T19664] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 333.820875][T19664] EXT4-fs (loop6): 1 orphan inode deleted [ 333.845463][T19669] loop6: detected capacity change from 0 to 1024 [ 333.852714][T19669] EXT4-fs: Ignoring removed nobh option [ 333.858256][T19669] EXT4-fs: Ignoring removed bh option [ 333.956910][T19676] netlink: 'syz.3.5451': attribute type 13 has an invalid length. [ 333.976407][T19676] loop3: detected capacity change from 0 to 512 [ 333.984909][T19676] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm +}[@: error while reading EA inode 32 err=-116 [ 333.997257][T19676] EXT4-fs (loop3): Remounting filesystem read-only [ 334.003901][T19676] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 334.014057][T19676] EXT4-fs (loop3): 1 orphan inode deleted [ 334.036734][T19679] 9pnet_fd: Insufficient options for proto=fd [ 334.067119][T19681] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.128905][T19681] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.212206][T19681] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.282003][T19681] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.336873][ T58] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.348708][ T3444] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.360790][ T3444] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.372282][ T3444] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.566752][T19686] loop3: detected capacity change from 0 to 512 [ 334.594084][T19686] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.5455: bg 0: block 248: padding at end of block bitmap is not set [ 334.608716][T19686] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.5455: Failed to acquire dquot type 1 [ 334.621880][T19686] EXT4-fs (loop3): 1 truncate cleaned up [ 334.659890][T19709] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5459'. [ 334.668875][T19709] netlink: 348 bytes leftover after parsing attributes in process `syz.7.5459'. [ 334.677960][T19709] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5459'. [ 334.687464][T19709] netlink: 348 bytes leftover after parsing attributes in process `syz.7.5459'. [ 334.697058][T19708] netlink: 'syz.3.5462': attribute type 13 has an invalid length. [ 334.698707][T19706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5461'. [ 334.725696][T19708] loop3: detected capacity change from 0 to 512 [ 334.733754][T19708] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm +}[@: error while reading EA inode 32 err=-116 [ 334.747434][T19708] EXT4-fs (loop3): Remounting filesystem read-only [ 334.754095][T19708] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 334.764229][T19708] EXT4-fs (loop3): 1 orphan inode deleted [ 334.838535][T19717] FAULT_INJECTION: forcing a failure. [ 334.838535][T19717] name failslab, interval 1, probability 0, space 0, times 0 [ 334.851861][T19717] CPU: 1 UID: 0 PID: 19717 Comm: syz.6.5466 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 334.851903][T19717] Tainted: [W]=WARN [ 334.851910][T19717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 334.851924][T19717] Call Trace: [ 334.851930][T19717] [ 334.851937][T19717] __dump_stack+0x1d/0x30 [ 334.851959][T19717] dump_stack_lvl+0xe8/0x140 [ 334.851976][T19717] dump_stack+0x15/0x1b [ 334.851993][T19717] should_fail_ex+0x265/0x280 [ 334.852052][T19717] should_failslab+0x8c/0xb0 [ 334.852076][T19717] kmem_cache_alloc_noprof+0x50/0x310 [ 334.852106][T19717] ? audit_log_start+0x365/0x6c0 [ 334.852132][T19717] audit_log_start+0x365/0x6c0 [ 334.852163][T19717] audit_seccomp+0x48/0x100 [ 334.852250][T19717] ? __seccomp_filter+0x68c/0x10d0 [ 334.852273][T19717] __seccomp_filter+0x69d/0x10d0 [ 334.852343][T19717] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 334.852429][T19717] ? vfs_write+0x7e8/0x960 [ 334.852458][T19717] __secure_computing+0x82/0x150 [ 334.852480][T19717] syscall_trace_enter+0xcf/0x1e0 [ 334.852507][T19717] do_syscall_64+0xac/0x200 [ 334.852584][T19717] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 334.852659][T19717] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 334.852683][T19717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.852763][T19717] RIP: 0033:0x7f4742b9eba9 [ 334.852779][T19717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.852794][T19717] RSP: 002b:00007f47415ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000001a [ 334.852813][T19717] RAX: ffffffffffffffda RBX: 00007f4742de5fa0 RCX: 00007f4742b9eba9 [ 334.852833][T19717] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000200000fff000 [ 334.852846][T19717] RBP: 00007f47415ff090 R08: 0000000000000000 R09: 0000000000000000 [ 334.852945][T19717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 334.852956][T19717] R13: 00007f4742de6038 R14: 00007f4742de5fa0 R15: 00007ffc9cb9ed28 [ 334.852972][T19717] [ 335.110256][T19727] loop7: detected capacity change from 0 to 1024 [ 335.117341][T19727] EXT4-fs: Ignoring removed bh option [ 335.268863][T19735] serio: Serial port ptm0 [ 335.565764][T19742] loop6: detected capacity change from 0 to 512 [ 335.586496][T19750] sch_fq: defrate 4294967295 ignored. [ 335.599916][T19742] EXT4-fs (loop6): too many log groups per flexible block group [ 335.607609][T19742] EXT4-fs (loop6): failed to initialize mballoc (-12) [ 335.620153][T19742] EXT4-fs (loop6): mount failed [ 335.714037][T19759] __nla_validate_parse: 1 callbacks suppressed [ 335.714051][T19759] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5481'. [ 335.736567][T19749] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.757147][T19759] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5481'. [ 335.802141][T19765] netlink: 132 bytes leftover after parsing attributes in process `+}[@'. [ 335.847955][T19767] 9pnet_fd: Insufficient options for proto=fd [ 335.874413][T19767] team0: Device hsr_slave_0 failed to register rx_handler [ 335.912453][T19771] serio: Serial port ptm0 [ 336.297197][T19808] serio: Serial port ptm0 [ 336.431908][T19821] dummy0: left allmulticast mode [ 336.437058][T19821] bridge0: port 3(dummy0) entered disabled state [ 336.445786][T19821] bridge_slave_0: left allmulticast mode [ 336.451506][T19821] bridge_slave_0: left promiscuous mode [ 336.457148][T19821] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.466428][T19821] bridge_slave_1: left allmulticast mode [ 336.472082][T19821] bridge_slave_1: left promiscuous mode [ 336.477696][T19821] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.487318][T19821] bond0: (slave bond_slave_0): Releasing backup interface [ 336.496143][T19821] bond0: (slave bond_slave_1): Releasing backup interface [ 336.506960][T19821] team0: Port device team_slave_0 removed [ 336.514157][T19821] team0: Port device team_slave_1 removed [ 336.677440][T19840] serio: Serial port ptm0 [ 336.764322][T19777] syz.3.5488 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 336.779214][T19777] CPU: 1 UID: 0 PID: 19777 Comm: syz.3.5488 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 336.779243][T19777] Tainted: [W]=WARN [ 336.779249][T19777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 336.779261][T19777] Call Trace: [ 336.779267][T19777] [ 336.779273][T19777] __dump_stack+0x1d/0x30 [ 336.779349][T19777] dump_stack_lvl+0xe8/0x140 [ 336.779370][T19777] dump_stack+0x15/0x1b [ 336.779384][T19777] dump_header+0x81/0x220 [ 336.779412][T19777] oom_kill_process+0x342/0x400 [ 336.779489][T19777] out_of_memory+0x979/0xb80 [ 336.779523][T19777] try_charge_memcg+0x5e6/0x9e0 [ 336.779548][T19777] obj_cgroup_charge_pages+0xa6/0x150 [ 336.779582][T19777] __memcg_kmem_charge_page+0x9f/0x170 [ 336.779676][T19777] __alloc_frozen_pages_noprof+0x188/0x360 [ 336.779757][T19777] alloc_pages_mpol+0xb3/0x250 [ 336.779789][T19777] alloc_pages_noprof+0x90/0x130 [ 336.779816][T19777] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 336.779852][T19777] __kvmalloc_node_noprof+0x30f/0x4e0 [ 336.779950][T19777] ? ip_set_alloc+0x1f/0x30 [ 336.780041][T19777] ? ip_set_alloc+0x1f/0x30 [ 336.780129][T19777] ? hash_netiface_create+0x21b/0x740 [ 336.780159][T19777] ? __kmalloc_cache_noprof+0x189/0x320 [ 336.780191][T19777] ip_set_alloc+0x1f/0x30 [ 336.780213][T19777] hash_netiface_create+0x282/0x740 [ 336.780238][T19777] ? __pfx_hash_netiface_create+0x10/0x10 [ 336.780341][T19777] ip_set_create+0x3c9/0x960 [ 336.780379][T19777] ? __nla_parse+0x40/0x60 [ 336.780406][T19777] nfnetlink_rcv_msg+0x4c3/0x590 [ 336.780437][T19777] netlink_rcv_skb+0x123/0x220 [ 336.780457][T19777] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 336.780512][T19777] nfnetlink_rcv+0x16b/0x1690 [ 336.780535][T19777] ? nlmon_xmit+0x4f/0x60 [ 336.780583][T19777] ? consume_skb+0x49/0x150 [ 336.780604][T19777] ? nlmon_xmit+0x4f/0x60 [ 336.780718][T19777] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 336.780748][T19777] ? __dev_queue_xmit+0x1200/0x2000 [ 336.780776][T19777] ? __dev_queue_xmit+0x182/0x2000 [ 336.780809][T19777] ? ref_tracker_free+0x37d/0x3e0 [ 336.780839][T19777] ? __netlink_deliver_tap+0x4dc/0x500 [ 336.780892][T19777] netlink_unicast+0x5bd/0x690 [ 336.780913][T19777] netlink_sendmsg+0x58b/0x6b0 [ 336.780937][T19777] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.780981][T19777] __sock_sendmsg+0x142/0x180 [ 336.781015][T19777] ____sys_sendmsg+0x31e/0x4e0 [ 336.781047][T19777] ___sys_sendmsg+0x17b/0x1d0 [ 336.781091][T19777] __x64_sys_sendmsg+0xd4/0x160 [ 336.781121][T19777] x64_sys_call+0x191e/0x2ff0 [ 336.781148][T19777] do_syscall_64+0xd2/0x200 [ 336.781201][T19777] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 336.781278][T19777] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 336.781303][T19777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.781379][T19777] RIP: 0033:0x7ff69cd2eba9 [ 336.781393][T19777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.781408][T19777] RSP: 002b:00007ff69b78f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 336.781424][T19777] RAX: ffffffffffffffda RBX: 00007ff69cf75fa0 RCX: 00007ff69cd2eba9 [ 336.781439][T19777] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 336.781452][T19777] RBP: 00007ff69cdb1e19 R08: 0000000000000000 R09: 0000000000000000 [ 336.781465][T19777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 336.781557][T19777] R13: 00007ff69cf76038 R14: 00007ff69cf75fa0 R15: 00007ffdd1ec24c8 [ 336.781572][T19777] [ 337.120191][T19777] memory: usage 307200kB, limit 307200kB, failcnt 5694 [ 337.127502][T19777] memory+swap: usage 308800kB, limit 9007199254740988kB, failcnt 0 [ 337.135431][T19777] kmem: usage 307060kB, limit 9007199254740988kB, failcnt 0 [ 337.143425][T19777] Memory cgroup stats for /syz3: [ 337.152264][T19847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.152321][T19847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.152687][T19777] cache 0 [ 337.152694][T19777] rss 16384 [ 337.152701][T19777] shmem 0 [ 337.152708][T19777] mapped_file 0 [ 337.152716][T19777] dirty 0 [ 337.152723][T19777] writeback 0 [ 337.152729][T19777] workingset_refault_anon 596 [ 337.152736][T19777] workingset_refault_file 4912 [ 337.152784][T19777] swap 1638400 [ 337.152792][T19777] swapcached 28672 [ 337.152799][T19777] pgpgin 251746 [ 337.152805][T19777] pgpgout 251711 [ 337.152811][T19777] pgfault 285927 [ 337.152817][T19777] pgmajfault 349 [ 337.152823][T19777] inactive_anon 28672 [ 337.152830][T19777] active_anon 0 [ 337.152892][T19777] inactive_file 114688 [ 337.152900][T19777] active_file 0 [ 337.152908][T19777] unevictable 0 [ 337.152916][T19777] hierarchical_memory_limit 314572800 [ 337.152925][T19777] hierarchical_memsw_limit 9223372036854771712 [ 337.152933][T19777] total_cache 0 [ 337.152939][T19777] total_rss 16384 [ 337.152945][T19777] total_shmem 0 [ 337.152951][T19777] total_mapped_file 0 [ 337.152959][T19777] total_dirty 0 [ 337.152971][T19777] total_writeback 0 [ 337.152979][T19777] total_workingset_refault_anon 596 [ 337.152989][T19777] total_workingset_refault_file 4912 [ 337.152998][T19777] total_swap 1638400 [ 337.153007][T19777] total_swapcached 28672 [ 337.153015][T19777] total_pgpgin 251746 [ 337.153023][T19777] total_pgpgout 251711 [ 337.153032][T19777] total_pgfault 285927 [ 337.153040][T19777] total_pgmajfault 349 [ 337.153048][T19777] total_inactive_anon 28672 [ 337.153057][T19777] total_active_anon 0 [ 337.153100][T19777] total_inactive_file 114688 [ 337.153107][T19777] total_active_file 0 [ 337.153114][T19777] total_unevictable 0 [ 337.153123][T19777] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.5488,pid=19776,uid=0 [ 337.153320][T19777] Memory cgroup out of memory: Killed process 19776 (syz.3.5488) total-vm:93892kB, anon-rss:1072kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 337.204788][T19848] validate_nla: 4 callbacks suppressed [ 337.204802][T19848] netlink: 'syz.7.5513': attribute type 13 has an invalid length. [ 337.226092][T19848] net_ratelimit: 8 callbacks suppressed [ 337.226103][T19848] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 337.244020][T19848] loop7: detected capacity change from 0 to 512 [ 337.599770][T19858] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5518'. [ 337.624169][T19855] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5517'. [ 337.635354][T19855] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5517'. [ 337.824634][ T29] kauditd_printk_skb: 258 callbacks suppressed [ 337.824712][ T29] audit: type=1326 audit(337.328:35467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19863 comm="syz.7.5520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcf80ccada9 code=0x7ffc0000 [ 337.853734][ T29] audit: type=1326 audit(337.328:35468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19863 comm="syz.7.5520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf80d2eba9 code=0x7ffc0000 [ 337.876688][ T29] audit: type=1326 audit(337.328:35469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19863 comm="syz.7.5520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf80d2eba9 code=0x7ffc0000 [ 338.215564][T19749] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.276746][T19749] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.342048][T19749] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.434184][ T3444] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.452017][ T3444] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.479194][ T3444] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.496209][ T3444] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.591043][T19883] loop3: detected capacity change from 0 to 1024 [ 338.609734][T19883] EXT4-fs: Ignoring removed nobh option [ 338.615368][T19883] EXT4-fs: Ignoring removed bh option [ 338.681004][T19887] loop6: detected capacity change from 0 to 1024 [ 338.688284][T19883] EXT4-fs mount: 20 callbacks suppressed [ 338.688339][T19883] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 338.716289][T19887] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 338.726733][T19887] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 338.799951][T19887] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 338.852996][T19887] EXT4-fs error (device loop6): ext4_get_journal_inode:5800: inode #5: comm syz.6.5523: unexpected bad inode w/o EXT4_IGET_BAD [ 338.900259][T12283] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.924248][T19887] EXT4-fs (loop6): no journal found [ 338.929451][T19887] EXT4-fs (loop6): can't get journal size [ 338.950731][T19887] EXT4-fs (loop6): too many log groups per flexible block group [ 338.958417][T19887] EXT4-fs (loop6): failed to initialize mballoc (-12) [ 339.007621][T19887] EXT4-fs (loop6): mount failed [ 339.021196][T12640] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 339.032087][T12640] CPU: 0 UID: 0 PID: 12640 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 339.032159][T12640] Tainted: [W]=WARN [ 339.032165][T12640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 339.032188][T12640] Call Trace: [ 339.032194][T12640] [ 339.032219][T12640] __dump_stack+0x1d/0x30 [ 339.032264][T12640] dump_stack_lvl+0xe8/0x140 [ 339.032284][T12640] dump_stack+0x15/0x1b [ 339.032302][T12640] dump_header+0x81/0x220 [ 339.032400][T12640] oom_kill_process+0x342/0x400 [ 339.032489][T12640] out_of_memory+0x979/0xb80 [ 339.032529][T12640] try_charge_memcg+0x5e6/0x9e0 [ 339.032559][T12640] charge_memcg+0x51/0xc0 [ 339.032593][T12640] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 339.032612][T12640] __read_swap_cache_async+0x1df/0x350 [ 339.032695][T12640] swap_cluster_readahead+0x277/0x3e0 [ 339.032780][T12640] swapin_readahead+0xde/0x6f0 [ 339.032809][T12640] ? __filemap_get_folio+0x4f7/0x6b0 [ 339.032827][T12640] ? swap_cache_get_folio+0x77/0x200 [ 339.032906][T12640] do_swap_page+0x301/0x2430 [ 339.032928][T12640] ? css_rstat_updated+0xb7/0x240 [ 339.032953][T12640] ? __pfx_default_wake_function+0x10/0x10 [ 339.033050][T12640] handle_mm_fault+0x9a5/0x2c20 [ 339.033075][T12640] do_user_addr_fault+0x636/0x1090 [ 339.033127][T12640] exc_page_fault+0x62/0xa0 [ 339.033150][T12640] asm_exc_page_fault+0x26/0x30 [ 339.033167][T12640] RIP: 0033:0x7fd85b9e5be7 [ 339.033180][T12640] Code: 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 b8 fb e9 00 48 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 <48> 8b 44 24 18 48 c1 ea 12 4c 8b 0d c9 fa e9 00 48 01 d1 39 7c 24 [ 339.033196][T12640] RSP: 002b:00007ffe683ed090 EFLAGS: 00010202 [ 339.033223][T12640] RAX: 0000001b32524000 RBX: 0000000000000513 RCX: 0000000000052468 [ 339.033237][T12640] RDX: 000000000c4d841e RSI: 00007ffe683ed120 RDI: 000000000000001d [ 339.033248][T12640] RBP: 00007ffe683ed0cc R08: 000000002eee734d R09: 7fffffffffffffff [ 339.033259][T12640] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 339.033270][T12640] R13: 00000000000927c0 R14: 0000000000052550 R15: 00007ffe683ed120 [ 339.033335][T12640] [ 339.033342][T12640] memory: usage 307200kB, limit 307200kB, failcnt 6326 [ 339.152858][T19889] loop3: detected capacity change from 0 to 512 [ 339.153630][T12640] memory+swap: usage 309556kB, limit 9007199254740988kB, failcnt 0 [ 339.262118][T12640] kmem: usage 295648kB, limit 9007199254740988kB, failcnt 0 [ 339.269456][T12640] Memory cgroup stats for /syz0: [ 339.271550][T12640] cache 0 [ 339.273985][T19889] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.5525: bg 0: block 248: padding at end of block bitmap is not set [ 339.276477][T12640] rss 11755520 [ 339.276485][T12640] shmem 0 [ 339.276492][T12640] mapped_file 0 [ 339.276499][T12640] dirty 0 [ 339.279688][T19889] Quota error (device loop3): write_blk: dquota write failed [ 339.293662][T12640] writeback 0 [ 339.293729][T12640] workingset_refault_anon 1088 [ 339.293736][T12640] workingset_refault_file 9442 [ 339.293743][T12640] swap 2412544 [ 339.297139][T19889] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 339.300050][T12640] swapcached 0 [ 339.335136][T19889] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.5525: Failed to acquire dquot type 1 [ 339.340326][T12640] pgpgin 279856 [ 339.355200][T19889] EXT4-fs (loop3): 1 truncate cleaned up [ 339.358284][T12640] pgpgout 276968 [ 339.358293][T12640] pgfault 319925 [ 339.358301][T12640] pgmajfault 612 [ 339.365504][T19889] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 339.367436][T12640] inactive_anon 0 [ 339.367445][T12640] active_anon 0 [ 339.394110][T12640] inactive_file 11829248 [ 339.398327][T12640] active_file 0 [ 339.401804][T12640] unevictable 0 [ 339.405242][T12640] hierarchical_memory_limit 314572800 [ 339.410642][T12640] hierarchical_memsw_limit 9223372036854771712 [ 339.416799][T12640] total_cache 0 [ 339.420244][T12640] total_rss 11755520 [ 339.424150][T12640] total_shmem 0 [ 339.427652][T12640] total_mapped_file 0 [ 339.431641][T12640] total_dirty 0 [ 339.435083][T12640] total_writeback 0 [ 339.438934][T12640] total_workingset_refault_anon 1088 [ 339.444218][T12640] total_workingset_refault_file 9442 [ 339.449570][T12640] total_swap 2412544 [ 339.453477][T12640] total_swapcached 0 [ 339.457350][T12640] total_pgpgin 279856 [ 339.461444][T12640] total_pgpgout 276968 [ 339.465503][T12640] total_pgfault 319925 [ 339.469552][T12640] total_pgmajfault 612 [ 339.473624][T12640] total_inactive_anon 0 [ 339.477755][T12640] total_active_anon 0 [ 339.481750][T12640] total_inactive_file 11829248 [ 339.486490][T12640] total_active_file 0 [ 339.490447][T12640] total_unevictable 0 [ 339.494556][T12640] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.5518,pid=19857,uid=0 [ 339.509228][T12640] Memory cgroup out of memory: Killed process 19857 (syz.0.5518) total-vm:93892kB, anon-rss:12592kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 339.621735][T12283] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.788254][T19908] netlink: 'syz.3.5528': attribute type 13 has an invalid length. [ 339.834285][T19908] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 339.872402][T19912] loop3: detected capacity change from 0 to 512 [ 339.905375][T19912] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm +}[@: error while reading EA inode 32 err=-116 [ 339.938027][T19912] EXT4-fs (loop3): Remounting filesystem read-only [ 339.944591][T19912] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 340.005507][T19912] EXT4-fs (loop3): 1 orphan inode deleted [ 340.040286][T19912] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 340.101513][T19912] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.145410][T19920] netlink: 'syz.1.5532': attribute type 13 has an invalid length. [ 340.169528][T19920] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 340.563634][T19933] SELinux: Context system_u:object_r:inetd_exec_t:s0 is not valid (left unmapped). [ 340.577663][T19933] netlink: 'syz.7.5537': attribute type 4 has an invalid length. [ 340.581510][ T29] audit: type=1400 audit(340.078:35470): avc: denied { relabelto } for pid=19932 comm="syz.7.5537" name="file0" dev="tmpfs" ino=1889 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 340.586138][T19933] netlink: 17 bytes leftover after parsing attributes in process `syz.7.5537'. [ 340.611794][ T29] audit: type=1400 audit(340.078:35471): avc: denied { associate } for pid=19932 comm="syz.7.5537" name="file0" dev="tmpfs" ino=1889 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:inetd_exec_t:s0" [ 340.611822][ T29] audit: type=1400 audit(340.078:35472): avc: denied { setcheckreqprot } for pid=19932 comm="syz.7.5537" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 340.686741][T19943] vhci_hcd: invalid port number 96 [ 340.691883][T19943] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 340.703764][T19943] netlink: zone id is out of range [ 340.708982][T19943] netlink: zone id is out of range [ 340.714115][T19943] netlink: zone id is out of range [ 340.757111][T19946] netlink: 'syz.7.5540': attribute type 13 has an invalid length. [ 340.784922][T19946] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 340.805962][T19946] loop7: detected capacity change from 0 to 512 [ 340.825573][T19948] netlink: 324 bytes leftover after parsing attributes in process `syz.7.5541'. [ 340.836766][T19948] serio: Serial port ptm0 [ 340.913590][T19953] netlink: 324 bytes leftover after parsing attributes in process `syz.7.5542'. [ 340.942055][T19953] serio: Serial port ptm0 [ 341.073362][T19959] netlink: 'syz.7.5544': attribute type 13 has an invalid length. [ 341.089713][T19959] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 341.109034][T19959] loop7: detected capacity change from 0 to 512 [ 341.131456][T19961] wireguard0: entered promiscuous mode [ 341.136930][T19961] wireguard0: entered allmulticast mode [ 341.380505][T19971] loop3: detected capacity change from 0 to 512 [ 341.399815][T19971] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.5549: bg 0: block 248: padding at end of block bitmap is not set [ 341.400069][T19971] Quota error (device loop3): write_blk: dquota write failed [ 341.400087][T19971] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 341.400111][T19971] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.5549: Failed to acquire dquot type 1 [ 341.400599][T19971] EXT4-fs (loop3): 1 truncate cleaned up [ 341.401439][T19971] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.431376][T12283] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.440033][T19983] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5551'. [ 341.627941][T19987] netlink: 'syz.3.5554': attribute type 7 has an invalid length. [ 341.636398][T19987] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5554'. [ 341.721730][T19995] netlink: 'syz.3.5557': attribute type 13 has an invalid length. [ 341.733113][T19995] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 341.737587][T19995] loop3: detected capacity change from 0 to 512 [ 341.759627][T19995] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm +}[@: error while reading EA inode 32 err=-116 [ 341.760168][T19995] EXT4-fs (loop3): Remounting filesystem read-only [ 341.760192][T19995] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 341.760217][T19995] EXT4-fs (loop3): 1 orphan inode deleted [ 341.760740][T19995] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 341.777177][T19996] sch_fq: defrate 4294967295 ignored. [ 341.780268][T19995] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.976873][T20008] loop3: detected capacity change from 0 to 512 [ 341.993375][T20008] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #4: comm syz.3.5562: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 341.993801][T20008] EXT4-fs error (device loop3): ext4_quota_enable:7131: comm syz.3.5562: Bad quota inode: 4, type: 1 [ 341.993942][T20008] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 342.037829][T20008] EXT4-fs (loop3): mount failed [ 342.064668][T20012] netdevsim netdevsim1: Direct firmware load for ./file0/file1 failed with error -2 [ 342.069744][T20014] loop3: detected capacity change from 0 to 1024 [ 342.081103][T20014] EXT4-fs: Ignoring removed nobh option [ 342.087371][T20014] EXT4-fs: Ignoring removed bh option [ 342.103169][T20014] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.132016][T12283] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.185615][T20028] netlink: 'syz.1.5569': attribute type 13 has an invalid length. [ 342.197761][T20028] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 342.350698][T20041] FAULT_INJECTION: forcing a failure. [ 342.350698][T20041] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 342.364216][T20041] CPU: 1 UID: 0 PID: 20041 Comm: syz.0.5574 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 342.364302][T20041] Tainted: [W]=WARN [ 342.364306][T20041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 342.364313][T20041] Call Trace: [ 342.364317][T20041] [ 342.364322][T20041] __dump_stack+0x1d/0x30 [ 342.364335][T20041] dump_stack_lvl+0xe8/0x140 [ 342.364358][T20041] dump_stack+0x15/0x1b [ 342.364367][T20041] should_fail_ex+0x265/0x280 [ 342.364447][T20041] should_fail+0xb/0x20 [ 342.364458][T20041] should_fail_usercopy+0x1a/0x20 [ 342.364472][T20041] strncpy_from_user+0x25/0x230 [ 342.364529][T20041] strncpy_from_user_nofault+0x68/0xf0 [ 342.364543][T20041] bpf_probe_read_compat_str+0xb4/0x130 [ 342.364561][T20041] bpf_prog_15fefb20d90ba6ff+0x62/0x68 [ 342.364591][T20041] bpf_trace_run2+0x107/0x1c0 [ 342.364605][T20041] __bpf_trace_sys_enter+0x10/0x30 [ 342.364618][T20041] trace_sys_enter+0x86/0xf0 [ 342.364630][T20041] syscall_trace_enter+0x13e/0x1e0 [ 342.364717][T20041] do_syscall_64+0xac/0x200 [ 342.364746][T20041] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 342.364760][T20041] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 342.364819][T20041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.364886][T20041] RIP: 0033:0x7fd85bb0eba9 [ 342.364895][T20041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.364905][T20041] RSP: 002b:00007fd85a56f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 342.364917][T20041] RAX: ffffffffffffffda RBX: 00007fd85bd55fa0 RCX: 00007fd85bb0eba9 [ 342.364924][T20041] RDX: 0000000020040084 RSI: 0000200000003140 RDI: 0000000000000005 [ 342.364931][T20041] RBP: 00007fd85a56f090 R08: 0000000000000000 R09: 0000000000000000 [ 342.364983][T20041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.364989][T20041] R13: 00007fd85bd56038 R14: 00007fd85bd55fa0 R15: 00007ffe683ecd08 [ 342.365000][T20041] [ 342.569592][T20039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.587351][T20044] loop6: detected capacity change from 0 to 512 [ 342.593706][T20039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.599173][T20046] netdevsim netdevsim0: Direct firmware load for ./file0/file1 failed with error -2 [ 342.613265][T20044] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #4: comm syz.6.5575: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 342.632441][T20044] EXT4-fs error (device loop6): ext4_quota_enable:7131: comm syz.6.5575: Bad quota inode: 4, type: 1 [ 342.643816][T20044] EXT4-fs warning (device loop6): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 342.659299][T20044] EXT4-fs (loop6): mount failed [ 343.031261][T20068] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5584'. [ 343.138609][T20077] netlink: 324 bytes leftover after parsing attributes in process `syz.7.5588'. [ 343.150479][T20077] serio: Serial port ptm0 [ 343.605264][T20092] netlink: 'syz.6.5592': attribute type 13 has an invalid length. [ 343.629289][T20092] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 343.656784][T20092] loop6: detected capacity change from 0 to 512 [ 343.668644][T20092] EXT4-fs error (device loop6): ext4_xattr_inode_iget:442: comm +}[@: error while reading EA inode 32 err=-116 [ 343.680869][T20092] EXT4-fs (loop6): Remounting filesystem read-only [ 343.687552][T20092] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 343.697838][T20092] EXT4-fs (loop6): 1 orphan inode deleted [ 343.703900][T20092] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 343.716441][T20092] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.739490][T20094] loop7: detected capacity change from 0 to 512 [ 343.940397][T20121] loop6: detected capacity change from 0 to 1024 [ 343.976260][T20121] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.992076][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 343.992088][ T29] audit: type=1400 audit(343.498:35504): avc: denied { read } for pid=20120 comm="syz.6.5603" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 344.027060][T20121] netlink: 14 bytes leftover after parsing attributes in process `syz.6.5603'. [ 344.752719][T20138] netlink: 'syz.0.5608': attribute type 13 has an invalid length. [ 344.800637][T20138] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 344.977265][T19515] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.993333][T20165] netlink: 324 bytes leftover after parsing attributes in process `syz.1.5619'. [ 345.024820][T20165] serio: Serial port ptm0 [ 345.131621][T20173] netlink: 'syz.1.5623': attribute type 13 has an invalid length. [ 345.157764][T20173] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 345.280356][T20181] netlink: 'syz.1.5625': attribute type 13 has an invalid length. [ 345.312212][T20181] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 345.699591][T20157] syz.3.5617 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 345.713960][T20157] CPU: 0 UID: 0 PID: 20157 Comm: syz.3.5617 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 345.714059][T20157] Tainted: [W]=WARN [ 345.714070][T20157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 345.714083][T20157] Call Trace: [ 345.714097][T20157] [ 345.714104][T20157] __dump_stack+0x1d/0x30 [ 345.714126][T20157] dump_stack_lvl+0xe8/0x140 [ 345.714143][T20157] dump_stack+0x15/0x1b [ 345.714158][T20157] dump_header+0x81/0x220 [ 345.714203][T20157] oom_kill_process+0x342/0x400 [ 345.714375][T20157] out_of_memory+0x979/0xb80 [ 345.714404][T20157] try_charge_memcg+0x5e6/0x9e0 [ 345.714431][T20157] obj_cgroup_charge_pages+0xa6/0x150 [ 345.714465][T20157] __memcg_kmem_charge_page+0x9f/0x170 [ 345.714558][T20157] __alloc_frozen_pages_noprof+0x188/0x360 [ 345.714599][T20157] alloc_pages_mpol+0xb3/0x250 [ 345.714641][T20157] alloc_pages_noprof+0x90/0x130 [ 345.714667][T20157] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 345.714747][T20157] __kvmalloc_node_noprof+0x30f/0x4e0 [ 345.714773][T20157] ? ip_set_alloc+0x1f/0x30 [ 345.714791][T20157] ? ip_set_alloc+0x1f/0x30 [ 345.714847][T20157] ? __kmalloc_cache_noprof+0x189/0x320 [ 345.714876][T20157] ip_set_alloc+0x1f/0x30 [ 345.714893][T20157] hash_netiface_create+0x282/0x740 [ 345.714914][T20157] ? __pfx_hash_netiface_create+0x10/0x10 [ 345.714935][T20157] ip_set_create+0x3c9/0x960 [ 345.714990][T20157] nfnetlink_rcv_msg+0x4c3/0x590 [ 345.715027][T20157] netlink_rcv_skb+0x123/0x220 [ 345.715053][T20157] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 345.715081][T20157] nfnetlink_rcv+0x16b/0x1690 [ 345.715123][T20157] ? nlmon_xmit+0x4f/0x60 [ 345.715148][T20157] ? consume_skb+0x49/0x150 [ 345.715201][T20157] ? nlmon_xmit+0x4f/0x60 [ 345.715286][T20157] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 345.715310][T20157] ? __dev_queue_xmit+0x1200/0x2000 [ 345.715332][T20157] ? __dev_queue_xmit+0x182/0x2000 [ 345.715367][T20157] ? ref_tracker_free+0x37d/0x3e0 [ 345.715398][T20157] ? __netlink_deliver_tap+0x4dc/0x500 [ 345.715433][T20157] netlink_unicast+0x5bd/0x690 [ 345.715456][T20157] netlink_sendmsg+0x58b/0x6b0 [ 345.715480][T20157] ? __pfx_netlink_sendmsg+0x10/0x10 [ 345.715540][T20157] __sock_sendmsg+0x142/0x180 [ 345.715569][T20157] ____sys_sendmsg+0x31e/0x4e0 [ 345.715663][T20157] ___sys_sendmsg+0x17b/0x1d0 [ 345.715705][T20157] __x64_sys_sendmsg+0xd4/0x160 [ 345.715734][T20157] x64_sys_call+0x191e/0x2ff0 [ 345.715833][T20157] do_syscall_64+0xd2/0x200 [ 345.715861][T20157] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 345.715885][T20157] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 345.715913][T20157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.715995][T20157] RIP: 0033:0x7ff69cd2eba9 [ 345.716011][T20157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.716030][T20157] RSP: 002b:00007ff69b78f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 345.716051][T20157] RAX: ffffffffffffffda RBX: 00007ff69cf75fa0 RCX: 00007ff69cd2eba9 [ 345.716066][T20157] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 345.716080][T20157] RBP: 00007ff69cdb1e19 R08: 0000000000000000 R09: 0000000000000000 [ 345.716172][T20157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 345.716195][T20157] R13: 00007ff69cf76038 R14: 00007ff69cf75fa0 R15: 00007ffdd1ec24c8 [ 345.716212][T20157] [ 345.716218][T20157] memory: usage 307200kB, limit 307200kB, failcnt 5874 [ 346.052796][T20157] memory+swap: usage 309000kB, limit 9007199254740988kB, failcnt 0 [ 346.060707][T20157] kmem: usage 307088kB, limit 9007199254740988kB, failcnt 0 [ 346.067999][T20157] Memory cgroup stats for /syz3: [ 346.069418][T20157] cache 0 [ 346.077295][T20157] rss 0 [ 346.080052][T20157] shmem 0 [ 346.083027][T20157] mapped_file 0 [ 346.086547][T20157] dirty 0 [ 346.089467][T20157] writeback 0 [ 346.092805][T20157] workingset_refault_anon 626 [ 346.097462][T20157] workingset_refault_file 5169 [ 346.102304][T20157] swap 1843200 [ 346.105661][T20157] swapcached 0 [ 346.109011][T20157] pgpgin 257821 [ 346.112476][T20157] pgpgout 257793 [ 346.116066][T20157] pgfault 293474 [ 346.119590][T20157] pgmajfault 366 [ 346.123198][T20157] inactive_anon 0 [ 346.125424][T20199] loop6: detected capacity change from 0 to 512 [ 346.126813][T20157] active_anon 0 [ 346.126821][T20157] inactive_file 0 [ 346.126829][T20157] active_file 114688 [ 346.126836][T20157] unevictable 0 [ 346.126844][T20157] hierarchical_memory_limit 314572800 [ 346.133351][ T29] audit: type=1400 audit(345.618:35505): avc: denied { write } for pid=20196 comm="syz.6.5631" lport=46067 faddr=::ffff:100.1.1.1 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 346.136515][T20157] hierarchical_memsw_limit 9223372036854771712 [ 346.136527][T20157] total_cache 0 [ 346.136534][T20157] total_rss 0 [ 346.136541][T20157] total_shmem 0 [ 346.140151][ T29] audit: type=1400 audit(345.618:35506): avc: denied { getopt } for pid=20196 comm="syz.6.5631" lport=46067 faddr=::ffff:100.1.1.1 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 346.144047][T20157] total_mapped_file 0 [ 346.144091][T20157] total_dirty 0 [ 346.144099][T20157] total_writeback 0 [ 346.144105][T20157] total_workingset_refault_anon 626 [ 346.144114][T20157] total_workingset_refault_file 5169 [ 346.144122][T20157] total_swap 1843200 [ 346.144128][T20157] total_swapcached 0 [ 346.144137][T20157] total_pgpgin 257821 [ 346.144154][T20157] total_pgpgout 257793 [ 346.144163][T20157] total_pgfault 293474 [ 346.144171][T20157] total_pgmajfault 366 [ 346.144180][T20157] total_inactive_anon 0 [ 346.144189][T20157] total_active_anon 0 [ 346.144197][T20157] total_inactive_file 0 [ 346.144204][T20157] total_active_file 114688 [ 346.144212][T20157] total_unevictable 0 [ 346.144225][T20157] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.5617,pid=20156,uid=0 [ 346.144343][T20157] Memory cgroup out of memory: Killed process 20156 (syz.3.5617) total-vm:93892kB, anon-rss:1072kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 346.382779][T20203] netlink: 324 bytes leftover after parsing attributes in process `syz.7.5633'. [ 346.402642][T20203] serio: Serial port ptm0 [ 346.468626][T20199] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #4: comm syz.6.5631: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 346.518980][T20210] netlink: 'syz.7.5635': attribute type 13 has an invalid length. [ 346.530759][T20199] EXT4-fs error (device loop6): ext4_quota_enable:7131: comm syz.6.5631: Bad quota inode: 4, type: 1 [ 346.546421][T20212] netlink: 'syz.1.5637': attribute type 13 has an invalid length. [ 346.562900][T20199] EXT4-fs warning (device loop6): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 346.584079][T20210] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 346.609543][T20213] loop7: detected capacity change from 0 to 512 [ 346.616706][T20212] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 346.634771][T20199] EXT4-fs (loop6): mount failed [ 346.801470][ T29] audit: type=1326 audit(346.288:35507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20223 comm="syz.6.5641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4742b9eba9 code=0x7ffc0000 [ 346.824450][ T29] audit: type=1326 audit(346.288:35508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20223 comm="syz.6.5641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4742b9eba9 code=0x7ffc0000 [ 346.847474][ T29] audit: type=1326 audit(346.288:35509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20223 comm="syz.6.5641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f4742b9eba9 code=0x7ffc0000 [ 346.870467][ T29] audit: type=1326 audit(346.288:35510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20223 comm="syz.6.5641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4742b9eba9 code=0x7ffc0000 [ 346.893418][ T29] audit: type=1326 audit(346.288:35511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20223 comm="syz.6.5641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4742b9eba9 code=0x7ffc0000 [ 346.916409][ T29] audit: type=1326 audit(346.288:35512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20223 comm="syz.6.5641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4742b9eba9 code=0x7ffc0000 [ 346.939350][ T29] audit: type=1326 audit(346.288:35513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20223 comm="syz.6.5641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4742b9eba9 code=0x7ffc0000 [ 347.124382][T20234] binfmt_misc: register: failed to install interpreter file ./file0 [ 347.188613][T20237] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 347.199183][T20237] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 347.257691][T20230] Set syz1 is full, maxelem 65536 reached [ 347.286695][T20236] netlink: 'syz.1.5644': attribute type 1 has an invalid length. [ 347.314547][T20243] netlink: 324 bytes leftover after parsing attributes in process `syz.7.5647'. [ 347.325356][T20243] serio: Serial port ptm0 [ 347.465102][T20252] netlink: 'syz.1.5650': attribute type 13 has an invalid length. [ 347.498853][T20248] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 347.505913][T20248] batman_adv: batadv0: Removing interface: veth1_vlan [ 347.525170][T20255] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5649'. [ 347.550293][T20252] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 347.629758][T20265] netlink: 176 bytes leftover after parsing attributes in process `syz.1.5655'. [ 347.745381][T20273] sch_fq: defrate 4294967295 ignored. [ 347.813608][T20279] netdevsim netdevsim1: Direct firmware load for ./file0/file1 failed with error -2 [ 348.075564][T12640] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 348.086479][T12640] CPU: 0 UID: 0 PID: 12640 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 348.086508][T12640] Tainted: [W]=WARN [ 348.086515][T12640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 348.086647][T12640] Call Trace: [ 348.086654][T12640] [ 348.086661][T12640] __dump_stack+0x1d/0x30 [ 348.086701][T12640] dump_stack_lvl+0xe8/0x140 [ 348.086721][T12640] dump_stack+0x15/0x1b [ 348.086737][T12640] dump_header+0x81/0x220 [ 348.086824][T12640] oom_kill_process+0x342/0x400 [ 348.086863][T12640] out_of_memory+0x979/0xb80 [ 348.086922][T12640] try_charge_memcg+0x5e6/0x9e0 [ 348.086947][T12640] charge_memcg+0x51/0xc0 [ 348.086967][T12640] __mem_cgroup_charge+0x28/0xb0 [ 348.087064][T12640] filemap_add_folio+0x4e/0x1b0 [ 348.087092][T12640] __filemap_get_folio+0x31e/0x6b0 [ 348.087112][T12640] filemap_fault+0x41f/0xb40 [ 348.087136][T12640] __do_fault+0xb9/0x200 [ 348.087220][T12640] handle_mm_fault+0xf78/0x2c20 [ 348.087246][T12640] do_user_addr_fault+0x636/0x1090 [ 348.087278][T12640] ? fpregs_restore_userregs+0xad/0x1d0 [ 348.087308][T12640] ? switch_fpu_return+0xe/0x20 [ 348.087353][T12640] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 348.087379][T12640] exc_page_fault+0x62/0xa0 [ 348.087408][T12640] asm_exc_page_fault+0x26/0x30 [ 348.087428][T12640] RIP: 0033:0x7fd85b9e5be4 [ 348.087454][T12640] Code: 85 ed 09 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 b8 fb e9 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d c9 fa e9 00 48 01 d1 [ 348.087470][T12640] RSP: 002b:00007ffe683ed090 EFLAGS: 00010206 [ 348.087565][T12640] RAX: 0000001b32524000 RBX: 000000000000053f RCX: 0000000000054b78 [ 348.087577][T12640] RDX: 00000000082b7a40 RSI: 00007ffe683ed120 RDI: 0000000000000001 [ 348.087591][T12640] RBP: 00007ffe683ed0cc R08: 000000001f2a5a89 R09: 7fffffffffffffff [ 348.087672][T12640] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 348.087683][T12640] R13: 00000000000927c0 R14: 0000000000054af0 R15: 00007ffe683ed120 [ 348.087700][T12640] [ 348.087706][T12640] memory: usage 307200kB, limit 307200kB, failcnt 6710 [ 348.295134][T12640] memory+swap: usage 309548kB, limit 9007199254740988kB, failcnt 0 [ 348.303076][T12640] kmem: usage 306972kB, limit 9007199254740988kB, failcnt 0 [ 348.310418][T12640] Memory cgroup stats for /syz0: [ 348.335641][T12640] cache 4096 [ 348.343862][T12640] rss 0 [ 348.346987][T12640] shmem 0 [ 348.349905][T12640] mapped_file 4096 [ 348.354323][T12640] dirty 4096 [ 348.357702][T12640] writeback 0 [ 348.361206][T12640] workingset_refault_anon 1158 [ 348.365973][T12640] workingset_refault_file 9991 [ 348.370815][T12640] swap 2547712 [ 348.374196][T12640] swapcached 0 [ 348.377548][T12640] pgpgin 281484 [ 348.380990][T12640] pgpgout 281465 [ 348.385100][T12640] pgfault 322136 [ 348.388635][T12640] pgmajfault 640 [ 348.392258][T12640] inactive_anon 0 [ 348.395874][T12640] active_anon 0 [ 348.399319][T12640] inactive_file 77824 [ 348.403320][T12640] active_file 0 [ 348.406768][T12640] unevictable 0 [ 348.410222][T12640] hierarchical_memory_limit 314572800 [ 348.416005][T12640] hierarchical_memsw_limit 9223372036854771712 [ 348.422276][T12640] total_cache 4096 [ 348.425978][T12640] total_rss 0 [ 348.429234][T12640] total_shmem 0 [ 348.432699][T12640] total_mapped_file 4096 [ 348.436910][T12640] total_dirty 4096 [ 348.440653][T12640] total_writeback 0 [ 348.444851][T12640] total_workingset_refault_anon 1158 [ 348.450104][T12640] total_workingset_refault_file 9991 [ 348.455367][T12640] total_swap 2547712 [ 348.459231][T12640] total_swapcached 0 [ 348.463104][T12640] total_pgpgin 281484 [ 348.467057][T12640] total_pgpgout 281465 [ 348.471631][T12640] total_pgfault 322136 [ 348.475749][T12640] total_pgmajfault 640 [ 348.479818][T12640] total_inactive_anon 0 [ 348.483962][T12640] total_active_anon 0 [ 348.487924][T12640] total_inactive_file 77824 [ 348.492475][T12640] total_active_file 0 [ 348.496550][T12640] total_unevictable 0 [ 348.500631][T12640] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.5646,pid=20240,uid=0 [ 348.516015][T12640] Memory cgroup out of memory: Killed process 20240 (syz.0.5646) total-vm:93892kB, anon-rss:1068kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 348.728397][T20295] lo speed is unknown, defaulting to 1000 [ 348.739471][T20293] netlink: 'syz.1.5667': attribute type 1 has an invalid length. [ 348.841315][T20307] netlink: 316 bytes leftover after parsing attributes in process `syz.0.5672'. [ 348.851872][T20308] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.5671'. [ 348.868574][T20307] serio: Serial port ptm0 [ 348.893636][T20314] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 348.917536][T20318] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5678'. [ 349.008643][T20331] FAULT_INJECTION: forcing a failure. [ 349.008643][T20331] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 349.021724][T20331] CPU: 0 UID: 0 PID: 20331 Comm: syz.3.5683 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 349.021818][T20331] Tainted: [W]=WARN [ 349.021822][T20331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 349.021829][T20331] Call Trace: [ 349.021833][T20331] [ 349.021837][T20331] __dump_stack+0x1d/0x30 [ 349.021915][T20331] dump_stack_lvl+0xe8/0x140 [ 349.021935][T20331] dump_stack+0x15/0x1b [ 349.021952][T20331] should_fail_ex+0x265/0x280 [ 349.021977][T20331] should_fail+0xb/0x20 [ 349.021997][T20331] should_fail_usercopy+0x1a/0x20 [ 349.022063][T20331] strncpy_from_user+0x25/0x230 [ 349.022139][T20331] strncpy_from_user_nofault+0x68/0xf0 [ 349.022184][T20331] bpf_probe_read_compat_str+0xb4/0x130 [ 349.022202][T20331] bpf_prog_15fefb20d90ba6ff+0x62/0x68 [ 349.022212][T20331] bpf_trace_run2+0x107/0x1c0 [ 349.022226][T20331] __bpf_trace_sys_enter+0x10/0x30 [ 349.022308][T20331] trace_sys_enter+0x86/0xf0 [ 349.022320][T20331] syscall_trace_enter+0x13e/0x1e0 [ 349.022345][T20331] do_syscall_64+0xac/0x200 [ 349.022394][T20331] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 349.022411][T20331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.022422][T20331] RIP: 0033:0x7ff69cd2eba9 [ 349.022431][T20331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.022441][T20331] RSP: 002b:00007ff69b78f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ba [ 349.022523][T20331] RAX: ffffffffffffffda RBX: 00007ff69cf75fa0 RCX: 00007ff69cd2eba9 [ 349.022530][T20331] RDX: 0000000000009000 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 349.022537][T20331] RBP: 00007ff69b78f090 R08: 0000000000000020 R09: 0000000000000000 [ 349.022544][T20331] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 349.022551][T20331] R13: 00007ff69cf76038 R14: 00007ff69cf75fa0 R15: 00007ffdd1ec24c8 [ 349.022562][T20331] [ 349.380504][T20351] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5690'. [ 349.400578][T20353] netlink: 324 bytes leftover after parsing attributes in process `syz.7.5691'. [ 349.410962][T20353] serio: Serial port ptm0 [ 349.478887][ T29] kauditd_printk_skb: 113 callbacks suppressed [ 349.478908][ T29] audit: type=1400 audit(348.978:35627): avc: denied { bind } for pid=20347 comm="syz.1.5689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 349.504422][T20355] usb usb8: usbfs: process 20355 (syz.1.5689) did not claim interface 0 before use [ 349.523840][T20355] lo speed is unknown, defaulting to 1000 [ 349.568777][ T29] audit: type=1326 audit(349.068:35628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20356 comm="syz.7.5692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf80d2eba9 code=0x7ffc0000 [ 349.591771][ T29] audit: type=1326 audit(349.068:35629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20356 comm="syz.7.5692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf80d2eba9 code=0x7ffc0000 [ 349.614695][ T29] audit: type=1326 audit(349.068:35630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20356 comm="syz.7.5692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7fcf80d2eba9 code=0x7ffc0000 [ 349.637699][ T29] audit: type=1326 audit(349.068:35631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20356 comm="syz.7.5692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf80d2eba9 code=0x7ffc0000 [ 349.660651][ T29] audit: type=1326 audit(349.068:35632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20356 comm="syz.7.5692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf80d2eba9 code=0x7ffc0000 [ 349.683611][ T29] audit: type=1326 audit(349.068:35633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20356 comm="syz.7.5692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf80d2eba9 code=0x7ffc0000 [ 349.706621][ T29] audit: type=1326 audit(349.068:35634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20356 comm="syz.7.5692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf80d2eba9 code=0x7ffc0000 [ 349.729559][ T29] audit: type=1326 audit(349.068:35635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20356 comm="syz.7.5692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf80d2eba9 code=0x7ffc0000 [ 349.752511][ T29] audit: type=1326 audit(349.068:35636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20356 comm="syz.7.5692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcf80d2eba9 code=0x7ffc0000 [ 349.808573][T20364] netlink: 316 bytes leftover after parsing attributes in process `syz.7.5695'. [ 349.820122][T20364] serio: Serial port ptm0 [ 350.007842][T20386] loop6: detected capacity change from 0 to 512 [ 350.034347][T20386] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.5697: bg 0: block 248: padding at end of block bitmap is not set [ 350.050190][T20386] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.5697: Failed to acquire dquot type 1 [ 350.062096][T20386] EXT4-fs (loop6): 1 truncate cleaned up [ 350.068160][T20386] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.114637][T19515] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.223318][T20401] can0: slcan on ttyS3. [ 350.224024][T20398] binfmt_misc: register: failed to install interpreter file ./file0 [ 350.248406][T20405] loop6: detected capacity change from 0 to 1024 [ 350.257288][T20405] EXT4-fs: Ignoring removed nobh option [ 350.263009][T20405] EXT4-fs: Ignoring removed bh option [ 350.289470][T20405] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.307519][T20408] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 350.323453][T19515] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.332465][T20408] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 350.401461][T20414] netlink: 'syz.0.5714': attribute type 13 has an invalid length. [ 350.427046][T20414] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 350.554673][T20428] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 350.554704][ T36] IPVS: starting estimator thread 0... [ 350.651305][T20434] IPVS: using max 2640 ests per chain, 132000 per kthread [ 350.658447][T20400] can0 (unregistered): slcan off ttyS3. [ 350.755842][T20452] serio: Serial port ptm1 [ 351.270380][T20461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.279011][T20461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.322086][T20469] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=20469 comm=syz.1.5734 [ 351.449206][T20475] __nla_validate_parse: 4 callbacks suppressed [ 351.449217][T20475] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5736'. [ 351.519869][T20482] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=24 sclass=netlink_audit_socket pid=20482 comm=syz.6.5739 [ 351.546087][T20483] netlink: 'syz.0.5740': attribute type 13 has an invalid length. [ 351.561416][T20483] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 351.641440][T20493] netlink: 'syz.3.5745': attribute type 13 has an invalid length. [ 351.657472][T20493] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 351.696228][T20497] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5746'. [ 351.816620][T20501] netlink: 'syz.7.5748': attribute type 5 has an invalid length. [ 352.495945][T20514] netlink: 'syz.0.5753': attribute type 13 has an invalid length. [ 352.516083][T20514] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 352.532060][T20521] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5756'. [ 352.541069][T20521] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5756'. [ 352.550035][T20521] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5756'. [ 352.560373][T20521] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5756'. [ 352.569414][T20521] netlink: 'syz.6.5756': attribute type 6 has an invalid length. [ 352.604452][T20531] netdevsim netdevsim0: Direct firmware load for ./file0/file1 failed with error -2 [ 352.629100][T20533] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5761'. [ 352.638197][T20533] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 352.656939][T20534] sch_fq: defrate 4294967295 ignored. [ 352.710323][T20539] netlink: 'syz.0.5763': attribute type 13 has an invalid length. [ 352.725810][T20539] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 352.779411][T20546] netlink: 'syz.3.5767': attribute type 13 has an invalid length. [ 352.788075][T20524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.797200][T20524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.805372][T20546] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 352.861456][T20552] netlink: 'syz.0.5769': attribute type 13 has an invalid length. [ 352.876613][T20552] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 352.877625][T20554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5770'. [ 352.976729][T20567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5775'. [ 353.127356][T20577] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 353.522522][T20602] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5788'. [ 353.763801][T20609] wg2: entered promiscuous mode [ 353.768724][T20609] wg2: entered allmulticast mode [ 353.802564][T20611] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551615) [ 353.812995][T20611] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 353.903221][T20615] validate_nla: 2 callbacks suppressed [ 353.903233][T20615] netlink: 'syz.3.5794': attribute type 13 has an invalid length. [ 353.978202][T20618] lo speed is unknown, defaulting to 1000 [ 354.402735][T20626] sch_fq: defrate 4294967295 ignored. [ 354.508771][T20629] netdevsim netdevsim1: Direct firmware load for ./file0/file1 failed with error -2 [ 354.825820][T20634] loop7: detected capacity change from 0 to 512 [ 355.430391][ T29] kauditd_printk_skb: 270 callbacks suppressed [ 355.430405][ T29] audit: type=1326 audit(354.928:35905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20655 comm="syz.3.5808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69cd2eba9 code=0x7ffc0000 [ 355.432212][T20656] ipvlan2: entered promiscuous mode [ 355.441160][ T29] audit: type=1326 audit(354.938:35906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20655 comm="syz.3.5808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff69cd2eba9 code=0x7ffc0000 [ 355.487798][ T29] audit: type=1326 audit(354.938:35907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20655 comm="syz.3.5808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69cd2eba9 code=0x7ffc0000 [ 355.510746][ T29] audit: type=1326 audit(354.938:35908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20655 comm="syz.3.5808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69cd2eba9 code=0x7ffc0000 [ 355.534340][ T29] audit: type=1326 audit(354.968:35909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20655 comm="syz.3.5808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7ff69cd2eba9 code=0x7ffc0000 [ 355.557373][ T29] audit: type=1326 audit(354.968:35910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20655 comm="syz.3.5808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69cd2eba9 code=0x7ffc0000 [ 355.580338][ T29] audit: type=1326 audit(354.968:35911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20655 comm="syz.3.5808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69cd2eba9 code=0x7ffc0000 [ 355.603296][ T29] audit: type=1326 audit(354.968:35912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20655 comm="syz.3.5808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7ff69cd2eba9 code=0x7ffc0000 [ 355.626233][ T29] audit: type=1326 audit(354.968:35913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20655 comm="syz.3.5808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69cd2eba9 code=0x7ffc0000 [ 355.649219][ T29] audit: type=1326 audit(354.968:35914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20655 comm="syz.3.5808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69cd2eba9 code=0x7ffc0000 [ 355.700601][T20658] lo speed is unknown, defaulting to 1000 [ 355.709370][T20662] loop6: detected capacity change from 0 to 512 [ 355.719626][T20662] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.5810: bg 0: block 5: invalid block bitmap [ 355.733187][T20662] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 355.743184][T20662] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.5810: invalid indirect mapped block 3 (level 2) [ 355.762941][T20662] EXT4-fs (loop6): 2 truncates cleaned up [ 355.769311][T20662] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.782892][T20662] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.898378][T20704] loop7: detected capacity change from 0 to 128 [ 356.904882][T20704] EXT4-fs: Ignoring removed i_version option [ 356.916742][T20704] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20704 comm=syz.7.5825 [ 357.632608][T20750] sch_fq: defrate 4294967295 ignored. [ 357.856405][T20760] lo speed is unknown, defaulting to 1000 [ 358.412915][T20775] netlink: 'syz.6.5845': attribute type 13 has an invalid length. [ 358.436773][T20775] net_ratelimit: 3 callbacks suppressed [ 358.436784][T20775] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 358.477753][T20780] loop6: detected capacity change from 0 to 512 [ 358.504798][T20780] EXT4-fs error (device loop6): ext4_xattr_inode_iget:442: comm +}[@: error while reading EA inode 32 err=-116 [ 358.516738][T20780] EXT4-fs (loop6): Remounting filesystem read-only [ 358.523360][T20780] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 358.538019][T20780] EXT4-fs (loop6): 1 orphan inode deleted [ 358.557658][T20780] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 358.576894][T20780] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.593590][T20790] netlink: 'syz.7.5851': attribute type 13 has an invalid length. [ 358.623126][T20790] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 358.646546][T20790] loop7: detected capacity change from 0 to 512 [ 358.659338][T20794] loop6: detected capacity change from 0 to 512 [ 358.675162][T20794] EXT4-fs error (device loop6): ext4_quota_enable:7128: inode #4: comm syz.6.5852: iget: bogus i_mode (4200) [ 358.689730][T20794] EXT4-fs error (device loop6): ext4_quota_enable:7131: comm syz.6.5852: Bad quota inode: 4, type: 1 [ 358.702066][T20779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.710753][T20794] EXT4-fs warning (device loop6): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 358.725588][T20779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.735648][T20794] EXT4-fs (loop6): mount failed [ 358.753438][T20794] loop6: detected capacity change from 0 to 1024 [ 358.760313][T20794] EXT4-fs: Ignoring removed bh option [ 358.766900][T20794] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 358.769377][T20791] lo speed is unknown, defaulting to 1000 [ 358.778489][T20794] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce018, mo2=0000] [ 358.791858][T20794] System zones: 0-1, 3-12 [ 358.797322][T20794] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #3: block 1: comm syz.6.5852: lblock 1 mapped to illegal pblock 1 (length 1) [ 358.812381][T20794] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.5852: Failed to acquire dquot type 0 [ 358.824027][T20794] EXT4-fs error (device loop6): ext4_free_blocks:6696: comm syz.6.5852: Freeing blocks not in datazone - block = 0, count = 4096 [ 358.837473][T20794] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.5852: Invalid inode bitmap blk 0 in block_group 0 [ 358.850211][T20730] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:15: lblock 1 mapped to illegal pblock 1 (length 1) [ 358.850770][T20730] EXT4-fs error (device loop6): ext4_release_dquot:6973: comm kworker/u8:15: Failed to release dquot type 0 [ 358.876731][T20794] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem [ 358.886025][T20794] EXT4-fs (loop6): 1 orphan inode deleted [ 358.888558][T20791] chnl_net:caif_netlink_parms(): no params data found [ 358.893587][T20794] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 358.933856][T20791] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.940944][T20791] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.948105][T20791] bridge_slave_0: entered allmulticast mode [ 358.954435][T20791] bridge_slave_0: entered promiscuous mode [ 358.961073][T20791] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.968181][T20791] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.975380][T20791] bridge_slave_1: entered allmulticast mode [ 358.981951][T20791] bridge_slave_1: entered promiscuous mode [ 359.000779][T20791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.015295][T20791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.037708][T20791] team0: Port device team_slave_0 added [ 359.133042][T20794] netlink: 'syz.6.5852': attribute type 21 has an invalid length. [ 359.173081][ T51] bond0 (unregistering): Released all slaves [ 359.181058][ T51] bond1 (unregistering): Released all slaves [ 359.188165][T20814] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 359.197182][T20791] team0: Port device team_slave_1 added [ 359.204789][T20794] __nla_validate_parse: 1 callbacks suppressed [ 359.204803][T20794] netlink: 156 bytes leftover after parsing attributes in process `syz.6.5852'. [ 359.220035][T20794] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5852'. [ 359.237702][T20791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.245325][T20791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.271922][T20791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.283488][T20791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.290422][T20791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.316976][T20791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.330447][ T51] hsr_slave_0: left promiscuous mode [ 359.341982][ T51] hsr_slave_1: left promiscuous mode [ 359.416922][T20820] sch_fq: defrate 4294967295 ignored. [ 359.428839][T20791] hsr_slave_0: entered promiscuous mode [ 359.434904][T20791] hsr_slave_1: entered promiscuous mode [ 359.440709][T20791] debugfs: 'hsr0' already exists in 'hsr' [ 359.446808][T20791] Cannot create hsr debugfs directory [ 359.562694][T20823] loop7: detected capacity change from 0 to 1764 [ 359.719725][T20831] serio: Serial port ptm0 [ 359.782672][T20791] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 359.793053][T20791] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 359.809260][T19515] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.820197][T20791] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 359.831055][T20791] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 359.860596][T20838] netlink: 'syz.6.5862': attribute type 13 has an invalid length. [ 359.880732][T20838] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 359.904156][T20838] loop6: detected capacity change from 0 to 512 [ 359.914933][T20838] EXT4-fs error (device loop6): ext4_xattr_inode_iget:442: comm +}[@: error while reading EA inode 32 err=-116 [ 359.929350][T20838] EXT4-fs (loop6): Remounting filesystem read-only [ 359.930098][T20791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.935943][T20838] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 359.935970][T20838] EXT4-fs (loop6): 1 orphan inode deleted [ 359.936287][T20838] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 359.971333][ T3366] IPVS: starting estimator thread 0... [ 359.977311][T20791] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.984805][T20838] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.001192][T20730] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.008247][T20730] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.017905][T20730] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.024979][T20730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.081844][T20849] IPVS: using max 2640 ests per chain, 132000 per kthread [ 360.094777][T20791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.174524][T20791] veth0_vlan: entered promiscuous mode [ 360.184110][T20791] veth1_vlan: entered promiscuous mode [ 360.210618][T20791] veth0_macvtap: entered promiscuous mode [ 360.219366][T20791] veth1_macvtap: entered promiscuous mode [ 360.226500][T20867] tipc: Started in network mode [ 360.231472][T20867] tipc: Node identity 7e90e911536, cluster identity 4711 [ 360.238557][T20867] tipc: Enabled bearer , priority 0 [ 360.246707][T20867] tipc: Disabling bearer [ 360.257129][T20791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.267616][T20791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.277971][ T31] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.286867][ T31] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.296704][ T31] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.310000][ T31] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.339599][T20869] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=20869 comm=syz.0.5867 [ 360.378351][T20872] netlink: 'syz.1.5850': attribute type 13 has an invalid length. [ 360.415600][T20872] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 360.569776][T20874] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5868'. [ 360.673185][T20892] sch_fq: defrate 4294967295 ignored. [ 360.699144][T20894] netlink: 'syz.0.5876': attribute type 13 has an invalid length. [ 360.712160][T20894] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 360.837177][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 360.837190][ T29] audit: type=1326 audit(360.338:35976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20903 comm="syz.0.5879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd85bb0eba9 code=0x7ffc0000 [ 360.867205][ T29] audit: type=1326 audit(360.338:35977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20903 comm="syz.0.5879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd85bb0eba9 code=0x7ffc0000 [ 360.890471][ T29] audit: type=1326 audit(360.358:35978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20903 comm="syz.0.5879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fd85bb0eba9 code=0x7ffc0000 [ 360.914331][ T29] audit: type=1326 audit(360.358:35979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20903 comm="syz.0.5879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd85bb0eba9 code=0x7ffc0000 [ 360.937464][ T29] audit: type=1326 audit(360.358:35980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20903 comm="syz.0.5879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd85bb0eba9 code=0x7ffc0000 [ 360.961026][ T29] audit: type=1326 audit(360.358:35981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20903 comm="syz.0.5879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7fd85bb0eba9 code=0x7ffc0000 [ 360.989598][T20908] loop6: detected capacity change from 0 to 1024 [ 360.996394][T20909] loop7: detected capacity change from 0 to 512 [ 361.005080][T20908] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 361.015971][T20908] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 361.023864][ T29] audit: type=1326 audit(360.518:35982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20903 comm="syz.0.5879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd85bb0eba9 code=0x7ffc0000 [ 361.049083][ T29] audit: type=1326 audit(360.518:35983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20903 comm="syz.0.5879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd85bb0eba9 code=0x7ffc0000 [ 361.050276][T20908] JBD2: no valid journal superblock found [ 361.078170][T20908] EXT4-fs (loop6): Could not load journal inode [ 361.124559][T20914] loop7: detected capacity change from 0 to 2048 [ 361.153999][T20914] loop7: detected capacity change from 0 to 512 [ 361.168387][T20908] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 361.253082][ T29] audit: type=1401 audit(360.758:35984): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 361.343736][T20940] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.5889'. [ 361.526744][T20939] loop7: detected capacity change from 0 to 512 [ 361.576041][ T29] audit: type=1326 audit(361.078:35985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20956 comm="syz.7.5897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf80d2eba9 code=0x7ffc0000 [ 361.599213][T20955] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 361.608954][T20955] vhci_hcd: invalid port number 96 [ 361.614096][T20955] vhci_hcd: default hub control req: 0311 v0005 i0060 l7 [ 362.116846][T20974] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5904'. [ 362.356748][T20986] sch_fq: defrate 4294967295 ignored. [ 362.700643][T20994] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5910'. [ 362.709724][T20994] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5910'. [ 362.724320][T20981] Set syz1 is full, maxelem 65536 reached [ 362.868291][T21002] netlink: 'syz.7.5915': attribute type 4 has an invalid length. [ 362.910484][T21008] loop6: detected capacity change from 0 to 512 [ 362.920425][T21005] SELinux: ebitmap: empty map [ 362.930003][T21005] SELinux: failed to load policy [ 362.936579][T21008] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #4: comm syz.6.5918: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 362.955886][T21008] EXT4-fs error (device loop6): ext4_quota_enable:7131: comm syz.6.5918: Bad quota inode: 4, type: 1 [ 362.968016][T21008] EXT4-fs warning (device loop6): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 363.004915][T21015] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5919'. [ 363.018208][T21008] EXT4-fs (loop6): mount failed [ 363.018596][T21009] loop7: detected capacity change from 0 to 512 [ 363.039481][T21009] EXT4-fs: Ignoring removed oldalloc option [ 363.107907][T21025] lo speed is unknown, defaulting to 1000 [ 363.219701][T21009] lo speed is unknown, defaulting to 1000 [ 363.265414][T21042] SELinux: policydb string length 65656 does not match expected length 8 [ 363.285948][T21042] SELinux: failed to load policy [ 363.517351][T21055] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5933'. [ 363.587655][T21065] loop7: detected capacity change from 0 to 512 [ 363.653812][T21053] lo speed is unknown, defaulting to 1000 [ 363.832479][T21076] FAULT_INJECTION: forcing a failure. [ 363.832479][T21076] name failslab, interval 1, probability 0, space 0, times 0 [ 363.845222][T21076] CPU: 1 UID: 0 PID: 21076 Comm: syz.7.5939 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 363.845248][T21076] Tainted: [W]=WARN [ 363.845255][T21076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 363.845265][T21076] Call Trace: [ 363.845270][T21076] [ 363.845277][T21076] __dump_stack+0x1d/0x30 [ 363.845342][T21076] dump_stack_lvl+0xe8/0x140 [ 363.845359][T21076] dump_stack+0x15/0x1b [ 363.845416][T21076] should_fail_ex+0x265/0x280 [ 363.845438][T21076] should_failslab+0x8c/0xb0 [ 363.845458][T21076] kmem_cache_alloc_node_noprof+0x57/0x320 [ 363.845560][T21076] ? __alloc_skb+0x101/0x320 [ 363.845590][T21076] __alloc_skb+0x101/0x320 [ 363.845612][T21076] ctrl_getfamily+0x2c2/0x3b0 [ 363.845639][T21076] genl_family_rcv_msg_doit+0x140/0x1b0 [ 363.845670][T21076] genl_rcv_msg+0x422/0x460 [ 363.845754][T21076] ? __pfx_ctrl_getfamily+0x10/0x10 [ 363.845784][T21076] netlink_rcv_skb+0x123/0x220 [ 363.845806][T21076] ? __pfx_genl_rcv_msg+0x10/0x10 [ 363.845872][T21076] genl_rcv+0x28/0x40 [ 363.845899][T21076] netlink_unicast+0x5bd/0x690 [ 363.845971][T21076] netlink_sendmsg+0x58b/0x6b0 [ 363.846012][T21076] ? __pfx_netlink_sendmsg+0x10/0x10 [ 363.846038][T21076] __sock_sendmsg+0x142/0x180 [ 363.846070][T21076] __sys_sendto+0x268/0x330 [ 363.846111][T21076] __x64_sys_sendto+0x76/0x90 [ 363.846130][T21076] x64_sys_call+0x2d05/0x2ff0 [ 363.846148][T21076] do_syscall_64+0xd2/0x200 [ 363.846231][T21076] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 363.846251][T21076] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 363.846347][T21076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.846368][T21076] RIP: 0033:0x7fcf80d30a3c [ 363.846384][T21076] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 363.846401][T21076] RSP: 002b:00007fcf7f78dec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 363.846420][T21076] RAX: ffffffffffffffda RBX: 00007fcf7f78dfc0 RCX: 00007fcf80d30a3c [ 363.846434][T21076] RDX: 0000000000000024 RSI: 00007fcf7f78e010 RDI: 0000000000000007 [ 363.846445][T21076] RBP: 0000000000000000 R08: 00007fcf7f78df14 R09: 000000000000000c [ 363.846462][T21076] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007 [ 363.846475][T21076] R13: 00007fcf7f78df68 R14: 00007fcf7f78e010 R15: 0000000000000000 [ 363.846531][T21076] [ 364.122639][T21053] chnl_net:caif_netlink_parms(): no params data found [ 364.185471][T21083] serio: Serial port ptm0 [ 364.212157][T20726] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.259737][T21053] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.266911][T21053] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.290776][T21053] bridge_slave_0: entered allmulticast mode [ 364.310370][T21053] bridge_slave_0: entered promiscuous mode [ 364.332651][T21097] loop7: detected capacity change from 0 to 164 [ 364.340327][T20726] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.354575][T21097] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 364.380534][T21088] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 364.389187][T21088] Symlink component flag not implemented [ 364.394833][T21088] Symlink component flag not implemented [ 364.404599][T21053] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.412324][T21053] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.419952][T21053] bridge_slave_1: entered allmulticast mode [ 364.427645][T21088] Symlink component flag not implemented (7) [ 364.433668][T21088] Symlink component flag not implemented (116) [ 364.440904][T21053] bridge_slave_1: entered promiscuous mode [ 364.457200][T20726] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.529496][T20726] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.568578][T21097] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 364.585465][T21053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 364.623125][T21053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 364.668847][T21114] netlink: 3 bytes leftover after parsing attributes in process `syz.7.5952'. [ 364.685029][T21112] netlink: 'syz.1.5951': attribute type 13 has an invalid length. [ 364.776283][T21122] serio: Serial port ptm0 [ 364.843115][T20726] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 364.854359][T20726] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 364.863848][T20726] bond0 (unregistering): Released all slaves [ 364.871677][T20726] bond1 (unregistering): Released all slaves [ 364.886099][T21114] batadv1: entered promiscuous mode [ 364.891950][T21114] batadv1: entered allmulticast mode [ 364.913409][T21112] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 364.938234][T20726] tipc: Disabling bearer [ 364.950423][T20726] tipc: Left network mode [ 364.952099][T21053] team0: Port device team_slave_0 added [ 364.967410][T21053] team0: Port device team_slave_1 added [ 364.976892][T20726] hsr_slave_0: left promiscuous mode [ 364.983572][T20726] hsr_slave_1: left promiscuous mode [ 364.989182][T20726] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 364.996723][T20726] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.005269][T20726] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.012680][T20726] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.024806][T20726] veth1_macvtap: left promiscuous mode [ 365.030619][T20726] veth0_macvtap: left promiscuous mode [ 365.036214][T20726] veth1_vlan: left promiscuous mode [ 365.044488][T20726] veth0_vlan: left promiscuous mode [ 365.138553][T20726] team0 (unregistering): Port device team_slave_1 removed [ 365.152579][T20726] team0 (unregistering): Port device team_slave_0 removed [ 365.207105][T21053] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.214191][T21053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.240134][T21053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 365.257354][T21053] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 365.264424][T21053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.290453][T21053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 365.326710][T21053] hsr_slave_0: entered promiscuous mode [ 365.332764][T21053] hsr_slave_1: entered promiscuous mode [ 365.338733][T21053] debugfs: 'hsr0' already exists in 'hsr' [ 365.344548][T21053] Cannot create hsr debugfs directory [ 365.362583][T21149] netdevsim netdevsim1: Direct firmware load for ./file0/file1 failed with error -2 [ 365.504753][T21155] FAULT_INJECTION: forcing a failure. [ 365.504753][T21155] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 365.517965][T21155] CPU: 0 UID: 0 PID: 21155 Comm: syz.6.5965 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 365.517984][T21155] Tainted: [W]=WARN [ 365.517992][T21155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 365.517999][T21155] Call Trace: [ 365.518003][T21155] [ 365.518007][T21155] __dump_stack+0x1d/0x30 [ 365.518020][T21155] dump_stack_lvl+0xe8/0x140 [ 365.518065][T21155] dump_stack+0x15/0x1b [ 365.518074][T21155] should_fail_ex+0x265/0x280 [ 365.518088][T21155] should_fail+0xb/0x20 [ 365.518099][T21155] should_fail_usercopy+0x1a/0x20 [ 365.518113][T21155] strncpy_from_user+0x25/0x230 [ 365.518179][T21155] ? 0xffffffff81000000 [ 365.518186][T21155] ? __rcu_read_unlock+0x4f/0x70 [ 365.518199][T21155] strncpy_from_user_nofault+0x68/0xf0 [ 365.518212][T21155] bpf_probe_read_compat_str+0xb4/0x130 [ 365.518246][T21155] bpf_prog_15fefb20d90ba6ff+0x41/0x68 [ 365.518262][T21155] bpf_trace_run2+0x107/0x1c0 [ 365.518349][T21155] __bpf_trace_sys_enter+0x10/0x30 [ 365.518369][T21155] trace_sys_enter+0x86/0xf0 [ 365.518390][T21155] syscall_trace_enter+0x13e/0x1e0 [ 365.518424][T21155] do_syscall_64+0xac/0x200 [ 365.518453][T21155] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 365.518473][T21155] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 365.518527][T21155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.518548][T21155] RIP: 0033:0x7f4742b9eba9 [ 365.518561][T21155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 365.518582][T21155] RSP: 002b:00007f47415ff038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 365.518599][T21155] RAX: ffffffffffffffda RBX: 00007f4742de5fa0 RCX: 00007f4742b9eba9 [ 365.518610][T21155] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffff80000200 [ 365.518622][T21155] RBP: 00007f47415ff090 R08: 0000000000000000 R09: 0000000000000000 [ 365.518636][T21155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 365.518648][T21155] R13: 00007f4742de6038 R14: 00007f4742de5fa0 R15: 00007ffc9cb9ed28 [ 365.518667][T21155] [ 365.760666][T21167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5970'. [ 365.783821][T21169] netlink: 'syz.1.5971': attribute type 27 has an invalid length. [ 365.810489][T21169] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.817699][T21169] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.856120][T21169] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.865844][T21169] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.920483][ T3444] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.929593][T21174] netdevsim netdevsim7: Direct firmware load for ./file0/file1 failed with error -2 [ 365.948406][ T3444] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.968465][ T3444] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.977653][ T3444] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.005587][T21179] lo speed is unknown, defaulting to 1000 [ 366.012406][T21179] lo speed is unknown, defaulting to 1000 [ 366.030173][T21179] lo speed is unknown, defaulting to 1000 [ 366.036681][T21179] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 366.045943][T21053] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 366.054886][T21176] netlink: 'syz.1.5974': attribute type 10 has an invalid length. [ 366.064117][T21179] lo speed is unknown, defaulting to 1000 [ 366.070024][T21181] sch_fq: defrate 4294967295 ignored. [ 366.075557][T21176] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 366.087879][T21053] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 366.096486][T21053] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 366.105600][T21179] lo speed is unknown, defaulting to 1000 [ 366.107169][T21053] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 366.131915][T21179] lo speed is unknown, defaulting to 1000 [ 366.142184][ T29] kauditd_printk_skb: 72 callbacks suppressed [ 366.142195][ T29] audit: type=1401 audit(365.638:36058): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 366.171645][T21191] loop7: detected capacity change from 0 to 1764 [ 366.189728][T21179] lo speed is unknown, defaulting to 1000 [ 366.197196][T21179] lo speed is unknown, defaulting to 1000 [ 366.204416][T21188] SELinux: policydb string length 65656 does not match expected length 8 [ 366.214223][T21188] SELinux: failed to load policy [ 366.220447][T21179] lo speed is unknown, defaulting to 1000 [ 366.232963][T21179] lo speed is unknown, defaulting to 1000 [ 366.238916][T21179] lo speed is unknown, defaulting to 1000 [ 366.247004][T21053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.259476][T21179] lo speed is unknown, defaulting to 1000 [ 366.259696][T21197] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5981'. [ 366.268729][T21053] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.288230][T20730] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.295282][T20730] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.315896][T21053] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 366.326285][T21053] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 366.340631][T21201] loop7: detected capacity change from 0 to 512 [ 366.350976][T20730] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.358029][T20730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.478056][ T29] audit: type=1400 audit(365.958:36059): avc: denied { ioctl } for pid=21207 comm="syz.1.5986" path="socket:[67561]" dev="sockfs" ino=67561 ioctlcmd=0x5828 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 366.521150][ T29] audit: type=1326 audit(366.008:36060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21210 comm="syz.6.5988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4742b9eba9 code=0x7ffc0000 [ 366.544807][ T29] audit: type=1326 audit(366.008:36061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21210 comm="syz.6.5988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4742b9eba9 code=0x7ffc0000 [ 366.560940][T21053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.567937][ T29] audit: type=1326 audit(366.018:36062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21210 comm="syz.6.5988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4742b9eba9 code=0x7ffc0000 [ 366.598298][ T29] audit: type=1326 audit(366.018:36063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21210 comm="syz.6.5988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4742b9eba9 code=0x7ffc0000 [ 366.621845][ T29] audit: type=1326 audit(366.018:36064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21210 comm="syz.6.5988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4742b9eba9 code=0x7ffc0000 [ 366.644848][ T29] audit: type=1326 audit(366.018:36065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21210 comm="syz.6.5988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4742b9eba9 code=0x7ffc0000 [ 366.668482][ T29] audit: type=1326 audit(366.018:36066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21210 comm="syz.6.5988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4742b9eba9 code=0x7ffc0000 [ 366.692390][ T29] audit: type=1326 audit(366.018:36067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21210 comm="syz.6.5988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4742b9eba9 code=0x7ffc0000 [ 366.747392][T21233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5993'. [ 366.904638][T21053] veth0_vlan: entered promiscuous mode [ 366.932617][T21213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.950120][T21213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.951322][T21053] veth1_vlan: entered promiscuous mode [ 366.983805][T21211] Set syz1 is full, maxelem 65536 reached [ 366.992914][T21053] veth0_macvtap: entered promiscuous mode [ 367.000170][T21053] veth1_macvtap: entered promiscuous mode [ 367.011267][T21053] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.027543][T21053] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.047927][ T51] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.058197][ T51] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.069525][ T51] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.082805][ T51] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.567071][T21273] tipc: Started in network mode [ 367.572025][T21273] tipc: Node identity 62524679ea16, cluster identity 4711 [ 367.579158][T21273] tipc: Enabled bearer , priority 0 [ 367.612814][T21271] tipc: Resetting bearer [ 367.624274][T21271] tipc: Disabling bearer [ 367.716963][T21277] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.753445][T21277] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.802297][T21277] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.862539][T21277] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.918730][ T51] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.929334][ T51] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.941437][T20726] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.952806][T20726] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.102877][T21284] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6013'. [ 368.249843][T21296] netdevsim netdevsim3: Direct firmware load for ./file0/file1 failed with error -2 [ 368.316788][T21303] netlink: 'syz.3.6021': attribute type 13 has an invalid length. [ 368.530699][T21297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.540176][T21297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.631659][T21303] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 368.667443][T21306] Set syz1 is full, maxelem 65536 reached [ 368.696428][T21314] loop6: detected capacity change from 0 to 512 [ 368.704783][T21314] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 368.715642][T21314] EXT4-fs (loop6): 1 truncate cleaned up [ 368.722435][T21314] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.485242][T21354] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6038'. [ 369.536121][T21314] ================================================================== [ 369.544206][T21314] BUG: KCSAN: data-race in __filemap_add_folio / filemap_write_and_wait_range [ 369.553072][T21314] [ 369.555391][T21314] read-write to 0xffff8881199ad890 of 8 bytes by task 21322 on cpu 0: [ 369.563538][T21314] __filemap_add_folio+0x5b9/0x7d0 [ 369.568659][T21314] filemap_add_folio+0x98/0x1b0 [ 369.573516][T21314] __filemap_get_folio+0x31e/0x6b0 [ 369.578630][T21314] ext4_write_begin+0x2fe/0xeb0 [ 369.583473][T21314] generic_perform_write+0x181/0x490 [ 369.588764][T21314] ext4_buffered_write_iter+0x1ee/0x3c0 [ 369.594319][T21314] ext4_file_write_iter+0xdbf/0xf00 [ 369.599527][T21314] iter_file_splice_write+0x663/0xa60 [ 369.604899][T21314] direct_splice_actor+0x153/0x2a0 [ 369.610009][T21314] splice_direct_to_actor+0x30f/0x680 [ 369.615379][T21314] do_splice_direct+0xda/0x150 [ 369.620133][T21314] do_sendfile+0x380/0x650 [ 369.624555][T21314] __x64_sys_sendfile64+0x105/0x150 [ 369.629759][T21314] x64_sys_call+0x2bb0/0x2ff0 [ 369.634425][T21314] do_syscall_64+0xd2/0x200 [ 369.638934][T21314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.644824][T21314] [ 369.647133][T21314] read to 0xffff8881199ad890 of 8 bytes by task 21314 on cpu 1: [ 369.654746][T21314] filemap_write_and_wait_range+0x59/0x340 [ 369.660563][T21314] ext4_file_write_iter+0xe04/0xf00 [ 369.665759][T21314] iter_file_splice_write+0x663/0xa60 [ 369.671126][T21314] direct_splice_actor+0x153/0x2a0 [ 369.676238][T21314] splice_direct_to_actor+0x30f/0x680 [ 369.681613][T21314] do_splice_direct+0xda/0x150 [ 369.686364][T21314] do_sendfile+0x380/0x650 [ 369.690790][T21314] __x64_sys_sendfile64+0x105/0x150 [ 369.695982][T21314] x64_sys_call+0x2bb0/0x2ff0 [ 369.700664][T21314] do_syscall_64+0xd2/0x200 [ 369.705167][T21314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.711049][T21314] [ 369.713358][T21314] value changed: 0x0000000000000001 -> 0x0000000000000002 [ 369.720454][T21314] [ 369.722767][T21314] Reported by Kernel Concurrency Sanitizer on: [ 369.728902][T21314] CPU: 1 UID: 0 PID: 21314 Comm: syz.6.6025 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 369.740267][T21314] Tainted: [W]=WARN [ 369.744056][T21314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 369.754105][T21314] ================================================================== [ 369.780701][T19515] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.052228][T20720] bond0 (unregistering): Released all slaves [ 373.059770][T20720] bond1 (unregistering): Released all slaves [ 373.093614][T20720] tipc: Disabling bearer [ 373.098654][T20720] tipc: Left network mode [ 373.105560][T20720] hsr_slave_0: left promiscuous mode [ 373.111021][T20720] hsr_slave_1: left promiscuous mode [ 373.116497][T20720] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 373.123547][T20720] batman_adv: batadv0: Removing interface: veth1_vlan