last executing test programs: 8m40.246867356s ago: executing program 32 (id=2954): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000500)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@remote, r3}, 0x14) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r4, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$eJzs3c9vHFcdAPDvjL22k7h1WnoABG1oCwFFWcebNqp6gHJCCFVC9AhSauyNFWXXa3nXpTaRcM9ckajECY78AZx74s4FwY1LOSDxwwLVSBwGzezY2di7tpPYXmv385FG+9688XzfizPvzbxd7wtgbF2LiO2ImIqI9yNirtyflFu8093y4z7bebi0u/NwKYkse++fSVGe74uen8ldKc85ExE/+E7Ej5PDcdubWw8WG436epmf7zTX5tubWzfvNxdX6iv11VrtzsKdW2/dfrP2BK2ZObL0leZUmfryp3/Y/sZP82rNlnt623Gauk2v7MfJTUbE984i2BBMlO2ZGnZFeCppRLwYEa8W1/9cTBS/TQBglGXZXGRzvXkAYNSlxRxYklbLuYDZSNNqtTuH91JcThutdufGvdbG6nJ3ruxqVNJ79xv1W+Vc4dWoJHl+oUg/ytcO5G9HxAsR8YvpS0W+utRqLA/zxgcAxtiVA+P/f6a74z8AMOKO/tgMADCKjP8AMH6M/wAwfoz/ADB+uuP/pSf9sSzLfnYW1QEAzoHnfwAYP8Z/ABgr33/33XzLdsvvv17+YHPjQeuDm8v19oNqc2OputRaX6uutForxXf2NI87X6PVWlt4IzY+vPrNtXZnvr25dbfZ2ljt3C2+1/tuvVIctX0OLQMABnnhlU/+nOQj8tuXii161nKoDLVmwFlLh10BYGgmhl0BYGi6q331WaAPGHmPnvGf+EMApgdgRBx3BzDT7w+EsizLzq5KwBm7/gXz/zCuyvn/SZ8ChvFz3Px/sTawNwlhJE0OuwLA0GRZctI1/+OkBwIAF9sRc/xXz/M+BBieAe//v1i+/rZ8c+BHyweP+PgsawUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX2976v9Vymd/ZSNNqNeK5YgGgSnLvfqN+KyKej4g/TVem8/zCkOsMADyr9G9Juf7X9bnXZx8revnKfnIqIn7yq/d++eFip7P+x4ip5F/Te/s7H5f7a8cGmzmLFgAAR9sbp4vXngf5z3YeLu1t51mfv3+7e1eQx93dmYrd/fiTMVm8zkQlIi7/OynzXUnP3MWz2P4oIj7fr/1JzBZzIN1bloPx89jPnVL8iRPFTx+Ln5YLNKflv8XnTqEuMG4+yfufd/pdf2lcK177X/8zRQ/17Mr+Lz/V0m7RBz6Kv9f/TQzo/66dNMYbv/9uN3XpcNlHEV+cjNiLvdvT/+zFTwbEf/2E8f/ypZdfHVSW/TrievSP3xtrvtNcm29vbt2831xcqa/UV2u1Owt3br11+83afDFHPT94NPjH2zeeH1SWt//ygPgzx7T/q4NOeuAp9zf/e/+HXzki/tdf6xc/jZeOiJ+PiV8b2OLHLV7+3cDn7jz+8uH2Jyf5/d84YfxP/7p1aNlwAGB42ptbDxYbjfq6hMTFT+T/ZS9ANfomvnVesaaif9HPX+te0weKsuypYg3qMU5j1g24CPYv+oj477ArAwAAAAAAAAAAAAAA9HUef7E07DYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwuv4fAAD//9VG0+g=") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) pwritev2(r5, &(0x7f0000000cc0), 0x0, 0xfff, 0xc, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4c}, 0x44004000) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r3, {0xfffd, 0x10}, {0x8, 0x4}, {0x6, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x8804) 8m31.551676189s ago: executing program 4 (id=3115): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x500, 0xc3072, 0xffffffffffffffff, 0x0) 8m31.192697463s ago: executing program 4 (id=3118): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{&(0x7f00000005c0)={0xa, 0x4e23, 0x0, @loopback, 0x8000}, 0x1c, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000c00)="04d490240e1398a94d77e7c3e2b3fca81818fda41f14fcc1d29f6cbdb890c95c91524e90d4ed8ff1967ebc00fa3f1291cddcb6f1553e326b", 0x38}, {&(0x7f0000000c80)="4b6942573eae624f1bd529ae2129a9a6a633c166f7d8d3d46837f01393e2c866e839d55b1fb9ba8322247998f1f9ed25a69d3d0e747c8dd57f5eafcb0db45436d4b698d4c1bad8", 0x47}], 0x3}}], 0x1, 0x20008050) 8m31.153660897s ago: executing program 33 (id=3118): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{&(0x7f00000005c0)={0xa, 0x4e23, 0x0, @loopback, 0x8000}, 0x1c, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000c00)="04d490240e1398a94d77e7c3e2b3fca81818fda41f14fcc1d29f6cbdb890c95c91524e90d4ed8ff1967ebc00fa3f1291cddcb6f1553e326b", 0x38}, {&(0x7f0000000c80)="4b6942573eae624f1bd529ae2129a9a6a633c166f7d8d3d46837f01393e2c866e839d55b1fb9ba8322247998f1f9ed25a69d3d0e747c8dd57f5eafcb0db45436d4b698d4c1bad8", 0x47}], 0x3}}], 0x1, 0x20008050) 8m25.199579357s ago: executing program 34 (id=3195): ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000200)={0x2, 0x1000, 0x1, 0x7fffffff, 0x0, 0x2}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x80c42, 0x0) read(r1, &(0x7f0000000040)=""/148, 0xffffff96) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000240)={0xff}, 0x4) ioprio_set$uid(0x3, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000000000000d13ba24615cd3fc3b74aa58e300c1617983471e9a433eec3b7f3b0670ccce370cdf97237d650b2f2bb531c85d23773ae274744a742bd05d1a85031632b69ad4eeb00629d9b7cf3041df9b921e45768a9f1f918461e68a2dae0b2acee5f0c8d7ad9fec7c34dbba0fe705c5609019700"/140, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYRES16=r3, @ANYRES64], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}]}}) 8m19.64141923s ago: executing program 35 (id=3255): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x35, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 8m16.846010557s ago: executing program 36 (id=3282): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$key(0xf, 0x3, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2) 8m13.755508073s ago: executing program 37 (id=3328): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20040845}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0xfff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000003c0), 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000160a010200000000000000000300000508000740000000020900010073797a310000000040000000180a01010000000000000000000000050900010073797a31000000000900010073797a30000000000900020073797a3100000000080007400000000264000000160a01010000000000000000070000010900020073797a320000000008000740000000010900020073797a30000000000800074000000005080007400000000008000740000000030900010073797a30000000000900010073797a310000000054020000060a01030000000000000000050000000c00034000000000000000010c0006400000000000000001f40007406e6e1c2d0fd5ce50f4859f3f0f45997736291ac01ab372bfcefd06aa03750bc41661e330e35bf4769e18b04538c8298c909a7558512babbbed868e8d355023b3c6c5300344afc52ffefb39c44269df5754d3d55fa58ed10e6fd605acabf282b85485098020176d73c9023b2c42aaf0c096d7c030deedc8f6d64e99bbf486e3f97ee1d8265c1a8f55cd1ac174a77556fdcbaa8855a9d96ecb2d06db66a4cdff4288e70c7af89b4aa02b2c555915d9e5be180bca0b4cb2c432be3ea9c0e4d927bb8f0135fca0d34c36d564f9d9a93006de4ae92ad7e435c61058a33f09cb557a4540748bcabe13a3a92e54b3794f0e73b10900020073797a31000000000900020073797a3100000000340004801c0001800b0001006f626a72656600000c0002800800034000000012140001800e000100627974656f726465720000000900010073797a3000000000dc000480300001800e000100627974656f726465720000001c00028008000440000000bc0800024000000003080005400000003b600001800e000100636f6e6e6c696d69740000004c00028008000240000000010800024000000001080001400000000508000140000001000800014000000001080001400000000908e6004000000005080002400000000008000140000000071c0001800b0001006c6f6f6b757000000c00028008000440000000010c0001800700010072740000100001800c0001007061796c6f616400100001800b00010074756e6e656c0000140000001100010000000000000000000000000a"], 0x348}, 0x1, 0x0, 0x0, 0x20000800}, 0x44000004) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x39}}, 0x8010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x4}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x0, 0x200, 0xa}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 8m13.492489599s ago: executing program 38 (id=3334): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa000000}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000006000000010000007f00000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001d00), &(0x7f0000002080), 0xca, r2}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000005c0)={r2, 0x0, &(0x7f0000000140)=""/241}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYRESDEC=0x0, @ANYRESHEX=r5, @ANYRESOCT=r4, @ANYRES32=r2, @ANYRES8, @ANYRES8=r2], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000140), &(0x7f0000000180)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0xf, &(0x7f0000001740)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x0, 0x20000000}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sys_enter\x00'}, 0x10) r9 = socket(0x10, 0x3, 0x9) r10 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendfile(r9, r10, 0x0, 0x100000000403) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x3e0, 0x98, 0x0, 0x0, 0x130, 0x1f0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'veth1_to_batadv\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x0, 0x69}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x3, {0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f00000100c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r11, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @empty, 0x10000bff}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8ed50f638facd57de629163"}, 0x8000000000000001, 0x2, 0x3}}}, 0x118) bind$bt_hci(r10, &(0x7f00000002c0)={0x1f, 0x1, 0x3}, 0x6) 8m10.005799223s ago: executing program 39 (id=3349): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000d80)='ext4_other_inode_update_time\x00', r1, 0x0, 0xfffffffffffff001}, 0x18) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1d, 0x18, &(0x7f00000029c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000a0d11a9c1b58ff591dd4248db3cbd9100fa70e366fe9763c3717fd1ff6280e4fc54935a53185ce53100ede932e480f018a50a92823ee5575e91ff4e6f157e0dbf1", @ANYBLOB="5af43f65bf889f2b03885fb48051885e70494466c0e0cc6316c5fb56b6c2182dba2f7027e456c1573af2f4d09d49731897500e24266fddf9bc55f54b19cdcf38ce319ac015ef04f913b5aa7909ceb3fc752bcf68fd7df747c5dc6361d9a0530701f64bd85c1b1d78e21260ffb9c8edfa2bb5d6b744d67b9e3c7a8dee6a0f9722187d4691c9085d715ab41015bb9751f911d5bb160258d1b0925da7f58cad0dd4c98273efdd6f15344b0241e1501760bc43905ecfdfe6791f8f63219c3dcab161ac64f9caea14d473b4ff9809153d54d775812b3418c9e14c0e40e8cabc0384145bc7baabf8f09e7f929ac23bb3b5e1129a926be1e25c347360f5624e91cd00d2ae9b92301aeddea431797794722af14b25634348110cc5ca479fbd205214ce3bbc4d9361976cf1145096f47e8979d1035abee01ccd7b89c13f5bd1865f73d84c293b9d637ee3b99d12c9c3df064d67818c3b7b9141cb6a32741f13f2b610cc23eafce5559c5f24d6a5426581ffaa6c26766b8e16c17a3fa47451b10b318bd373e06b96d7c2069fa62db7c024751bcc55720f5d1e8fc40b8cdc1fabadd1825cfc74c230bbc33a6d7a55d0880406fe1db0b7acf4f71ed6b26a8caf3f57554ca613584bba3ade2709be99076cc7916aa423dbd7f445decd8d72c292774ff093557b70b2e26e6f40c0fe0765134bb526e8580c4c0a86ba31de16cef658387cb5892cd431e56594b4da5ddd013b42c45c09adb815c53a448ff8d2b8b8d84679257f0f888d13eae6e9d9cba1133ec329951fdb6c5211cb89058c484465f99054a99c107515a61a6beb84f0749ca97142f7408c9c91a50449b05c25b4d54bbfd3c86ac176cba03b1ae1f66ebbd3d394433e6f3c6d2f63a53669c23a9ca1981c4417d72656e792726d83d2799669214f55a5a36bc3ef8fbc479fff5bfb2202d9f245549b870dcf730d94bd1f418698b57b847ed228442a2e38bb823356b93262a559051ea7028451133c4e957decaff8204247d2c82f02ff115ac5463827f5d7d6288cbda12169bd4e3b3fe826d3a833e6428d66512cc8e5c740f0535bae5a9ff9c2fab2db7f3ce8f6cf65291910d7a850dd72cdbc3201c54b0ed369c0ff9d790d76bdb612b2dfaf4f1902add151c1ed83cefdf491b3c22cb3c835e80b8addfac7ada97aa227fe09bb27851fe207a0ad4536bb36a3e1f68977a05fe5e5d6ea3b3f43caee282fc1c0f128558d9f2c6abdeac5149024b913b247dfab3d0d78f326a9117a2b890090fa12277d13d1901f2296151a31e537035feef64411d568ef81c22ef1cca660530ea0013d1225bf02082759c7e0d6029f113e78c7313e55794ec547a868ce0d99c78d5d912775bc3a310c117f7c8a351946cc53e1c3e62ef8e084f4b6273d5f07c505b100f2fdf94b6bf3a37effccfe40f88259c81b07d28079b5433f012981e78b1f34ba4624e4b2609e1773b15fcf775abea939f2d959672df4f7f1ca18776ddfec55cc6d712cc62fe4b19a998d06f7be7ddd8bc53f49a1b281d94a6ea67422316c74c63c4d1fd69220af06b6c7adaeb83a993e54163a3f1d62ce63906889468b3d51fd3ce62119af9748f18204ed6a0650e9fb0e457772e3e369d59c1e38a3f99b21ab4d514b3b1dbbc8ede77e9bcb1a009f6fc278ca2074cc32268f478b526f4b72e6b9ae7fda327803ba8d5d4c659dbffc26f1e7717fd5d1921a3dac773eb9f234e6820511eabc8d3583169831b3cf304f972dc80ed87e48e438d6631ca886c99ecd772c087d4e85275f7917cd1c4e65050dfb1500d23db0483f050d9b724e8d3f780aa2a087fcfe3415674553af2047a26711ff564758b9a4361ab4e3208b970d3eb6de885287703cc9baf91b777f39b19b059466049d57706e3bbbf6c445f9bdc5b298e77d88f50e409b9a6f59e9725dc822eba7bfcf551a62e1360395a487a0c25764ede390fbd49c1fc3694e919910bbbd3c849b272655fe0335e49db91f5296cd600765f6b1e15d664fe06457c2d10ab7d72e4602cb6443900e7ca5864185be51c9197765ab8868c9703e15c90faa57cc9099ba197642f1e3bd1e0d56c5148ac51d522e699ae5223ef6c02985999d72f4fbf93793ce08610d16292bc6f7ae6368bde8316e9462151d0d667c967c0eb0a3e01c89407c76f406da6adcbc4fa21733bb1809fa9677281608acadb0c65471b6601bef4c43a69de475df1a3c7dd8c9ddcd398753693920c050cd2aeddf78d025e5d769d67b2663061900e07d3139a499fedfd1f841d6703b39fbef469fc1d8cd84196132cb340f691c81fb791e2ca3ec079d085de7c8cbc1b1ae5e534ec0939cb0cb1bd887ec9fb49731493ae6667d2cea03b37fd9c0ee8c0a2da21b97ab17d61701b9e6d0fb4f04db7112d0cc880d57d6adc166b2d11b0a3dbc34df2080d9d48b0937da340e18d152b6c9521a0de73eeea948516267c5f6d127255d40c023cf3d903612d26f8140769ab9c5a744ebc3403616f35cbbefdfa8e2432c656670dc33de5dfda1baf25da85fd6c80963c75e22ba4e0143370451523f079bb97693ffa43aeeda8cb0b5d58d46669fe5acd776c84ad87d82c7bc351628ae4b8c150692eca6b8d037a11083ddf853f38badf0fd2d6325effddb9f7bd4354e45823e35ba99d01c814081db7dd7ab4a7d8518cc7b6e0b155f67e19b54bccca2421b863ea2434ef5c2011de280a4d23af5608d77722402538b1450a698d00eb182ec826b1193efa00bef48fba983ce729cd85c5db0be9489aef51097e973345b842d94aaf8ff967d168114b3510ed261bb80e3d73dc26f9932afd12edc3aa1486363d6ca23c289d16ea7616bfbda6ee144afd78d83d7a287e7f32fd6d121daf17c96b1fcc3f28639e1589f4bfe5b4d6984b124b83af5aa4408860a84629bbe28e572603057f7ddd4c444351ac2705f96cdb0433bb151d2a388c0aeeeac95b7ccff3d58a1d26f00dea785e3d4d35e42efa6f9f07ec47a1d154d334dbf1dea5a8ed0023b50d019b6a3a266f1e17ae6b0f19ee89971f1d2a2cab3f96997e32a845c10d1f7cf2c975d58580504c51033d7091f1ae5640cdccaa15ffc22dd324ecebf196e31b25d498ed9cfb17857bf98b08be2bc901b69f164e7e2e1608334a57314125eb129e2c91fc755e20479b36b6ead7ab1d180b29607f364de4dd564ff6c26af7c137f8809dd47201e4e85c50d83db2ec9e103b5267508ab2e95ed75287c8a78f0c7ada485908957e34334b14334abbe04a409d371b3ecebb373a989bb8f2d89048bf944432c8578169fdbd619651043f25a9f1f01402f362c0a2bebe995bdd68ed313794287e576f841ef65464f7d7344281be10886f43a6274c27db5a26e540d6accb1a2d81bb60725aa677dc0229734ca9a738b68b8e7d96a4334baed4caa147c98152bc07d5763ae3e2529902342bda86e977770dbda20c23adc39e2229535217750b2959bd9010ca5ba2aa2c24ac75e2edfc16f7dd6aa51f32bf4e7f60e21f24bb53a0ee62763bcdd5ae0eff09a2a2a2c97edde7e2e377e5935800eb1c900f074c3008ccaf582c1cd79373961873df485a48b5d695b71c4e655d4be06c8b035f396a4c780f8f32a3e71449b1862d54e776b390e3e7e677a2da7e69fb8d952af9d0869eeca6eff66c4b75b1c4aae6ddcc9bcb3dd5e3449447b167861c9741abd7d61a8d3afd6979706055acbda6dad1c56ea1bc96fd9a6cf13104038cb132540ec0d6741684cdaae731dcb1f271f79c5a4c15ce6e0a1c08c884626a6a694f8652292505f2cfd1df42db39450bbfcee502deae8cf493d05525bd3dcf590619a5e7add98551760bdf595981e28891c86b3e5f26ec8e2ce26c0298f14b972c586172f47966511e3c88cccd9dce686dea792e31e5805c1df90faa007df3dffc292f956c4f546378432fd8f8d0d892dccae64fc508ea2ecc6175ff31b48f653d0b8ef51cf32642c1ad3c8847f0660a1c359cc9fe4fa8caa6158775fe4e559ad7613fe30418b00642182e02e991694196aaad36133105c53a8bbd4cac42482ccc7c2ec65d299fafe7d82cf0a8999549093551d73a4d6b17ede6b850d2e82e444cb345ac1dc7aa521531cda815744ebf6cfb72e145dc1542c1bbf84372eadf8a82caa720ae7eee15ff7409c63a2ab36e999ef978424d27f96590848e01749512649cf01c97072ce46427ff4b8a1225969d48ab53f83648c907ad580734b3b8c7d9686526487ca8a7eeaf4d128a7503751a78f208abbaf4f4ceb4e0bc086c728919b5b40a80fded55c258ece1fca98037fbd6a0091cd34d02158476dd9c870301f63ed25b5afe52a7bedd2bd1a1ebd0b411a2ee7cf123eb03bd76cc6f47867fd6ec2b6a481d9f3e1b40d1e36d23fd3d5f4d8a140961e200a2e9ba0dc16aea7c75d1a5a1f9761c0da52d569884e01fe860a09bb4791f12f02566f416825de47a01c41c848b3186c57a97208aaf652c99b471919acc6faeab92388ce498268f6fdc5497f55377d4b8bc22c81843c934af8a61608732ebec44d15a83bbcb2db0475aa03566cf92cf782552ef00e4e3be224bed36526ece539e1a7ec129305f8daed6d8e1576c3a7c5ccd86b28489e3e6a62abf65c2a14c16daa2c3f767d184e4df6cc4a0cb2b2db1bdc4c69df7bbf54d683247feb882a91df28136278e9a2fcc02864191be5dd2a234c30df4ddc06f7f1f94ca516d2172477c7f8a2adfc4c2fd830d1c7325e2f65775094036439a0d05feddc15559ac2d9dfb4c14508bf3eb17dd39886d2f7048c65578e61982f6a2338d5930c7f566f2604aca069355da497f85256c2f90c17c4555c1d2938c5e82c3ee964750d672daea416b902e9678edcab77125b184aee52fa4fdba669fce298fc0f686f1ce08947da9f347d014b48601517bf68036e46c8b8c3ca977846454c2f94080020c911cfdd7660c1b3fe3cd11f26eff32e2602668a5a35c3c693ea4ae4d1bd25bd29d384fbf1e798ef60764b36138e5669661202a2cca16ddbd91fc485368fbbe190d6855bb13555b2bf9208a6fdccf481b4f89c5f256b9257318bc4562afceece5b6842b7b3c6065fc02841836f90d3f77b59e2aef5b1ed74d6a39d6729d861e8bd19deb5c43be20f24bf68f9f0883756fea9a1af3cda4f13288ad6b4fc90028664c4395c86afd5ce71f8da5457388131340655507f9a7326507c62a3396c85aac81f557491348af02c3e4f29acab1a1a8f41208f5823d739bba762b19f4fb39bae680e5c29ea7b837fab8a605a29c28eb34249222c759e064f4d47e620217ab0945f76ca0e320b009e248dec4bd6d049d4e27d2787e8696caa50066c674008a0f521ed20aee3030d48fbe047a91a3c7af4a71f10be1e681c2bf4c143dd2996ca9725d74fb875dd298db42339303ae628dabdcd07b1df266300fa752c64d0321a6d99327e07127d255d2a65b2c4b8126492022d0e901fef4efdfe92a32e65ecfe0b3cc68cdb34286a8c24f1943373e4139a9834bb022e1b5ece7996eb1d6f74c0808f89cac29e5339b6244aff1815ace8648ee8858d65fdb2d468e9d4a0fd4f5349597d1d4922486f7380559274019fe3d92e97a5089598c390fd9d3d06c200b4dc6821d5509e2b97786d2435492522aaa03acd65eb8b83aaeda3e35ff466a919fed946f6c395aafbabe745993ce21a87c758b5d3e8386ad1e8ca637650c1e43876828693e08ad1d1fa86fc7d7ec258538e471b3cfc544c00f0e1f7efaf19361c033c81be443c1fb4658c0ad902462c05105fdd9a1950ee236fd9e3", @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f00000009c0)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0x4}, 0x18) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3c0, 0x1f0, 0x1f0, 0x0, 0x108, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8, 0x0, {0xa00}}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) syz_genetlink_get_family_id$ipvs(&(0x7f00000018c0), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sync() sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@getchain={0x5c, 0x66, 0x8, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff3, 0x9}, {0x3, 0xfff2}, {0xd, 0x7}}, [{0x8, 0xb, 0x1310000}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0xb4}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x3a1}]}, 0x5c}}, 0x20000490) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000f00)={0xa, &(0x7f0000000e80)=[{0xf5, 0x9, 0x8, 0x3}, {0x9, 0x2, 0x5}, {0x200, 0x9, 0x4, 0x101}, {0x15d2, 0xb, 0xfd, 0x9}, {0x3f0b, 0x40, 0x9, 0xaaaf}, {0x7, 0xa1, 0x40, 0xfffffff8}, {0x81, 0xa, 0x5}, {0xdb7, 0x8, 0x1, 0x2c500000}, {0x49a0, 0x3, 0x3, 0x3}, {0x3, 0x0, 0x5, 0xfffffff8}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000003", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="001f718c09e42b0002b700"/28], 0x48) syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000000b00)='./file0/file0\x00', 0x3a0cc0a, &(0x7f0000000f40)=ANY=[@ANYBLOB='hide,dmode=0x0000000000000005,map=normal,map=normal,session=0x000000000000000e,overriderockperm,showassoc,nocompress,utf8,map=normal,session=0x0000000000000006,map=acorn,mode=0x0000000000000086,uid=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00', @ANYRESDEC, @ANYBLOB="e21c3011806a2c166ea609cca9f2cd04e4", @ANYRES32=r1, @ANYRESDEC], 0x43, 0xa0e, &(0x7f00000000c0)="$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") mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x4, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000c40)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f0000000d40)={'tunl0\x00', &(0x7f0000000c80)={'gre0\x00', r9, 0x8000, 0x7800, 0x10000, 0x9, {{0x1e, 0x4, 0x0, 0x1, 0x78, 0x65, 0x0, 0x6, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x40}, {[@timestamp={0x44, 0x2c, 0x4d, 0x0, 0xf, [0x10001, 0x8, 0x6, 0x5, 0x0, 0xd, 0x1, 0xffff7fff, 0x2, 0x1]}, @rr={0x7, 0x1f, 0xf5, [@rand_addr=0x64010102, @multicast2, @loopback, @local, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1f}]}, @timestamp={0x44, 0x14, 0x10, 0x0, 0x8, [0xb79f, 0x101, 0x7fffffff, 0x9]}, @ra={0x94, 0x4}]}}}}}) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xd, &(0x7f0000000e00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007bd34a8af8ff00000000bfa200000000000007020000f8e4d4f8f043cc0e38ee784fffffffb703000008000000b704000000000000835300000100000085000000230000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) r11 = eventfd2(0x0, 0x0) poll(&(0x7f0000000080)=[{r11}], 0x1, 0xda90) 8m9.157589194s ago: executing program 4 (id=3336): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x18) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 8m9.116967577s ago: executing program 4 (id=3353): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x404, &(0x7f0000000580)={[{@sysvgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@max_batch_time={'max_batch_time', 0x3d, 0x94ca}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$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") r0 = syz_clone(0x11, 0x0, 0xb, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r1}, 0x10) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) 8m8.931398545s ago: executing program 4 (id=3354): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000002001801000020646c4300000000002020207b1af8ff00000000bfa10000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$igmp6(0xa, 0x3, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) fallocate(r0, 0x39, 0x1, 0x80000001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r2, 0x0, 0xfffffffffffffffd}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r3 = gettid() r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2082) read(r4, &(0x7f0000000100)=""/140, 0xde) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000040)={0x197, @tick, 0x0, {}, 0xff, 0x2}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f0000000240)={0x151a, 0x0, 0x5, 0x3, 0x4, 0xb}) io_uring_setup(0x24, &(0x7f0000000040)={0x0, 0x73e9, 0x1c012, 0x4, 0x19c}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r4, 0xc0605345, &(0x7f00000001c0)={0xfffffff9, 0x2, {0xffffffffffffffff, 0x3, 0x5, 0x0, 0x8}, 0xd4d}) tkill(r3, 0x7) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYRES32=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd1}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xa) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000d40)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0x0, 0xf0, 0xffffffff, 0x0, 0x310, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x20, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) 8m8.901627298s ago: executing program 40 (id=3209): r0 = syz_io_uring_setup(0x113, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x3e0}, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) unshare(0x22020400) r3 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) unshare(0x2060280) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) fsmount(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_OPENAT={0x12, 0xf, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x400000, 0x12345}) io_uring_enter(r0, 0x8aa, 0x0, 0x0, 0x0, 0x0) 8m8.46449631s ago: executing program 3 (id=3356): r0 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1210090, &(0x7f0000001300)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$eJzs3U9oHGUbAPBnZrNN/+T70g++Dz6lh6JChdJN0j9aPbVXsVDoQfCiYbMNJZtsySbahIDpvYg9iEov9aYHj4oHD+LFo1cvimeh2KDQ9KArm51N03S3bmI2W7O/H0z2fWdm93nfmX3e7AwzTAB962j9TxrxVERcTCKGNywbiGzh0cZ6qytLxfsrS8UkarVLvySRRMS9laVic/0kez0UEcsR8f+I+CYfcTxd/8h9zUJ1YXFqvFwuzWb1kbnpqyPVhcUTV6bHJ0uTpZlTL7505uzpM2MnxzY2935tYy2/tb7e+PHmuze+e+X2zU8/O7JcfH88iXMxlC3b2I+d1Ngm+Ti3af7pbgTroaTXDWBbclme11PpfzEcuSzrW6ltHBwGd6V5QBfVBiNq6zYUgT6QSHroU83fAfXj3+a0m78/7pxvHIDU466uLBXfiWb8gca5idi/dmxy8NfkoSOT+vHm4d1sKHvS8vWIGB0YePT7n2Tfv+0b3YkG0lVfn2/sqEf3f7o+/kSL8Weoee70b2qOf6vZ+LfaIn6uzfh3scMYv7/+00dt418fjKdbxk/W4yct4qcR8WaH8W+99uXZdstqH0cci9bxm5LHnx8euXylXBpt/G0Z46tjR15u3/+Ig23iN87Z7l9ryMb+78valHbY/y++/fyZ5cfEf/7Zx+//Vtv/QES812H8/9z75NV2y+5cT+7WfwVsdf8nkY/bHcZ/4dzRH7Kis4YAAAAAAAAAALCD0rVr2ZK0sF5O00KhcQ/vf+NgWq5U545frszPTDSueTsc+bR5pdVwo57U62PZ9bjN+slN9VO5LGDuwFq9UKyUJ3rcdwAAAAAAAAAAAAAAAAAAAHhSHNp0//9vubX7/zc/rhrYq9o/8hvY6+Q/9K+H8z/pWTuA3ef/P/StmvyH/iX/oX/Jf+hf8h/6l/yH/iX/oX/JfwAAAAAAAAAAAAAAAAAAAAAAAAAA6IqLFy7Up9r9laVivT4xsDA/VXnrxESpOlWYni8WipXZq4XJSmWyXCoUK9N/9XlJpXJ1NGbmr43MlapzI9WFxTemK/MzzWeKlvJd7xEAAAAAAAAAAAAAAAAAAAD88wytTUlaiMg36mlaKET8KyIOJ5FcvlIujUbEvyPi+1x+sF4f63WjAQAAAAAAAAAAAAAAAAAAYI+pLixOjZfLpdnuFQayUF0M0XlhYCsrR8Tyzjaj/olbflc+24A93nR7o5B7Mr6HT36hh4MSAAAAAAAAAAAAAAAAAAD0qQc3/Xb6jj+62yAAAAAAAAAAAAAAAAAAAADoS+nPSUTUp2PDzw1tXrovWc2tvUbE27cufXBtfG5udqw+/+76/LkPs/kne9F+oFPNPE0jop7HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAPVhcWp8XK5NLvNwmAH6/S6jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADb8WcAAAD//y4WzlE=") openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) lseek(r0, 0xfffffffffffffffc, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@mcast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xd53091ff433e3f13) quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000000700)=@md0, r1, &(0x7f0000000180)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) fcntl$setstatus(r3, 0x4, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r2) sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b00)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000280), 0x6f05477f, 0x80) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000340)={r0}) r6 = socket$inet_sctp(0x2, 0x5, 0x84) close(r6) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000380)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f00000002c0)={{0x31, 0xb}, {0x7, 0x2}, 0xffffff20}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}, {0x0, 0xe0}], 0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000000000000840000000210a3d360c4630000000a0004002800", @ANYRES32=r8], 0x20, 0x2400e044}, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) close(r9) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="200000000001000084000000020000000a000400a80000000b000002ff1708ee501694750e4fe6440f8d28164a52b61038599e021662bf3ab1a3324e028058659df300e608bb71d56c3084579bb10f36344eaf8a603db5a89bc12bbf99b0e62870bd82ccd6dacffa47de973135c8f8c2a04359b58483293547f46d600e40392bbaa421111a17c8e50ee7dfd24ffdb300e02fddedff5dd00bda2c3de78a7bd0ae380041e7d3b6", @ANYRES32=r8], 0x20, 0x2400e044}, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000000540)=0x220, 0x4) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f00000003c0)={r8, 0x800}, 0x8) name_to_handle_at(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="10000000040000000000eeff08a7f8116f6192305edb0000"], &(0x7f0000000240), 0x1400) 8m8.160621619s ago: executing program 4 (id=3359): openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9ee6, 0x200000005}, 0x104022, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = syz_io_uring_setup(0x4b5, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) sendfile(r4, r3, &(0x7f0000000000)=0x9, 0x100) 8m8.160286089s ago: executing program 41 (id=3359): openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9ee6, 0x200000005}, 0x104022, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = syz_io_uring_setup(0x4b5, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) sendfile(r4, r3, &(0x7f0000000000)=0x9, 0x100) 8m7.496690132s ago: executing program 3 (id=3363): socket$kcm(0x10, 0x2, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x11, 0xd, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) chmod(0x0, 0x8) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r5, 0x1, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r6}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x2004c8c0) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x20, 0x0) 8m6.307542596s ago: executing program 3 (id=3366): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) 8m6.290099148s ago: executing program 3 (id=3367): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x404, &(0x7f0000000580)={[{@sysvgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@max_batch_time={'max_batch_time', 0x3d, 0x94ca}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$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") r0 = syz_clone(0x11, 0x0, 0xb, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r1}, 0x10) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) 8m6.157523511s ago: executing program 3 (id=3368): r0 = openat$random(0xffffffffffffff9c, &(0x7f00000018c0), 0xc8803, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f000000fec0)=ANY=[@ANYBLOB="04000000000010"]) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x3, 0x101142) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r2) sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f00000017c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f0000001940)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004814}, 0x0) r5 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x33, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5871, 0x2, @perf_config_ext={0x6, 0x400000008}, 0x4c58, 0x5, 0x0, 0x1, 0xe, 0x20005, 0x10, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f00000006c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r5, 0x40089416, &(0x7f0000000340)=r6) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f00000007c0)={{r1}, r6, 0x18, @inherit={0x68, &(0x7f0000000440)={0x0, 0x4, 0x6, 0x5, {0xc155280af4fa694f, 0x24, 0x1, 0x1, 0xb8a}, [0x9, 0x8, 0x5, 0x3]}}, @name="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"}) r7 = socket(0x80000000000000a, 0x2, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000001880)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="000426bd7000fddb1f0f07183492e557010072000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4010) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x4, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/crypto\x00', 0x0, 0x0) ioctl$PTP_PIN_GETFUNC(r8, 0xc0603d06, &(0x7f0000000540)={'\x00', 0x4a81, 0x3, 0x9}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r9, 0x11c, 0x3, &(0x7f0000000100)=""/208, &(0x7f0000000240)=0xd0) epoll_create1(0x80000) 8m2.664453096s ago: executing program 3 (id=3394): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%-5lx \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) 8m2.490432932s ago: executing program 42 (id=3394): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%-5lx \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) 4m16.857930541s ago: executing program 6 (id=6869): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") utime(&(0x7f0000000080)='./file0\x00', 0x0) 4m16.687650498s ago: executing program 6 (id=6871): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r1) 4m15.629375949s ago: executing program 6 (id=6879): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000780), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r0 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) io_submit(r3, 0x1, &(0x7f0000000940)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 4m15.502316731s ago: executing program 6 (id=6883): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fsync(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000002c0)={[{}, {@grpquota}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@data_journal}, {@jqfmt_vfsv1}]}, 0x3, 0x447, &(0x7f0000000380)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x12, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fd0400000000000000d2542ded71038259ca171ce1ac08ef54ecef0e1e14ef3dc177e9b400", "f28359738e22924c66810000000000d31cf4965dbdb0aa530000000000000001", [0x202]}) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) 4m15.086228951s ago: executing program 6 (id=6886): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00'}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x22, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xee00, 0xee00, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x4e0, &(0x7f0000000380)={0x0, 0xf5ea, 0x3180, 0x8000, 0x400252}, &(0x7f0000000640)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000500)=@IORING_OP_MKDIRAT={0x25, 0x17, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1f, 0x0, 0xf9b7a26b18f77d51}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) 4m14.608213357s ago: executing program 6 (id=6896): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f000000c880)=[{{0x0, 0x0, &(0x7f000000c600)=[{0x0}, {&(0x7f000000b380)=""/4096, 0x1000}], 0x2}, 0x3}], 0x1, 0x40010003, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000001194000000000000000000000018110000", @ANYRES32=r1, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff7}, 0x94) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000040)={[{@nobh}, {@abort}]}, 0xff, 0x258, &(0x7f0000000780)="$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") r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000004c9002000000000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xe408d604c2d1c231}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004850}, 0x8040) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000240)={@private1, 0x36, r8}) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000200)={@dev, @rand_addr, 0x0}, &(0x7f0000000240)=0xc) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000002c0)={0x0, @remote, @loopback}, &(0x7f0000000300)=0xc) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r13, @ANYBLOB="0c000280060012"], 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) getpeername$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000001080)=ANY=[@ANYBLOB="9c020000", @ANYRES16=0x0, @ANYBLOB="00032bbd7000fcdbdf250200000008000100", @ANYRES32=r4, @ANYBLOB="8000028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000000030008000700000000003c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000008000100", @ANYRES32=r6, @ANYBLOB="ac01028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000300000008000600", @ANYRES32=r8, @ANYBLOB="6c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000003c0004000300010840000000000010070400000004000207090000000600060363000000010105060000000000000c0a040000000900050c4c8fffff3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r10, @ANYBLOB="40000100248001006c625f74785f686173685f746f5f70000500030003000000080004e2aa840186fcee00000000000000000000bc9448f8aa1adda61134d6b484466e5e1a3acfafd04e89e93726ae3b1fbb6458737f7af81a63b1b27655a7b0f1633c777e169e122a44190c3dcc5d18288d73280e2106e23fc367b4d3e91d1436b2989837684b1484562936463c7fad5925f6999f0d369b582d60aa36b0a3a3a0b5b63de99d7fe66abefa175def5a8068952f79ecf6367188e563c4a8f2e4e8d970deff87ef4cb7b2c38feffa00503625d6", @ANYRES32=r13, @ANYBLOB="080007000000000044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b75700000000008000100", @ANYRES32=r14, @ANYBLOB="4400028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000f48000008000600", @ANYRES32=r10, @ANYBLOB], 0x29c}, 0x1, 0x0, 0x0, 0x2000c004}, 0x1) r15 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r15}, 0x10) 4m14.579585789s ago: executing program 43 (id=6896): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f000000c880)=[{{0x0, 0x0, &(0x7f000000c600)=[{0x0}, {&(0x7f000000b380)=""/4096, 0x1000}], 0x2}, 0x3}], 0x1, 0x40010003, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000001194000000000000000000000018110000", @ANYRES32=r1, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff7}, 0x94) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000040)={[{@nobh}, {@abort}]}, 0xff, 0x258, &(0x7f0000000780)="$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") r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000004c9002000000000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xe408d604c2d1c231}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004850}, 0x8040) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000240)={@private1, 0x36, r8}) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000200)={@dev, @rand_addr, 0x0}, &(0x7f0000000240)=0xc) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000002c0)={0x0, @remote, @loopback}, &(0x7f0000000300)=0xc) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r13, @ANYBLOB="0c000280060012"], 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) getpeername$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000001080)=ANY=[@ANYBLOB="9c020000", @ANYRES16=0x0, @ANYBLOB="00032bbd7000fcdbdf250200000008000100", @ANYRES32=r4, @ANYBLOB="8000028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000000030008000700000000003c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000008000100", @ANYRES32=r6, @ANYBLOB="ac01028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000300000008000600", @ANYRES32=r8, @ANYBLOB="6c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000003c0004000300010840000000000010070400000004000207090000000600060363000000010105060000000000000c0a040000000900050c4c8fffff3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r10, @ANYBLOB="40000100248001006c625f74785f686173685f746f5f70000500030003000000080004e2aa840186fcee00000000000000000000bc9448f8aa1adda61134d6b484466e5e1a3acfafd04e89e93726ae3b1fbb6458737f7af81a63b1b27655a7b0f1633c777e169e122a44190c3dcc5d18288d73280e2106e23fc367b4d3e91d1436b2989837684b1484562936463c7fad5925f6999f0d369b582d60aa36b0a3a3a0b5b63de99d7fe66abefa175def5a8068952f79ecf6367188e563c4a8f2e4e8d970deff87ef4cb7b2c38feffa00503625d6", @ANYRES32=r13, @ANYBLOB="080007000000000044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b75700000000008000100", @ANYRES32=r14, @ANYBLOB="4400028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000f48000008000600", @ANYRES32=r10, @ANYBLOB], 0x29c}, 0x1, 0x0, 0x0, 0x2000c004}, 0x1) r15 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r15}, 0x10) 4m10.029918085s ago: executing program 8 (id=6954): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, &(0x7f0000000300)=[0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1c, &(0x7f00000005c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000500), &(0x7f0000000640), 0x8, 0x8a, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00'}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0x3, 0x100, 0x0, 0xfffffffd}, &(0x7f0000000040), &(0x7f0000001040)) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) 4m9.699082467s ago: executing program 8 (id=6957): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000004000000000000008100d00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000007}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x2}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x54, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x37}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x40040) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000008c0)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}], [{@obj_user}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@appraise}, {@uid_eq}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x3ffff) sendfile(r4, r3, 0x0, 0x7ffff000) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xdb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6180000, 0x0, 0x0, 0xce56fe61a68fc369, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000001480)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0xb8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x250, 0xffffff7a, 0xffffffff, 0x250, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {0xff}, 0x16, 0x0, 0x41}, 0x6, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xc, 0x2, 0x4, 'snmp_trap\x00', {0x7}}}}, {{@ip={@multicast2, @local, 0xff, 0xffffff00, 'veth0_to_hsr\x00', 'virt_wifi0\x00', {}, {}, 0x33, 0x1, 0x9c}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x6, 'system_u:object_r:tpm_device_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000800)="87eb503e303871014b7b9b89f6d8770bf70878c2981d10c976d3fffec180fda539657a1e599627d88bcf518359413e764838ba1f6ad2db65567dbfb7a7f0a4d88e146a2a5597f9774ea3378d0476be28aa8715267ac72f365b6ac54f05865bc2dca5efc7502c602eb17a14d32238c69209000624662cd8e677d4efbaf0c33329c11f535c4165a8e3b679e2a170", 0x8d) shmget(0x0, 0x2000, 0x2c000400, &(0x7f0000fae000/0x2000)=nil) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 4m9.595318737s ago: executing program 8 (id=6959): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={@remote, @remote, @rand_addr=' \x01\x00', 0x9, 0xd2, 0x0, 0x400, 0x3, 0x50000}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000230900020073797a310000000008000a40fffffffc3c0000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b'], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) fstat(r7, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @ipv4=@multicast2}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r10}]}]}, 0x28}}, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x40, &(0x7f0000000500)={[{@release_agent={'release_agent', 0x3d, './file0'}}, {@release_agent={'release_agent', 0x3d, './file0'}}, {@subsystem='rlimit'}, {@nofavordynmods}], [{@pcr={'pcr', 0x3d, 0x32}}, {@uid_gt={'uid>', r8}}, {@dont_appraise}, {@euid_lt={'euid<', r10}}, {@obj_role={'obj_role', 0x3d, 'ethtool\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@dont_measure}]}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x90, 0x90, 0x6, [@typedef={0x7, 0x0, 0x0, 0x8, 0x1}, @union={0xb, 0x6, 0x0, 0x5, 0x1, 0x4, [{0xb, 0x4, 0x897}, {0x9, 0x1, 0x2}, {0x7, 0x4, 0x4b8}, {0x9, 0x4, 0xb6d}, {0x8, 0x0, 0x4}, {0x5, 0x2, 0x35fc}]}, @struct={0xb, 0x3, 0x0, 0x4, 0x1, 0xffffffff, [{0xf, 0x3, 0xf91f}, {0xe, 0x2, 0x9}, {0x3, 0x3, 0x3ff}]}]}, {0x0, [0x61, 0x30, 0x61, 0xd3cbcf0f22c1990f]}}, &(0x7f0000000340)=""/44, 0xae, 0x2c, 0x0, 0x1}, 0x28) 4m9.559838551s ago: executing program 8 (id=6960): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f00000000c0)='./file0/file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f00000002c0)='afs_reload_dir\x00', r1, 0x0, 0xfffffffffffff001}, 0x18) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) close(r2) socket(0x15, 0x5, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000300), 0x6, 0x64edcf355905532a) sendmsg$AUDIT_USER_TTY(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xe0001124}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x34, 0x464, 0x0, 0x70bd2b, 0x25dfdbff, "dfa522ffeae15c25133bd26ee3c96afa65da472daffb404cfc22c5a755c8eed09d", [""]}, 0x34}, 0x1, 0x0, 0x0, 0x8800}, 0x54) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 4m9.511135475s ago: executing program 8 (id=6961): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x18000, &(0x7f0000000000), 0x80, 0x62d, &(0x7f0000000c40)="$eJzs3c9rHNcdAPDvzEqyZauVXUqpTUsFPdhQvJZcU7c92e6hPhhqqA8h5GBhSY7w+geWDLZjsAw5JJBACLmG4Ev+gZBr0DXkFgKJbzkHnBCc5JAEb5jZWWuz2rU3kla78Xw+MDNv3szue98dvZ03MzuaAEprKhulEfsi4lwSMdmybCIaC6eK9R5+fft8NiRRr///qySSIq+5/qNiujsbJY3XfHwy4neV9eUu3bx1cbZWb7gTcXj50tXDSzdvHVq8NHth/sL85Zkj/zx6bPpfMx9uTZy7i+mp0//70+svv/iPhU9qh5I4HmdHX5qLtji2ylTj040sxNb8kYg4liU6fC6wnSrF3+NoRPwhJqOSzzVMxuJrA60c0Ff1SmP/VB+rA6WTxKBrAAxGsx/QPLbvx3HwMHtwIhvf6BD/SHH0vjM/Ntr1MGk5MspyI/ZsQfkrEfHj7f1vZ0N0OQ8xsgXldC3/bkT8sdP2T/L49+SRZvGnkba8LktPF+c2svr9ZxN1SFrSvf393dlEaT/3S+Jv3Q5Z/MeLaZZ/ssv7P+0Uz1TbfNnaHwCDsXqi2JFnHZFY2/9lPcNm/yfa+z/19/NrQ+37ro3ovv9Lt+Ddny7v/4102v839/c783142tYPS2Ll2zOd33K0PePzV0+92a38qZb+XzZk5Tf7gj3YdNfwwd2I/W3xv5J/9Mnj7Z906P9mq5zrsYz/fvrlqW7LNhn/ptXvRRzoePyz1ivNUm3XJ5NoXp88OnN4YbE2P90Ydyzjg49eeLdb+YOOP9v+u7rE/6Ttn+Vd7bGM987cu9RI7Vi3bOKp8adfjCVn89RYPl5rXmPJ6WKVxuTG7PLytSNPrktznXw604j/4F87t/8u8ecHH+PNr8weXH3u4sNuyza5/R/Ve1yxmyz+uQ1u/zd6LOO756//uduy9fGvnZMY32hQAAAAAAAAUFJpfg02SauP02laLS68/T52pbUrS8t/W7hy/fJcxMH895CjafNK92RjPsnmZ4rfwzbnj7TN/z0i9kbEW5XxfL56/kptbtDBAwAAAAAAAAAAAAAAAAAAwJDYXdz//6h4Htg3lTStVgddK2Db9PMBc8Bw0/6hvPL2vz3PWwOGjP0/lFfH9u9LAUpBU4fy0v6hvLR/KC/tH8pL+4fy6t7+1y252++6AAAAAABbZu9fVu+PRMTKv8fzITNWLBsdaM2AftPGobwqg64AMDCPL/C7/R9Kp6f+//fFPwfsf3WAAUg6Zeadg/qTG/9qx1cCAAAAAAAAAAAAAH1wYN/q/cT9/1BKbvuD8trY/f+Vjb8UGBqd/vW/x4FAOTjGh5Lr4STAzm4L3P8PAAAAAAAAAAAAANtmIh+StFr8DHgi0rRajfhNROyJ0WRhsTY/HRG/jYjPKqM7svmZQVcaAAAAAAAAAAAAAAAAAAAAnjFLN29dnK3V5q+1Jn5Yl/NsJ5pPPB2W+rQmIul7EWm05YxHxDDE3p/ESEtOErGSbfmteOdk838/MQyfT5EY8BcTAAAAAAAAAAAAAAAAAACUUMu9x53tf2ebawQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA22/t+f/9Sww6RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg1+mnAAAA//+EYjvS") 4m9.240996601s ago: executing program 8 (id=6965): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB="02030003230000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e22ac1414bb000000000000000002000100000000000000070c01000000030005000000000002004e21ac1e0101000000000000100002001000000004d3000004d50000000014001800090d94"], 0x118}, 0x1, 0x7}, 0x10) 4m9.240385981s ago: executing program 44 (id=6965): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB="02030003230000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e22ac1414bb000000000000000002000100000000000000070c01000000030005000000000002004e21ac1e0101000000000000100002001000000004d3000004d50000000014001800090d94"], 0x118}, 0x1, 0x7}, 0x10) 1m53.339182766s ago: executing program 7 (id=8866): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000004000000000000008100d00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000007}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x54, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x37}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x40040) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000008c0)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}], [{@obj_user}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@appraise}, {@uid_eq}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xdb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6180000, 0x0, 0x0, 0xce56fe61a68fc369, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000001480)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0xb8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x250, 0xffffff7a, 0xffffffff, 0x250, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {0xff}, 0x16, 0x0, 0x41}, 0x6, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xc, 0x2, 0x4, 'snmp_trap\x00', {0x7}}}}, {{@ip={@multicast2, @local, 0xff, 0xffffff00, 'veth0_to_hsr\x00', 'virt_wifi0\x00', {}, {}, 0x33, 0x1, 0x9c}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x6, 'system_u:object_r:tpm_device_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000800)="87eb503e303871014b7b9b89f6d8770bf70878c2981d10c976d3fffec180fda539657a1e599627d88bcf518359413e764838ba1f6ad2db65567dbfb7a7f0a4d88e146a2a5597f9774ea3378d0476be28aa8715267ac72f365b6ac54f05865bc2dca5efc7502c602eb17a14d32238c69209000624662cd8e677d4efbaf0c33329c11f535c4165a8e3b679e2a170", 0x8d) shmget(0x0, 0x2000, 0x2c000400, &(0x7f0000fae000/0x2000)=nil) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 1m53.143734895s ago: executing program 7 (id=8872): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, 0x0, &(0x7f00000003c0)}, 0x20) 1m53.096497169s ago: executing program 7 (id=8874): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000000906010200000000000000e1020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 1m53.09099056s ago: executing program 7 (id=8875): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ff01000000000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000000c0)='sched_switch\x00', r2}, 0x18) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x406, r3) ioctl$SCSI_IOCTL_START_UNIT(r4, 0x5319) (async) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='mpol=interleave,mpol=local']) (async) open$dir(&(0x7f0000000000)='./file0/file0\x00', 0x101042, 0x1) (async) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x16, 0x0, @tid=r5}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) (async) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000380)={[{@i_version}, {@stripe={'stripe', 0x3d, 0x4}}, {@commit={'commit', 0x3d, 0x6}}, {@lazytime}, {@i_version}, {@debug}]}, 0x1, 0x4c4, &(0x7f0000000f40)="$eJzs3ctrW1caAPBPku3YjmfymGFIMjAJZCDzIJYfDLFnZjOrmVkEhgl000Lq2oqbWraMJaexCdRpd1l0UVpaKF1037+gm2bVUChdt/vSRUlpUxfaQkHlXkmJrViuKI7V+P5+cJNzH9J3jsV3OPfoXt0AMutM8k8uYiQiPoqII43V7Qecafy3ee/GbLLkol6/9GUuPS5Zbx3aet3hiNiIiMGI+P+/I57JPRy3ura+MFMul1aa68Xa4nKxurZ+/urizHxpvrQ0PnVhenpqbHJies/aeuvl525dfPe/A+98+9LdO6+8/15SrZHmvq3t2EuNpvfHsS3b+iLin48iWA8Umu0Z6nVF+FmSz+83EXE2zf8jUUg/TSAL6vV6/Yf6oU67N+rAgZVPx8C5/GhENMr5/OhoYwz/2xjOlyvV2l+vVFaX5hpj5aPRn79ytVwaa54rHI3+XLI+npYfrE+0rU9GpGPgVwtD6frobKU8t79dHdDmcFv+f1No5D+QEU75IbvkP2SX/Ifskv+QXfIfskv+Q3bJf8gu+Q/ZJf8hu+Q/ZJf8h0z638WLyVJv3f8+d21tdaFy7fxcqbowurg6OzpbWVkena9U5tN7dhZ/6v3Klcry+N9i9XqxVqrWitW19cuLldWl2uX0vv7Lpf59aRXQjWOnb3+Si4iNvw+lS2KguU+uwsFWr+ei1/cgA71R6HUHBPSMqT/ILuf4QPtP9LaPCwY7vXD5wXwh8HjJ97oCQM+cO+n7P8gq8/+QXeb/IbuM8YEdHtG3zW7z/8Djyfw/ZNtOz//61ZZnd41FxK8j4uNC/6HWs76AgyD/ea45/j935I8j7XsHct+lXxEMRMTzb156/fpMrbYynmz/6v722hvN7RNbXtjxhAHolVaetvIYAMiuzXs3ZlvLfsb94l+NixAejt/XnJscTL+jHN7MbbtWIbdH1y5s3IyIEzvFzzWfd944kRneLDyI90Ij/vFmPXKNt0jr25c+N/0Rx2/GPLkl/h+2xD+1B38XyILbSf8ztlP+5dOcjvv5t73/Gdmjayc693/5+/1foUP/d7rLGM++9eJnHePfjDi1Y/xWvME0Vnv8pG7nuox/96knftdpX/3txvvsFL8lKRVri8vF6tr6+fR35OZLS+NTF6anp8YmJ6aL6Rx1sTVT/bB/nPjwzm7tH+4Qf7f2J9v+3GX7v//9B0+e2SX+n87u/Pkf3yX+UET8pcv4X098+nSnfUn8uQ7tz+8SP9k22WX86mv/OdTloQDAPqiurS/M9EVpJS2UywoKCvtbuPnLqEZbodc9E/CoVdeSU/Mk6XtdEwAAAAAAAAAAAKBb+3E5ca/bCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwEPwYAAD//yvJ1G8=") (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000060a010400000000000000000a0000010900010073797a31000000002c0004802800018007000100637400001c0002800500030001000000080002400000000308000440000000150900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) (async) ioprio_set$uid(0x3, 0x0, 0x0) 1m53.008598858s ago: executing program 7 (id=8878): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000001080)={[{@discard}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@quota}]}, 0x3, 0x43a, &(0x7f0000001100)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80) sendfile(r3, r3, 0x0, 0x7a680000) 1m52.580779009s ago: executing program 7 (id=8885): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, 0x0, &(0x7f00000003c0)}, 0x20) 1m52.486192978s ago: executing program 45 (id=8885): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, 0x0, &(0x7f00000003c0)}, 0x20) 1.849935493s ago: executing program 2 (id=11448): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = io_uring_setup(0x3b44, &(0x7f00000002c0)={0x0, 0x86a1, 0x0, 0x0, 0x20000004}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000000e00)={0x0, 0x0, {0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r3, 0xfffffffc) r5 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e22, @remote}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x3ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x18) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) socket$nl_generic(0x10, 0x3, 0x10) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) 1.737630415s ago: executing program 5 (id=11452): r0 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) read$msr(r2, &(0x7f0000002140)=""/102400, 0x19000) 1.735664844s ago: executing program 2 (id=11453): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000380)='timer_start\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="190000000400000008000000"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f00000002c0)=ANY=[@ANYRESHEX, @ANYRES64=r1, @ANYRES32=r0], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x15, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0b0000000500000001000100090000000100000059a1cab50575eb4e80fd9df6f644637d7b31add3e50715d8936d18ecaf43b4d76ffe54431ccadc7abc2b773d526e9d1495db5b735c93475834e74cd7be246216afde01749f2b2894b86abc0aaf8e35961246e0cef528e6570bb4483b8f08f9a6d8626013d1995c8d4781e3fed366ac54429e1aad133e954cd22a2f5666e05bf26fd21a4c989c71ff2629d06d5ac2cfdd0dbc1de343019ccab5f1e3095610c1b730baa7dd3c8a9beced82", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, 0x0, &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001300), &(0x7f00000016c0), 0x400, r3}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000417000/0x2000)=nil, 0x2000, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES8=0x0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000640)='nilfs2_mdt_insert_new_block\x00', r4, 0x0, 0xb}, 0x18) r5 = socket$inet_sctp(0x2, 0x5, 0x84) close(r5) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}, {0x0}], 0x2, &(0x7f0000000340)=ANY=[@ANYBLOB="200000000000000084000000020000000a0003c4dfc5de34bffc1e9425e2b9ae54c0f1b797c76b69aaef62", @ANYRES32=r7], 0x20, 0x2400e044}, 0x4000005) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB='-c'], 0x9) pipe(&(0x7f0000000400)) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r8}, 0x10) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d0, 0x210, 0x940c, 0x3002, 0x210, 0x2c0, 0x300, 0x3d8, 0x3d8, 0x300, 0x3d8, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x5, 0x0}, @private2, [0xff000000, 0xff000000, 0xff000000, 0xff000000], [0xff, 0xff000000, 0xffffffff, 0xff], 'veth1_to_team\x00', 'macsec0\x00', {}, {}, 0x62, 0x61, 0x0, 0x8}, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x1ffffc, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@unspec=@addrtype1={{0x28}, {0x2, 0x140, 0xc}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x916, {0x7c7a1f6d}}}}, {{@ipv6={@mcast1, @remote, [0xff000000, 0x0, 0xffffffff, 0xffffffff], [0xffffff00, 0x0, 0xff000000, 0xffffff00], 'syzkaller0\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x33, 0x9, 0x4, 0x10}, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x29, 0x2, 0x8, 0x9, 0x41, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x40, 0x3, 0xf}}) 1.457861791s ago: executing program 1 (id=11463): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) write$binfmt_script(r2, &(0x7f0000001300)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) close_range(r1, r2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket(0x10, 0x3, 0x9) connect$netlink(r6, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r5, 0x0, 0x8000}, 0x18) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYRES64=r4], 0x28}}, 0x20000000) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x8008, 0xc8, 0xffffffff, 0x0, 0x1, 0x341}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgget$private(0x0, 0x2) 1.389322057s ago: executing program 1 (id=11466): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f00000017c0)='./file1\x00', 0x2000000, &(0x7f0000000080)={[{@dioread_nolock}, {@discard}]}, 0x1, 0xb80, &(0x7f0000000c40)="$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") sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x401}, 0x18) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x20008000) r1 = creat(&(0x7f0000000040)='./file1\x00', 0x173) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x14, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) process_vm_writev(0x0, &(0x7f0000000000)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_setup(0x3, 0x0) open(0x0, 0x64042, 0x1e9) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, 0x0, &(0x7f00000003c0)}, 0x20) sendmsg$can_j1939(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)="2086596618db6284c57d735b5e892eec2cd426c13f272f80fb4bd6de233e54b78f3575", 0x23}, 0x1, 0x0, 0x0, 0x200400c0}, 0x4000000) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r3, 0x0, 0x2}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) 1.180345537s ago: executing program 9 (id=11470): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000004000000000000008100d00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000007}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x2}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x54, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x37}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x40040) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000008c0)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}], [{@obj_user}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@appraise}, {@uid_eq}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x3ffff) sendfile(r4, r3, 0x0, 0x7ffff000) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xdb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6180000, 0x0, 0x0, 0xce56fe61a68fc369, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000001480)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0xb8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x250, 0xffffff7a, 0xffffffff, 0x250, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {0xff}, 0x16, 0x0, 0x41}, 0x6, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xc, 0x2, 0x4, 'snmp_trap\x00', {0x7}}}}, {{@ip={@multicast2, @local, 0xff, 0xffffff00, 'veth0_to_hsr\x00', 'virt_wifi0\x00', {}, {}, 0x33, 0x1, 0x9c}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x6, 'system_u:object_r:tpm_device_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000800)="87eb503e303871014b7b9b89f6d8770bf70878c2981d10c976d3fffec180fda539657a1e599627d88bcf518359413e764838ba1f6ad2db65567dbfb7a7f0a4d88e146a2a5597f9774ea3378d0476be28aa8715267ac72f365b6ac54f05865bc2dca5efc7502c602eb17a14d32238c69209000624662cd8e677d4efbaf0c33329c11f535c4165a8e3b679e2a170", 0x8d) shmget(0x0, 0x2000, 0x2c000400, &(0x7f0000fae000/0x2000)=nil) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 1.15994111s ago: executing program 0 (id=11472): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_uring_setup(0x3b44, &(0x7f00000002c0)={0x0, 0x86a1, 0x0, 0x0, 0x20000004}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$pppl2tp(0x18, 0x1, 0x1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e22, @remote}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x3ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) 1.094350546s ago: executing program 9 (id=11473): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x7, 0x8000, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r2, 0x0, 0x2}, 0x18) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r3, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 1.086802697s ago: executing program 0 (id=11474): syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.078507957s ago: executing program 1 (id=11475): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000004000000000000008100d00850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000007}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x2}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x48, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x34, 0x1, [{0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x37}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x40040) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000008c0)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}], [{@obj_user}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@appraise}, {@uid_eq}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x3ffff) sendfile(r4, r3, 0x0, 0x7ffff000) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xdb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6180000, 0x0, 0x0, 0xce56fe61a68fc369, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000001480)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0xb8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x250, 0xffffff7a, 0xffffffff, 0x250, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {0xff}, 0x16, 0x0, 0x41}, 0x6, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xc, 0x2, 0x4, 'snmp_trap\x00', {0x7}}}}, {{@ip={@multicast2, @local, 0xff, 0xffffff00, 'veth0_to_hsr\x00', 'virt_wifi0\x00', {}, {}, 0x33, 0x1, 0x9c}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x6, 'system_u:object_r:tpm_device_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r5, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000800)="87eb503e303871014b7b9b89f6d8770bf70878c2981d10c976d3fffec180fda539657a1e599627d88bcf518359413e764838ba1f6ad2db65567dbfb7a7f0a4d88e146a2a5597f9774ea3378d0476be28aa8715267ac72f365b6ac54f05865bc2dca5efc7502c602eb17a14d32238c69209000624662cd8e677d4efbaf0c33329c11f535c4165a8e3b679e2a170", 0x8d) shmget(0x0, 0x2000, 0x2c000400, &(0x7f0000fae000/0x2000)=nil) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 1.0538421s ago: executing program 9 (id=11476): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000004000000000000008100d00850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000007}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x2}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x48, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x34, 0x1, [{0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x37}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x40040) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000008c0)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}], [{@obj_user}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@appraise}, {@uid_eq}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x3ffff) sendfile(r4, r3, 0x0, 0x7ffff000) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xdb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6180000, 0x0, 0x0, 0xce56fe61a68fc369, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000001480)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0xb8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x250, 0xffffff7a, 0xffffffff, 0x250, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {0xff}, 0x16, 0x0, 0x41}, 0x6, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xc, 0x2, 0x4, 'snmp_trap\x00', {0x7}}}}, {{@ip={@multicast2, @local, 0xff, 0xffffff00, 'veth0_to_hsr\x00', 'virt_wifi0\x00', {}, {}, 0x33, 0x1, 0x9c}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x6, 'system_u:object_r:tpm_device_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32=r5, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000800)="87eb503e303871014b7b9b89f6d8770bf70878c2981d10c976d3fffec180fda539657a1e599627d88bcf518359413e764838ba1f6ad2db65567dbfb7a7f0a4d88e146a2a5597f9774ea3378d0476be28aa8715267ac72f365b6ac54f05865bc2dca5efc7502c602eb17a14d32238c69209000624662cd8e677d4efbaf0c33329c11f535c4165a8e3b679e2a170", 0x8d) shmget(0x0, 0x2000, 0x2c000400, &(0x7f0000fae000/0x2000)=nil) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 1.04816437s ago: executing program 0 (id=11477): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) write$binfmt_script(r2, &(0x7f0000001300)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) close_range(r1, r2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket(0x10, 0x3, 0x9) connect$netlink(r6, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r5, 0x0, 0x8000}, 0x18) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYRES64=r4], 0x28}}, 0x20000000) msgget$private(0x0, 0x2) 1.010594974s ago: executing program 0 (id=11478): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0xfffffffd) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) bind$inet(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r5, 0x40304580, &(0x7f00000003c0)={0x55, 0x401, 0xfffd, {0x0, 0x1}, {0x50, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) write$char_usb(r5, &(0x7f0000000040)="e2", 0x2250) r6 = io_uring_setup(0x68af, &(0x7f0000000480)={0x0, 0x0, 0x1880, 0x1}) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3f, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) close_range(r6, 0xffffffffffffffff, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000017c0)=@newtaction={0x898, 0x30, 0xfbed, 0x70bd29, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0xb, 0xffffffffffffffff}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x2, 0x4000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x10000, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x4e16, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7fe6bd0, 0x6, 0x1ffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x80000000, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3a4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x894e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400400, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xcd9, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x319e, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffc, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x400]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0xfffc, 0x5}, {0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) r9 = socket$rds(0x15, 0x5, 0x0) bind$rds(r9, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r9, &(0x7f0000000080)={&(0x7f00000017c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@mask_cswp={0x58, 0x114, 0x9, {{0x9, 0x660}, 0x0, 0x0, 0x6, 0xd, 0x1, 0x3, 0x3a, 0x8}}], 0x58}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000006c6d0000fdff17110000", @ANYRES32, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='start_task_reaping\x00', r10, 0x0, 0x5}, 0x18) 962.758349ms ago: executing program 9 (id=11479): r0 = socket$netlink(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f00000000c0)="14a1c73255298e5e0545deac3aa74852b7290ce76f9f46215fb27fa9f38810c85858d56e87e07b2163637afc878690c009daa0442f42e01511e00dddd1019586b90c0e198baf70e1d88a14dbb0da6d44aad2e7af894519ed780888091ac2698f8390213145d2eab9510579b750b6616713ba04bc15acf8e464ed694729767b611f0a3e8f", &(0x7f0000000180)="09b731cdac1ea4f13955c83dcb2ca5321f775303cb838a57f740337ecc25d2000d3f3cd5"}}, &(0x7f0000000080)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x70, 0x103781) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x9c}}, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x15, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000001000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000001117f000010000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000002140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r5}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) perf_event_open(&(0x7f00000002c0)={0x4, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x40002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x1}, 0xc004, 0x10000, 0x0, 0x8, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000002000000b}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="a6e32a0000000000000000000000000200"/31], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[], 0x10) sendmsg$inet(r6, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x840, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x803}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000005200010000000000000000000200000008000100", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) 954.569949ms ago: executing program 1 (id=11480): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x88034, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x8, 0x6}, 0x10, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0xfffffffc, 0x0, 0x20000006}, 0x0, 0xc, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f0000000bc0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@errors_remount}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@nombcache}, {@errors_remount}]}, 0x11, 0x553, &(0x7f0000001080)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)}], 0x1, 0x5405, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000380)={0x3fffffffbfb, 0x5, 0x5, 0x7f}) 888.881356ms ago: executing program 2 (id=11481): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x7, 0x8000, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a51811", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r2, 0x0, 0x2}, 0x18) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r3, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 883.259886ms ago: executing program 0 (id=11482): prctl$PR_SET_NAME(0xf, &(0x7f0000000700)=',&#^%\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x0, 0x0, 0x6}}, 0x18) 856.763449ms ago: executing program 1 (id=11483): socket(0x400000000010, 0x3, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$P9_RGETLOCK(r3, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r2, r5, 0xfffffffffffffc01, 0x8) read$msr(r4, &(0x7f0000002140)=""/102400, 0x19000) 854.502099ms ago: executing program 2 (id=11484): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x600180, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000380)='afs_edit_dir\x00', r1, 0x0, 0x3}, 0x18) fcntl$setlease(r1, 0x406, 0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="070000000400000008020000d900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000900000000000000007a0100000000000000"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000492d73a1325ea395aaf39cfa7746d2c650f4bcf951fe1b5703150b2a488ba13db44c2ca74da5b8436553a313bffd07a48fc6b418548c092ad08ba74ea25b24737337a41b92e82f47f0dabe9419f824eb27b0930b60ea657be9997eae99ea18a4de9273c396bc9b1f0dc5ca191ae818b486287ce4195b790de4bca4117be5a0f9fdf44f2c3d66fc5c1284ec47333060b536"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r5}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$LOOP_SET_STATUS64(r0, 0xc0c0128e, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4, 0x2a9, 0x0, 0x0, 0x10000015, 0x19, "8975301576b0cf0900245518580ce0c8bf604cca41f31c108938fcfa393edb69e0bcff0f0000000000000900000000000000d0f08e8ad896ba67a00973defa00", "8b609009aaa722681a1e2513d754f688a9e306ee1dba533f02e1b69da6e26ec889fee41b80000827cc7d24fdc26f2395d702020000e4b8fb1703e47463b969e4", "ca1bf5ff2b4a000000000000008218040000db00000000000000000000000059", [0xc, 0xfffffffffffffffd]}) 845.13224ms ago: executing program 5 (id=11485): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000800000001", @ANYRES16=0xffffffffffffffff], 0x48) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="181000000000000000000000000000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB="00000000009e0000b703000000030000850000001b000000b7000000"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x55, '\x00', 0x0, @fallback=0x37, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77b}, 0x94) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x17, 0x40, 0x6, 0x0, 0x0, 0x10609, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x108f8f, 0x7ff, 0x6, 0x8, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r7, &(0x7f0000001680)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0xffff, 0x0, 0xa}, {0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x5, 0x0, 0x0, 0x8}, {0x3ad}, 0x1, 0x0, 0x1, 0x0, 0x5}, {{@in=@rand_addr=0x64010100, 0x4, 0x2b}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x4}}, 0xe8) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) bind$bt_hci(r6, 0x0, 0x0) write(r6, 0x0, 0x0) recvmmsg(r6, 0x0, 0x0, 0x12122, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r9 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x1006, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r10}, &(0x7f0000000180), &(0x7f00000001c0)=r9}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 829.353981ms ago: executing program 0 (id=11486): r0 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) pipe2(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) read$msr(r3, &(0x7f0000002140)=""/102400, 0x19000) 404.834492ms ago: executing program 2 (id=11487): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x7, 0x8000, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r2, 0x0, 0x2}, 0x18) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r3, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 275.164284ms ago: executing program 5 (id=11488): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1008}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4f, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000780)='netlink_extack\x00', r2}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r3) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000200000000000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r4, 0x5608) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xf00, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1000000000000000"], 0x5c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900038073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3440}}, 0x0) 274.281705ms ago: executing program 2 (id=11489): r0 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) read$msr(r2, &(0x7f0000002140)=""/102400, 0x19000) 246.749157ms ago: executing program 5 (id=11490): getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000580), 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x9d}, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c783, 0x20, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x0, 0x7ff, 0x1}, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x8, 0x80, 0x0, 0x0, 0x0, {0x0, 0x0, 0xffffffdc, 0x0, 0xff}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) 220.85813ms ago: executing program 5 (id=11491): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x88034, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x8, 0x6}, 0x10, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0xfffffffc, 0x0, 0x20000006}, 0x0, 0xc, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f0000000bc0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@errors_remount}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@nombcache}, {@errors_remount}]}, 0x11, 0x553, &(0x7f0000001080)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000080)='Y', 0x1}], 0x1, 0x5405, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000380)={0x3fffffffbfb, 0x5, 0x5, 0x7f}) syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x6}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400001a679808d010aaa8000000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r6, @ANYRES16=r6, @ANYRESOCT], 0xc4}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r8, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@gettclass={0x24, 0x2a, 0x100, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xfff1}, {0xfff3}, {0x1, 0x3}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8004001}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xd, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r11, 0x0, 0xfffffffffffff001}, 0x18) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000003f0001002cbd7000ffdbdf25010000003a0004"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 137.769707ms ago: executing program 5 (id=11492): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000380)='timer_start\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="190000000400000008000000"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f00000002c0)=ANY=[@ANYRESHEX, @ANYRES64=r1, @ANYRES32=r0], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x15, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0b0000000500000001000100090000000100000059a1cab50575eb4e80fd9df6f644637d7b31add3e50715d8936d18ecaf43b4d76ffe54431ccadc7abc2b773d526e9d1495db5b735c93475834e74cd7be246216afde01749f2b2894b86abc0aaf8e35961246e0cef528e6570bb4483b8f08f9a6d8626013d1995c8d4781e3fed366ac54429e1aad133e954cd22a2f5666e05bf26fd21a4c989c71ff2629d06d5ac2cfdd0dbc1de343019ccab5f1e3095610c1b730baa7dd3c8a9beced82", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, 0x0, &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001300), &(0x7f00000016c0), 0x400, r3}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000417000/0x2000)=nil, 0x2000, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES8=0x0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000640)='nilfs2_mdt_insert_new_block\x00', r4, 0x0, 0xb}, 0x18) r5 = socket$inet_sctp(0x2, 0x5, 0x84) close(r5) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}, {0x0}], 0x2, &(0x7f0000000340)=ANY=[@ANYBLOB="200000000000000084000000020000000a0003c4dfc5de34bffc1e9425e2b9ae54c0f1b797c76b69aaef62", @ANYRES32=r7], 0x20, 0x2400e044}, 0x4000005) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB='-c'], 0x9) pipe(&(0x7f0000000400)) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r8}, 0x10) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d0, 0x210, 0x940c, 0x3002, 0x210, 0x2c0, 0x300, 0x3d8, 0x3d8, 0x300, 0x3d8, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x5, 0x0}, @private2, [0xff000000, 0xff000000, 0xff000000, 0xff000000], [0xff, 0xff000000, 0xffffffff, 0xff], 'veth1_to_team\x00', 'macsec0\x00', {}, {}, 0x62, 0x61, 0x0, 0x8}, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x1ffffc, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@unspec=@addrtype1={{0x28}, {0x2, 0x140, 0xc}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x916, {0x7c7a1f6d}}}}, {{@ipv6={@mcast1, @remote, [0xff000000, 0x0, 0xffffffff, 0xffffffff], [0xffffff00, 0x0, 0xff000000, 0xffffff00], 'syzkaller0\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x33, 0x9, 0x4, 0x10}, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x29, 0x2, 0x8, 0x9, 0x41, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x40, 0x3, 0xf}}) 55.969665ms ago: executing program 9 (id=11493): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000004000000000000008100d00850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000007}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x2}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x48, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x34, 0x1, [{0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x37}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x40040) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000008c0)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}], [{@obj_user}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@appraise}, {@uid_eq}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x3ffff) sendfile(r4, r3, 0x0, 0x7ffff000) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xdb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6180000, 0x0, 0x0, 0xce56fe61a68fc369, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000001480)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0xb8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x250, 0xffffff7a, 0xffffffff, 0x250, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {0xff}, 0x16, 0x0, 0x41}, 0x6, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xc, 0x2, 0x4, 'snmp_trap\x00', {0x7}}}}, {{@ip={@multicast2, @local, 0xff, 0xffffff00, 'veth0_to_hsr\x00', 'virt_wifi0\x00', {}, {}, 0x33, 0x1, 0x9c}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x6, 'system_u:object_r:tpm_device_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r5, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000800)="87eb503e303871014b7b9b89f6d8770bf70878c2981d10c976d3fffec180fda539657a1e599627d88bcf518359413e764838ba1f6ad2db65567dbfb7a7f0a4d88e146a2a5597f9774ea3378d0476be28aa8715267ac72f365b6ac54f05865bc2dca5efc7502c602eb17a14d32238c69209000624662cd8e677d4efbaf0c33329c11f535c4165a8e3b679e2a170", 0x8d) shmget(0x0, 0x2000, 0x2c000400, &(0x7f0000fae000/0x2000)=nil) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 1.64976ms ago: executing program 1 (id=11494): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0xfffffffd) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) bind$inet(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r5, 0x40304580, &(0x7f00000003c0)={0x55, 0x401, 0xfffd, {0x0, 0x1}, {0x50, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) write$char_usb(r5, &(0x7f0000000040)="e2", 0x2250) r6 = io_uring_setup(0x68af, &(0x7f0000000480)={0x0, 0x0, 0x1880, 0x1}) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3f, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) close_range(r6, 0xffffffffffffffff, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000017c0)=@newtaction={0x898, 0x30, 0xfbed, 0x70bd29, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0xb, 0xffffffffffffffff}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x2, 0x4000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x10000, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x4e16, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7fe6bd0, 0x6, 0x1ffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x80000000, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3a4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x894e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400400, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xcd9, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x319e, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffc, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x400]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0xfffc, 0x5}, {0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) r9 = socket$rds(0x15, 0x5, 0x0) bind$rds(r9, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r9, &(0x7f0000000080)={&(0x7f00000017c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@mask_cswp={0x58, 0x114, 0x9, {{0x9, 0x660}, 0x0, 0x0, 0x6, 0xd, 0x1, 0x3, 0x3a, 0x8}}], 0x58}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000006c6d0000fdff17110000", @ANYRES32, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='start_task_reaping\x00', r10, 0x0, 0x5}, 0x18) 0s ago: executing program 9 (id=11495): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x41b4, 0x2) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r2]) kernel console output (not intermixed with test programs): 681.353090][ T6660] ? __schedule+0x85f/0xcd0 [ 681.353109][ T6660] ? __pfx_default_wake_function+0x10/0x10 [ 681.353141][ T6660] handle_mm_fault+0x9d8/0x2c60 [ 681.353212][ T6660] do_user_addr_fault+0x630/0x1080 [ 681.353257][ T6660] exc_page_fault+0x62/0xa0 [ 681.353285][ T6660] asm_exc_page_fault+0x26/0x30 [ 681.353303][ T6660] RIP: 0033:0x7f4de17f1fc5 [ 681.353318][ T6660] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 9e 95 1f 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 681.353336][ T6660] RSP: 002b:00007ffc83f1f808 EFLAGS: 00010246 [ 681.353379][ T6660] RAX: 0000000000000000 RBX: 0000000000000102 RCX: 00007f4de17f1fc3 [ 681.353391][ T6660] RDX: 00007ffc83f1f820 RSI: 0000000000000000 RDI: 0000000000000000 [ 681.353406][ T6660] RBP: 00007ffc83f1f88c R08: 0000000011388fae R09: 0000000000000000 [ 681.353443][ T6660] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 681.353454][ T6660] R13: 00000000000927c0 R14: 00000000000a64ef R15: 00007ffc83f1f8e0 [ 681.353472][ T6660] [ 681.353480][ T6660] memory: usage 307200kB, limit 307200kB, failcnt 1645 [ 681.389474][ T8553] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 681.392755][ T6660] memory+swap: usage 295168kB, limit 9007199254740988kB, failcnt 0 [ 681.392773][ T6660] kmem: usage 294928kB, limit 9007199254740988kB, failcnt 0 [ 681.392786][ T6660] Memory cgroup stats for /syz9: [ 681.395031][ T6660] cache 0 [ 681.574311][ T8553] EXT4-fs (loop2): 1 truncate cleaned up [ 681.575723][ T6660] rss 0 [ 681.575732][ T6660] shmem 0 [ 681.575740][ T6660] mapped_file 0 [ 681.575747][ T6660] dirty 0 [ 681.575755][ T6660] writeback 0 [ 681.575763][ T6660] workingset_refault_anon 329 [ 681.575835][ T6660] workingset_refault_file 2 [ 681.575844][ T6660] swap 192512 [ 681.575851][ T6660] swapcached 4096 [ 681.575859][ T6660] pgpgin 399994 [ 681.575867][ T6660] pgpgout 399992 [ 681.615757][ T8557] EXT4-fs: Ignoring removed orlov option [ 681.621428][ T6660] pgfault 448872 [ 681.625171][ T8557] ext4: Unknown parameter 'obj_user' [ 681.627071][ T6660] pgmajfault 186 [ 681.627080][ T6660] inactive_anon 4096 [ 681.627089][ T6660] active_anon 0 [ 681.685384][ T6660] inactive_file 4096 [ 681.689309][ T6660] active_file 0 [ 681.692768][ T6660] unevictable 0 [ 681.696273][ T6660] hierarchical_memory_limit 314572800 [ 681.701689][ T6660] hierarchical_memsw_limit 9223372036854771712 [ 681.707835][ T6660] total_cache 0 [ 681.707972][ T8559] program syz.5.10710 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 681.711397][ T6660] total_rss 0 [ 681.711407][ T6660] total_shmem 0 [ 681.711414][ T6660] total_mapped_file 0 [ 681.711423][ T6660] total_dirty 0 [ 681.734903][ T6660] total_writeback 0 [ 681.738735][ T6660] total_workingset_refault_anon 329 [ 681.743933][ T6660] total_workingset_refault_file 2 [ 681.748935][ T6660] total_swap 192512 [ 681.752768][ T6660] total_swapcached 4096 [ 681.756911][ T6660] total_pgpgin 399994 [ 681.760965][ T6660] total_pgpgout 399992 [ 681.765023][ T6660] total_pgfault 448872 [ 681.769066][ T6660] total_pgmajfault 186 [ 681.773153][ T6660] total_inactive_anon 4096 [ 681.777563][ T6660] total_active_anon 0 [ 681.781558][ T6660] total_inactive_file 4096 [ 681.786122][ T6660] total_active_file 0 [ 681.786310][ T8561] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 681.790144][ T6660] total_unevictable 0 [ 681.790155][ T6660] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.10704,pid=8546,uid=0 [ 681.817892][ T6660] Memory cgroup out of memory: Killed process 8546 (syz.9.10704) total-vm:93968kB, anon-rss:1136kB, file-rss:22180kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 681.836251][ T8561] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.10711: Allocating blocks 41-42 which overlap fs metadata [ 681.851757][ T8561] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.10711: Allocating blocks 41-42 which overlap fs metadata [ 681.877299][ T8565] EXT4-fs: inline encryption not supported [ 681.884018][ T8561] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.10711: Failed to acquire dquot type 1 [ 681.895875][ T8561] EXT4-fs error (device loop5): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 681.910766][ T8561] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.10711: corrupted inode contents [ 681.923431][ T8561] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #12: comm syz.5.10711: mark_inode_dirty error [ 681.935175][ T8561] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.10711: corrupted inode contents [ 681.947433][ T8561] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #12: comm syz.5.10711: mark_inode_dirty error [ 681.959209][ T8561] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.10711: corrupted inode contents [ 681.971338][ T8561] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 681.980152][ T8561] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.10711: corrupted inode contents [ 681.992391][ T8561] EXT4-fs error (device loop5): ext4_truncate:4635: inode #12: comm syz.5.10711: mark_inode_dirty error [ 681.993518][ T8572] EXT4-fs: inline encryption not supported [ 682.009618][ T8561] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 682.018831][ T8561] EXT4-fs (loop5): 1 truncate cleaned up [ 682.067973][ T8581] program syz.5.10716 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 682.138534][ T8574] netlink: 'syz.1.10713': attribute type 1 has an invalid length. [ 682.177604][ T8591] EXT4-fs (loop1): 1 truncate cleaned up [ 682.229881][ T8595] hub 2-0:1.0: USB hub found [ 682.236980][ T8595] hub 2-0:1.0: 8 ports detected [ 682.434756][ T8620] EXT4-fs: inline encryption not supported [ 682.540447][ T8649] netdevsim netdevsim9: Direct firmware load for ./file1 failed with error -2 [ 682.746523][ T8693] EXT4-fs: inline encryption not supported [ 682.872301][ T8722] IPv6: NLM_F_CREATE should be specified when creating new route [ 682.885296][ T8722] EXT4-fs: Ignoring removed orlov option [ 682.891670][ T8722] ext4: Unknown parameter 'obj_user' [ 682.901748][ T8722] __nla_validate_parse: 15 callbacks suppressed [ 682.901765][ T8722] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10733'. [ 683.036531][ T8752] netlink: 68 bytes leftover after parsing attributes in process `syz.0.10736'. [ 683.110234][ T8765] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 683.179465][ T8773] EXT4-fs: inline encryption not supported [ 683.188634][ T8775] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10738'. [ 683.198897][ T8775] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10738'. [ 683.277968][ T8789] EXT4-fs: inline encryption not supported [ 683.323165][ T8795] hub 2-0:1.0: USB hub found [ 683.327993][ T8795] hub 2-0:1.0: 8 ports detected [ 683.350982][ T8781] netlink: 'syz.5.10740': attribute type 1 has an invalid length. [ 683.358898][ T8781] netlink: 224 bytes leftover after parsing attributes in process `syz.5.10740'. [ 683.529977][ T8815] hub 2-0:1.0: USB hub found [ 683.534773][ T8815] hub 2-0:1.0: 8 ports detected [ 683.558266][ T8818] EXT4-fs (loop9): 1 truncate cleaned up [ 684.154397][ T8947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10752'. [ 684.163856][ T8947] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10752'. [ 684.206435][ T8955] set_capacity_and_notify: 21 callbacks suppressed [ 684.206450][ T8955] loop5: detected capacity change from 0 to 1024 [ 684.219405][ T29] kauditd_printk_skb: 1343 callbacks suppressed [ 684.219419][ T29] audit: type=1326 audit(1766372925.885:64588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8956 comm="syz.0.10755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84a4b8f749 code=0x7ffc0000 [ 684.228009][ T8955] EXT4-fs: inline encryption not supported [ 684.249411][ T29] audit: type=1326 audit(1766372925.885:64589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8956 comm="syz.0.10755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f84a4b8f749 code=0x7ffc0000 [ 684.249439][ T29] audit: type=1326 audit(1766372925.885:64590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8956 comm="syz.0.10755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84a4b8f749 code=0x7ffc0000 [ 684.302704][ T29] audit: type=1326 audit(1766372925.885:64591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8956 comm="syz.0.10755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f84a4b8f749 code=0x7ffc0000 [ 684.326281][ T29] audit: type=1326 audit(1766372925.885:64592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8956 comm="syz.0.10755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84a4b8f749 code=0x7ffc0000 [ 684.350089][ T29] audit: type=1326 audit(1766372925.885:64593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8956 comm="syz.0.10755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f84a4b8f749 code=0x7ffc0000 [ 684.373657][ T29] audit: type=1326 audit(1766372925.885:64594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8956 comm="syz.0.10755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84a4b8f749 code=0x7ffc0000 [ 684.397250][ T29] audit: type=1326 audit(1766372925.885:64595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8956 comm="syz.0.10755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f84a4b8f749 code=0x7ffc0000 [ 684.421387][ T29] audit: type=1326 audit(1766372925.885:64596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8956 comm="syz.0.10755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84a4b8f749 code=0x7ffc0000 [ 684.445687][ T29] audit: type=1326 audit(1766372925.885:64597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8956 comm="syz.0.10755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f84a4b8f749 code=0x7ffc0000 [ 684.576822][ T8973] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 684.610992][ T8967] netlink: 'syz.9.10757': attribute type 1 has an invalid length. [ 684.618808][ T8967] netlink: 224 bytes leftover after parsing attributes in process `syz.9.10757'. [ 684.656181][ T8977] hub 2-0:1.0: USB hub found [ 684.661175][ T8977] hub 2-0:1.0: 8 ports detected [ 684.677011][ T8981] loop9: detected capacity change from 0 to 2048 [ 684.744706][ T8988] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10764'. [ 684.753920][ T8988] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10764'. [ 684.789882][ T8992] loop1: detected capacity change from 0 to 512 [ 684.797617][ T8992] EXT4-fs (loop1): 1 truncate cleaned up [ 684.850926][ T8997] loop9: detected capacity change from 0 to 4096 [ 684.909997][ T9000] loop9: detected capacity change from 0 to 1024 [ 684.916747][ T9000] EXT4-fs: inline encryption not supported [ 685.061753][ T9010] loop9: detected capacity change from 0 to 1024 [ 685.068639][ T9010] EXT4-fs: Ignoring removed orlov option [ 685.074319][ T9010] ext4: Unknown parameter 'obj_user' [ 685.421905][ T9016] hub 2-0:1.0: USB hub found [ 685.426972][ T9016] hub 2-0:1.0: 8 ports detected [ 685.707287][ T9028] loop1: detected capacity change from 0 to 1024 [ 685.715330][ T9028] EXT4-fs: Ignoring removed orlov option [ 685.721118][ T9028] ext4: Unknown parameter 'obj_user' [ 685.754602][ T9031] loop5: detected capacity change from 0 to 1024 [ 685.762075][ T9031] EXT4-fs: inline encryption not supported [ 685.801665][T28970] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 685.812661][T28970] CPU: 1 UID: 0 PID: 28970 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 685.812763][T28970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 685.812774][T28970] Call Trace: [ 685.812780][T28970] [ 685.812786][T28970] __dump_stack+0x1d/0x30 [ 685.812838][T28970] dump_stack_lvl+0x95/0xd0 [ 685.812860][T28970] dump_stack+0x15/0x1b [ 685.812885][T28970] dump_header+0x81/0x240 [ 685.812967][T28970] oom_kill_process+0x295/0x350 [ 685.813063][T28970] out_of_memory+0x97b/0xb80 [ 685.813126][T28970] try_charge_memcg+0x610/0xa10 [ 685.813151][T28970] charge_memcg+0x51/0xc0 [ 685.813322][T28970] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 685.813355][T28970] __read_swap_cache_async+0x17b/0x2d0 [ 685.813402][T28970] swap_cluster_readahead+0x362/0x3c0 [ 685.813431][T28970] swapin_readahead+0xde/0x820 [ 685.813499][T28970] ? __rcu_read_unlock+0x4f/0x70 [ 685.813561][T28970] ? __perf_event_task_sched_in+0xa5b/0xac0 [ 685.813581][T28970] ? __rcu_read_unlock+0x4f/0x70 [ 685.813597][T28970] ? __rcu_read_unlock+0x4f/0x70 [ 685.813636][T28970] ? swap_cache_get_folio+0x277/0x280 [ 685.813684][T28970] do_swap_page+0x2b4/0x21e0 [ 685.813777][T28970] ? _raw_spin_unlock+0x26/0x50 [ 685.813798][T28970] ? __schedule+0x85f/0xcd0 [ 685.813820][T28970] ? __pfx_default_wake_function+0x10/0x10 [ 685.813850][T28970] handle_mm_fault+0x9d8/0x2c60 [ 685.813954][T28970] do_user_addr_fault+0x630/0x1080 [ 685.813986][T28970] exc_page_fault+0x62/0xa0 [ 685.814044][T28970] asm_exc_page_fault+0x26/0x30 [ 685.814064][T28970] RIP: 0033:0x7f84a4bc1fc5 [ 685.814082][T28970] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 9e 95 1f 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 685.814101][T28970] RSP: 002b:00007ffee6f86218 EFLAGS: 00010246 [ 685.814180][T28970] RAX: 0000000000000000 RBX: 00000000000005ac RCX: 00007f84a4bc1fc3 [ 685.814194][T28970] RDX: 00007ffee6f86230 RSI: 0000000000000000 RDI: 0000000000000000 [ 685.814208][T28970] RBP: 00007ffee6f8629c R08: 000000002d5a31da R09: 0000000000000000 [ 685.814222][T28970] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 685.814235][T28970] R13: 00000000000927c0 R14: 00000000000a763f R15: 00007ffee6f862f0 [ 685.814256][T28970] [ 685.814264][T28970] memory: usage 307200kB, limit 307200kB, failcnt 37434 [ 686.046163][T28970] memory+swap: usage 492kB, limit 9007199254740988kB, failcnt 0 [ 686.053879][T28970] kmem: usage 328kB, limit 9007199254740988kB, failcnt 0 [ 686.060897][T28970] Memory cgroup stats for /syz0: [ 686.061610][T28970] cache 0 [ 686.069534][T28970] rss 36864 [ 686.072639][T28970] shmem 0 [ 686.075575][T28970] mapped_file 0 [ 686.079018][T28970] dirty 0 [ 686.081970][T28970] writeback 0 [ 686.085253][T28970] workingset_refault_anon 681 [ 686.089994][T28970] workingset_refault_file 6222 [ 686.094792][T28970] swap 94208 [ 686.097971][T28970] swapcached 20480 [ 686.101733][T28970] pgpgin 1496286 [ 686.105486][T28970] pgpgout 1496277 [ 686.109251][T28970] pgfault 1395558 [ 686.112917][T28970] pgmajfault 358 [ 686.116467][T28970] inactive_anon 0 [ 686.120221][T28970] active_anon 36864 [ 686.124051][T28970] inactive_file 0 [ 686.127768][T28970] active_file 0 [ 686.131279][T28970] unevictable 0 [ 686.134734][T28970] hierarchical_memory_limit 314572800 [ 686.140135][T28970] hierarchical_memsw_limit 9223372036854771712 [ 686.146289][T28970] total_cache 0 [ 686.149794][T28970] total_rss 36864 [ 686.153503][T28970] total_shmem 0 [ 686.156949][T28970] total_mapped_file 0 [ 686.160948][T28970] total_dirty 0 [ 686.164621][T28970] total_writeback 0 [ 686.168570][T28970] total_workingset_refault_anon 681 [ 686.173801][T28970] total_workingset_refault_file 6222 [ 686.179074][T28970] total_swap 94208 [ 686.182822][T28970] total_swapcached 20480 [ 686.187048][T28970] total_pgpgin 1496286 [ 686.191150][T28970] total_pgpgout 1496277 [ 686.195286][T28970] total_pgfault 1395558 [ 686.199473][T28970] total_pgmajfault 358 [ 686.203533][T28970] total_inactive_anon 0 [ 686.207749][T28970] total_active_anon 36864 [ 686.212090][T28970] total_inactive_file 0 [ 686.216352][T28970] total_active_file 0 [ 686.220386][T28970] total_unevictable 0 [ 686.224385][T28970] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.10779,pid=9025,uid=0 [ 686.239243][T28970] Memory cgroup out of memory: Killed process 9025 (syz.0.10779) total-vm:96016kB, anon-rss:1132kB, file-rss:21668kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 686.341499][ T9053] loop5: detected capacity change from 0 to 1024 [ 686.349061][ T9053] EXT4-fs: Ignoring removed orlov option [ 686.355650][ T9053] ext4: Unknown parameter 'obj_user' [ 686.434082][ T9044] syz.1.10786 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 686.445297][ T9044] CPU: 0 UID: 0 PID: 9044 Comm: syz.1.10786 Not tainted syzkaller #0 PREEMPT(voluntary) [ 686.445327][ T9044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 686.445337][ T9044] Call Trace: [ 686.445343][ T9044] [ 686.445351][ T9044] __dump_stack+0x1d/0x30 [ 686.445453][ T9044] dump_stack_lvl+0x95/0xd0 [ 686.445471][ T9044] dump_stack+0x15/0x1b [ 686.445487][ T9044] dump_header+0x81/0x240 [ 686.445509][ T9044] oom_kill_process+0x295/0x350 [ 686.445610][ T9044] out_of_memory+0x97b/0xb80 [ 686.445636][ T9044] try_charge_memcg+0x610/0xa10 [ 686.445725][ T9044] charge_memcg+0x51/0xc0 [ 686.445750][ T9044] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 686.445780][ T9044] __read_swap_cache_async+0x17b/0x2d0 [ 686.445848][ T9044] swap_cluster_readahead+0x362/0x3c0 [ 686.445880][ T9044] swapin_readahead+0xde/0x820 [ 686.445903][ T9044] ? mod_memcg_lruvec_state+0x1a1/0x280 [ 686.445923][ T9044] ? __rcu_read_unlock+0x34/0x70 [ 686.446003][ T9044] ? __rcu_read_unlock+0x4f/0x70 [ 686.446023][ T9044] ? swap_cache_get_folio+0x277/0x280 [ 686.446046][ T9044] do_swap_page+0x2b4/0x21e0 [ 686.446084][ T9044] ? __pfx_default_wake_function+0x10/0x10 [ 686.446236][ T9044] handle_mm_fault+0x9d8/0x2c60 [ 686.446276][ T9044] do_user_addr_fault+0x630/0x1080 [ 686.446380][ T9044] exc_page_fault+0x62/0xa0 [ 686.446421][ T9044] asm_exc_page_fault+0x26/0x30 [ 686.446440][ T9044] RIP: 0033:0x7facc2908b46 [ 686.446456][ T9044] Code: 00 00 00 0f 84 f3 00 00 00 4c 8b 7b 30 4d 85 ff 0f 84 e8 01 00 00 4d 39 f7 0f 83 dd 00 00 00 41 0f b7 c3 4c 8b 43 20 4d 89 fa <48> 89 44 24 18 41 8b 02 4c 89 c7 48 29 c7 49 89 c5 4c 01 ff 66 44 [ 686.446529][ T9044] RSP: 002b:00007ffc44aeca60 EFLAGS: 00010283 [ 686.446621][ T9044] RAX: 000000000000000c RBX: 00007facc37b5720 RCX: 0000000000010590 [ 686.446634][ T9044] RDX: 0000001b2fb13a7a RSI: 0000001b2f524238 RDI: 0000000000010584 [ 686.446647][ T9044] RBP: 0000001b2fb13a70 R08: 00000000005ffde8 R09: 000000000000ed58 [ 686.446660][ T9044] R10: 0000001b2f524218 R11: 000000000000000c R12: 0000000000010584 [ 686.446737][ T9044] R13: 0000000000010574 R14: 0000001b2f524220 R15: 0000001b2f524218 [ 686.446811][ T9044] [ 686.446818][ T9044] memory: usage 307200kB, limit 307200kB, failcnt 4427 [ 686.472840][ T9060] program syz.2.10791 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 686.473070][ T9044] memory+swap: usage 307404kB, limit 9007199254740988kB, failcnt 0 [ 686.679125][ T9044] kmem: usage 122732kB, limit 9007199254740988kB, failcnt 0 [ 686.686446][ T9044] Memory cgroup stats for /syz1: [ 686.717906][ T9066] hub 2-0:1.0: USB hub found [ 686.727714][ T9066] hub 2-0:1.0: 8 ports detected [ 686.733102][ T9044] cache 0 [ 686.736047][ T9044] rss 0 [ 686.738869][ T9044] shmem 0 [ 686.741836][ T9044] mapped_file 0 [ 686.745274][ T9044] dirty 0 [ 686.748265][ T9044] writeback 0 [ 686.751578][ T9044] workingset_refault_anon 593 [ 686.756238][ T9044] workingset_refault_file 0 [ 686.760746][ T9044] swap 208896 [ 686.764038][ T9044] swapcached 0 [ 686.767395][ T9044] pgpgin 660517 [ 686.770870][ T9044] pgpgout 660515 [ 686.774434][ T9044] pgfault 719731 [ 686.778011][ T9044] pgmajfault 261 [ 686.781601][ T9044] inactive_anon 0 [ 686.785220][ T9044] active_anon 0 [ 686.788670][ T9044] inactive_file 0 [ 686.792342][ T9044] active_file 8192 [ 686.796051][ T9044] unevictable 0 [ 686.799566][ T9044] hierarchical_memory_limit 314572800 [ 686.804924][ T9044] hierarchical_memsw_limit 9223372036854771712 [ 686.811172][ T9044] total_cache 0 [ 686.814642][ T9044] total_rss 0 [ 686.817909][ T9044] total_shmem 0 [ 686.821434][ T9044] total_mapped_file 0 [ 686.825407][ T9044] total_dirty 0 [ 686.828852][ T9044] total_writeback 0 [ 686.832736][ T9044] total_workingset_refault_anon 593 [ 686.838036][ T9044] total_workingset_refault_file 0 [ 686.843139][ T9044] total_swap 208896 [ 686.846978][ T9044] total_swapcached 0 [ 686.850958][ T9044] total_pgpgin 660517 [ 686.854971][ T9044] total_pgpgout 660515 [ 686.859046][ T9044] total_pgfault 719731 [ 686.863141][ T9044] total_pgmajfault 261 [ 686.867218][ T9044] total_inactive_anon 0 [ 686.871488][ T9044] total_active_anon 0 [ 686.875477][ T9044] total_inactive_file 0 [ 686.879657][ T9044] total_active_file 8192 [ 686.883899][ T9044] total_unevictable 0 [ 686.887879][ T9044] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.10786,pid=9044,uid=0 [ 686.902729][ T9044] Memory cgroup out of memory: Killed process 9044 (syz.1.10786) total-vm:96016kB, anon-rss:1136kB, file-rss:22444kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 687.001302][ T9075] loop9: detected capacity change from 0 to 1024 [ 687.016341][ T9075] EXT4-fs: inline encryption not supported [ 687.069285][ T9077] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 687.075829][ T9077] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 687.083381][ T9077] vhci_hcd vhci_hcd.0: Device attached [ 687.114504][ T9080] vhci_hcd: connection closed [ 687.114702][ T7485] vhci_hcd vhci_hcd.1: stop threads [ 687.124709][ T7485] vhci_hcd vhci_hcd.1: release socket [ 687.130179][ T7485] vhci_hcd vhci_hcd.1: disconnect device [ 687.205300][ T9085] EXT4-fs: inline encryption not supported [ 687.399350][ T9115] hub 2-0:1.0: USB hub found [ 687.407742][ T9115] hub 2-0:1.0: 8 ports detected [ 687.437612][ T9121] hub 2-0:1.0: USB hub found [ 687.442532][ T9121] hub 2-0:1.0: 8 ports detected [ 687.475806][ T9130] program syz.2.10807 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 687.509492][ T9134] EXT4-fs: Ignoring removed orlov option [ 687.520130][ T9134] ext4: Unknown parameter 'obj_user' [ 687.618698][ T9156] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 687.625270][ T9156] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 687.632935][ T9156] vhci_hcd vhci_hcd.0: Device attached [ 687.640968][ T9158] vhci_hcd: connection closed [ 687.641048][T21433] vhci_hcd vhci_hcd.2: stop threads [ 687.651069][T21433] vhci_hcd vhci_hcd.2: release socket [ 687.656455][T21433] vhci_hcd vhci_hcd.2: disconnect device [ 687.669402][ T9162] EXT4-fs: Ignoring removed orlov option [ 687.675472][ T9162] ext4: Unknown parameter 'obj_user' [ 687.733606][ T9173] EXT4-fs: inline encryption not supported [ 687.825442][ T9196] program syz.1.10814 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 687.911605][ T9214] program syz.1.10816 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 687.945518][ T9220] __nla_validate_parse: 6 callbacks suppressed [ 687.945531][ T9220] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10817'. [ 687.961118][ T9220] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10817'. [ 687.986916][ T9228] program syz.1.10818 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 688.066715][ T9245] EXT4-fs: Ignoring removed orlov option [ 688.072614][ T9245] ext4: Unknown parameter 'obj_user' [ 688.084599][ T9245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10820'. [ 688.217251][ T9271] EXT4-fs: Ignoring removed orlov option [ 688.223240][ T9271] ext4: Unknown parameter 'obj_user' [ 688.223587][ T9275] EXT4-fs: Ignoring removed orlov option [ 688.243047][ T9274] EXT4-fs: inline encryption not supported [ 688.250871][ T9275] ext4: Unknown parameter 'obj_user' [ 688.262707][ T9271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10822'. [ 688.266416][ T9275] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10823'. [ 688.307978][ T9286] program syz.0.10826 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 688.395601][ T9298] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10829'. [ 688.404919][ T9298] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10829'. [ 688.423545][ T9300] hub 2-0:1.0: USB hub found [ 688.428332][ T9300] hub 2-0:1.0: 8 ports detected [ 688.430791][ T9302] program syz.1.10832 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 688.446138][ T9304] hub 2-0:1.0: USB hub found [ 688.451063][ T9304] hub 2-0:1.0: 8 ports detected [ 688.493154][ T9295] netlink: 'syz.0.10830': attribute type 1 has an invalid length. [ 688.501099][ T9295] netlink: 224 bytes leftover after parsing attributes in process `syz.0.10830'. [ 688.550249][ T9308] EXT4-fs: inline encryption not supported [ 688.729132][ T9325] hub 2-0:1.0: USB hub found [ 688.734190][ T9325] hub 2-0:1.0: 8 ports detected [ 688.852252][ T9334] program syz.0.10841 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 688.914447][ T9337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10843'. [ 688.924502][ T9337] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10843'. [ 688.992008][ T9338] lo speed is unknown, defaulting to 1000 [ 689.042424][ T9338] chnl_net:caif_netlink_parms(): no params data found [ 689.080401][ T9355] EXT4-fs: Ignoring removed orlov option [ 689.086233][ T9355] ext4: Unknown parameter 'obj_user' [ 689.092079][ T9338] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.099257][ T9338] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.107803][ T9338] bridge_slave_0: entered allmulticast mode [ 689.114289][ T9338] bridge_slave_0: entered promiscuous mode [ 689.121070][ T9338] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.128118][ T9338] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.135379][ T9338] bridge_slave_1: entered allmulticast mode [ 689.142552][ T9338] bridge_slave_1: entered promiscuous mode [ 689.162489][ T9338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 689.175180][ T9338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 689.201643][ T9338] team0: Port device team_slave_0 added [ 689.211873][ T9338] team0: Port device team_slave_1 added [ 689.222478][ T9359] set_capacity_and_notify: 14 callbacks suppressed [ 689.222493][ T9359] loop1: detected capacity change from 0 to 1024 [ 689.236461][ T29] kauditd_printk_skb: 1448 callbacks suppressed [ 689.236474][ T29] audit: type=1326 audit(1766372930.915:66046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9358 comm="syz.1.10848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7facc2a2e3aa code=0x7ffc0000 [ 689.244634][ T9359] EXT4-fs: inline encryption not supported [ 689.267554][ T29] audit: type=1326 audit(1766372930.925:66047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9358 comm="syz.1.10848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7facc2a2e3aa code=0x7ffc0000 [ 689.295535][ T29] audit: type=1326 audit(1766372930.925:66048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9358 comm="syz.1.10848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7facc2a2de97 code=0x7ffc0000 [ 689.319133][ T29] audit: type=1326 audit(1766372930.925:66049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9358 comm="syz.1.10848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7facc2a30eea code=0x7ffc0000 [ 689.342773][ T29] audit: type=1400 audit(1766372930.925:66050): avc: denied { mounton } for pid=9358 comm="syz.1.10848" path="/245/file1" dev="tmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 689.369212][ T29] audit: type=1400 audit(1766372930.995:66051): avc: denied { prog_run } for pid=9362 comm="syz.2.10850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 689.389794][ T9338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 689.396833][ T9338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 689.423003][ T9338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 689.434243][ T29] audit: type=1400 audit(1766372931.115:66052): avc: denied { mount } for pid=9358 comm="syz.1.10848" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 689.456132][ T29] audit: type=1326 audit(1766372931.115:66053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9358 comm="syz.1.10848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7facc2a2df90 code=0x7ffc0000 [ 689.474004][ T9338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 689.479807][ T29] audit: type=1326 audit(1766372931.115:66054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9358 comm="syz.1.10848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7facc2a2e497 code=0x7ffc0000 [ 689.486710][ T9338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 689.510577][ T29] audit: type=1326 audit(1766372931.115:66055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9358 comm="syz.1.10848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7facc2a2df90 code=0x7ffc0000 [ 689.536461][ T9338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 689.613320][ T9372] loop2: detected capacity change from 0 to 1024 [ 689.622308][ T9372] EXT4-fs: inline encryption not supported [ 689.638466][ T9338] hsr_slave_0: entered promiscuous mode [ 689.653204][ T9338] hsr_slave_1: entered promiscuous mode [ 689.659660][ T9338] debugfs: 'hsr0' already exists in 'hsr' [ 689.665453][ T9338] Cannot create hsr debugfs directory [ 689.765005][ T9378] loop1: detected capacity change from 0 to 1024 [ 689.794243][ T9378] EXT4-fs: inline encryption not supported [ 689.812128][ T9338] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.861793][ T9388] program syz.5.10857 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 689.886963][ T9338] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.953380][ T9338] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.985758][ T9399] hub 2-0:1.0: USB hub found [ 689.990571][ T9399] hub 2-0:1.0: 8 ports detected [ 690.012919][ T9338] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.062842][ T9338] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 690.088750][ T9338] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 690.110244][ T9338] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 690.129806][ T9338] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 690.159017][ T9408] netlink: 'syz.1.10866': attribute type 1 has an invalid length. [ 690.177549][ T9425] program syz.2.10869 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 690.230164][ T9338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 690.261606][ T9338] 8021q: adding VLAN 0 to HW filter on device team0 [ 690.288075][ T1785] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.295220][ T1785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 690.329020][ T1785] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.336137][ T1785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 690.361739][ T9435] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 690.470034][ T9338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 690.563822][ T9338] veth0_vlan: entered promiscuous mode [ 690.577140][ T9338] veth1_vlan: entered promiscuous mode [ 690.598715][ T9338] veth0_macvtap: entered promiscuous mode [ 690.617893][ T9338] veth1_macvtap: entered promiscuous mode [ 690.637527][ T9338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 690.657337][ T9338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 690.672868][ T1785] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.672918][ T1785] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.672949][ T1785] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.673048][ T1785] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.773899][ T9468] program syz.5.10881 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 690.835948][ T9475] loop5: detected capacity change from 0 to 1024 [ 690.843171][ T9475] EXT4-fs: inline encryption not supported [ 690.968598][ T9464] netlink: 'syz.1.10880': attribute type 1 has an invalid length. [ 691.202205][ T9502] Cannot find add_set index 0 as target [ 691.246380][ T10] hid_parser_main: 33 callbacks suppressed [ 691.246459][ T10] hid-generic 0000:86010001:0006.0012: unknown main item tag 0x0 [ 691.282084][ T10] hid-generic 0000:86010001:0006.0012: hidraw0: HID v69662f.2e Device [syz1] on syz0 [ 691.372977][ T9517] hub 2-0:1.0: USB hub found [ 691.389314][ T9517] hub 2-0:1.0: 8 ports detected [ 691.576020][ T9544] program syz.9.10895 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 691.631069][ T9550] program syz.9.10896 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 691.840617][ T9560] netlink: 'syz.9.10898': attribute type 1 has an invalid length. [ 691.890021][ T9564] hub 6-0:1.0: USB hub found [ 691.898012][ T9564] hub 6-0:1.0: 8 ports detected [ 692.108590][ T9611] loop2: detected capacity change from 0 to 1024 [ 692.132976][ T9611] EXT4-fs: inline encryption not supported [ 692.398072][ T9649] loop5: detected capacity change from 0 to 128 [ 692.407016][ T9633] loop1: detected capacity change from 0 to 4096 [ 692.431809][ T9649] ext4 filesystem being mounted at /390/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 692.618424][ T9679] loop5: detected capacity change from 0 to 1024 [ 692.635784][ T9679] EXT4-fs: inline encryption not supported [ 692.711436][ T9691] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 692.773107][ T9696] loop1: detected capacity change from 0 to 1024 [ 692.871758][ T9696] EXT4-fs: inline encryption not supported [ 693.006776][ T9726] syz.9.10915 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 693.018012][ T9726] CPU: 1 UID: 0 PID: 9726 Comm: syz.9.10915 Not tainted syzkaller #0 PREEMPT(voluntary) [ 693.018111][ T9726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 693.018178][ T9726] Call Trace: [ 693.018191][ T9726] [ 693.018201][ T9726] __dump_stack+0x1d/0x30 [ 693.018227][ T9726] dump_stack_lvl+0x95/0xd0 [ 693.018250][ T9726] dump_stack+0x15/0x1b [ 693.018387][ T9726] dump_header+0x81/0x240 [ 693.018405][ T9726] oom_kill_process+0x295/0x350 [ 693.018475][ T9726] out_of_memory+0x97b/0xb80 [ 693.018501][ T9726] try_charge_memcg+0x610/0xa10 [ 693.018525][ T9726] charge_memcg+0x51/0xc0 [ 693.018632][ T9726] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 693.018687][ T9726] __read_swap_cache_async+0x17b/0x2d0 [ 693.018713][ T9726] swap_cluster_readahead+0x262/0x3c0 [ 693.018743][ T9726] swapin_readahead+0xde/0x820 [ 693.018769][ T9726] ? mempool_free_slab+0x1d/0x30 [ 693.018807][ T9726] ? kmem_cache_free+0x2a6/0x3a0 [ 693.018830][ T9726] ? __rcu_read_unlock+0x4f/0x70 [ 693.018925][ T9726] ? swap_cache_get_folio+0x277/0x280 [ 693.018986][ T9726] do_swap_page+0x2b4/0x21e0 [ 693.019010][ T9726] ? __rb_insert_augmented+0x76/0x2c0 [ 693.019072][ T9726] ? update_curr+0xb0/0x150 [ 693.019095][ T9726] ? enqueue_task_fair+0x35a/0x970 [ 693.019115][ T9726] ? css_rstat_updated+0xbb/0x280 [ 693.019196][ T9726] ? tracing_record_taskinfo_sched_switch+0x71/0x260 [ 693.019274][ T9726] ? __pfx_default_wake_function+0x10/0x10 [ 693.019302][ T9726] handle_mm_fault+0x9d8/0x2c60 [ 693.019380][ T9726] do_user_addr_fault+0x630/0x1080 [ 693.019405][ T9726] ? switch_fpu_return+0xe/0x20 [ 693.019449][ T9726] ? arch_exit_work+0x30/0x40 [ 693.019473][ T9726] exc_page_fault+0x62/0xa0 [ 693.019523][ T9726] asm_exc_page_fault+0x26/0x30 [ 693.019544][ T9726] RIP: 0033:0x7f4de1698389 [ 693.019611][ T9726] Code: 39 f0 73 46 49 89 34 24 48 89 ce 48 89 4f f8 49 8b 14 24 49 8b 4c 24 08 eb 85 0f 1f 80 00 00 00 00 48 89 fe 4c 89 ea 48 89 df f2 fe ff ff 48 89 d8 4c 29 e0 48 3d 80 00 00 00 7e 7f 4d 85 ed [ 693.019627][ T9726] RSP: 002b:00007ffc83f1f460 EFLAGS: 00010212 [ 693.019642][ T9726] RAX: 00007f4de0e3ba08 RBX: 00007f4de0e3ba10 RCX: ffffffff817e4e7d [ 693.019654][ T9726] RDX: 0000000000000010 RSI: 00007f4de0e3bf60 RDI: 00007f4de0e3ba10 [ 693.019665][ T9726] RBP: 00007f4de0e3b670 R08: 00007f4de0e3bae0 R09: 00007f4de1a02000 [ 693.019714][ T9726] R10: 00007f4de0e2d008 R11: 0000000000000002 R12: 00007f4de0e3b668 [ 693.019728][ T9726] R13: 0000000000000010 R14: 00007ffc83f1f5e8 R15: 00007f4de0e2d008 [ 693.019745][ T9726] ? shmem_mapping+0xd/0x30 [ 693.019770][ T9726] [ 693.266559][ T9726] memory: usage 277560kB, limit 307200kB, failcnt 1992 [ 693.273521][ T9726] memory+swap: usage 263448kB, limit 9007199254740988kB, failcnt 0 [ 693.281470][ T9726] kmem: usage 247036kB, limit 9007199254740988kB, failcnt 0 [ 693.288748][ T9726] Memory cgroup stats for /syz9: [ 693.347474][ T9726] cache 0 [ 693.355449][ T9726] rss 4096 [ 693.358484][ T9726] shmem 0 [ 693.361464][ T9726] mapped_file 0 [ 693.364923][ T9726] dirty 0 [ 693.367928][ T9726] writeback 4096 [ 693.371568][ T9726] workingset_refault_anon 454 [ 693.376302][ T9726] workingset_refault_file 2 [ 693.380822][ T9726] swap 172032 [ 693.384134][ T9726] swapcached 24576 [ 693.387851][ T9726] pgpgin 410156 [ 693.391435][ T9726] pgpgout 410149 [ 693.395068][ T9726] pgfault 462760 [ 693.398615][ T9726] pgmajfault 244 [ 693.402186][ T9726] inactive_anon 12288 [ 693.406165][ T9726] active_anon 12288 [ 693.410003][ T9726] inactive_file 4096 [ 693.413884][ T9726] active_file 0 [ 693.417321][ T9726] unevictable 0 [ 693.420848][ T9726] hierarchical_memory_limit 314572800 [ 693.426322][ T9726] hierarchical_memsw_limit 9223372036854771712 [ 693.432515][ T9726] total_cache 0 [ 693.435971][ T9726] total_rss 4096 [ 693.439537][ T9726] total_shmem 0 [ 693.443018][ T9726] total_mapped_file 0 [ 693.447124][ T9726] total_dirty 0 [ 693.450610][ T9726] total_writeback 4096 [ 693.454677][ T9726] total_workingset_refault_anon 454 [ 693.459961][ T9726] total_workingset_refault_file 2 [ 693.464981][ T9726] total_swap 172032 [ 693.468777][ T9726] total_swapcached 24576 [ 693.473147][ T9726] total_pgpgin 410156 [ 693.477239][ T9726] total_pgpgout 410149 [ 693.481323][ T9726] total_pgfault 462760 [ 693.485433][ T9726] total_pgmajfault 244 [ 693.489520][ T9726] total_inactive_anon 12288 [ 693.494014][ T9726] total_active_anon 12288 [ 693.498735][ T9726] total_inactive_file 4096 [ 693.503254][ T9726] total_active_file 0 [ 693.507232][ T9726] total_unevictable 0 [ 693.511235][ T9726] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.10915,pid=9726,uid=0 [ 693.525937][ T9726] Memory cgroup out of memory: Killed process 9726 (syz.9.10915) total-vm:96016kB, anon-rss:1260kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 693.602125][ T9757] loop2: detected capacity change from 0 to 1024 [ 693.618847][ T9757] EXT4-fs: inline encryption not supported [ 693.864550][ T9817] program syz.1.10927 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 693.890177][ T9816] __nla_validate_parse: 13 callbacks suppressed [ 693.890190][ T9816] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10926'. [ 693.936968][ T9823] FAULT_INJECTION: forcing a failure. [ 693.936968][ T9823] name failslab, interval 1, probability 0, space 0, times 0 [ 693.949881][ T9823] CPU: 0 UID: 0 PID: 9823 Comm: syz.0.10930 Not tainted syzkaller #0 PREEMPT(voluntary) [ 693.949941][ T9823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 693.949952][ T9823] Call Trace: [ 693.949958][ T9823] [ 693.949965][ T9823] __dump_stack+0x1d/0x30 [ 693.949991][ T9823] dump_stack_lvl+0x95/0xd0 [ 693.950084][ T9823] dump_stack+0x15/0x1b [ 693.950105][ T9823] should_fail_ex+0x265/0x280 [ 693.950189][ T9823] should_failslab+0x8c/0xb0 [ 693.950243][ T9823] __kmalloc_noprof+0xb9/0x5a0 [ 693.950263][ T9823] ? inotify_handle_inode_event+0x125/0x3d0 [ 693.950355][ T9823] ? refcount_dec_and_lock+0x111/0x170 [ 693.950385][ T9823] inotify_handle_inode_event+0x125/0x3d0 [ 693.950412][ T9823] ? __pfx_inotify_freeing_mark+0x10/0x10 [ 693.950441][ T9823] inotify_ignored_and_remove_idr+0x29/0x60 [ 693.950464][ T9823] inotify_freeing_mark+0x1d/0x30 [ 693.950502][ T9823] fsnotify_destroy_mark+0x129/0x150 [ 693.950560][ T9823] __se_sys_inotify_rm_watch+0xe8/0x170 [ 693.950629][ T9823] __x64_sys_inotify_rm_watch+0x31/0x40 [ 693.950653][ T9823] x64_sys_call+0x2a15/0x3000 [ 693.950677][ T9823] do_syscall_64+0xca/0x2b0 [ 693.950711][ T9823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.950762][ T9823] RIP: 0033:0x7f03ebb0f749 [ 693.950778][ T9823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 693.950793][ T9823] RSP: 002b:00007f03ea577038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ff [ 693.950815][ T9823] RAX: ffffffffffffffda RBX: 00007f03ebd65fa0 RCX: 00007f03ebb0f749 [ 693.950827][ T9823] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000006 [ 693.950839][ T9823] RBP: 00007f03ea577090 R08: 0000000000000000 R09: 0000000000000000 [ 693.950928][ T9823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 693.950945][ T9823] R13: 00007f03ebd66038 R14: 00007f03ebd65fa0 R15: 00007fff58572118 [ 693.950964][ T9823] [ 693.956282][ T9827] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10931'. [ 694.011359][ T9828] hub 2-0:1.0: USB hub found [ 694.017368][ T9831] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 694.038686][ T9828] hub 2-0:1.0: 8 ports detected [ 694.262689][ T29] kauditd_printk_skb: 718 callbacks suppressed [ 694.262705][ T29] audit: type=1400 audit(1766372935.945:66774): avc: denied { write } for pid=9843 comm="syz.1.10937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 694.302221][ T9845] hub 2-0:1.0: USB hub found [ 694.307275][ T9845] hub 2-0:1.0: 8 ports detected [ 694.461655][ T9853] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 694.489804][ T9855] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10941'. [ 694.492404][ T9856] hub 2-0:1.0: USB hub found [ 694.504602][ T9856] hub 2-0:1.0: 8 ports detected [ 694.532100][ T9858] set_capacity_and_notify: 1 callbacks suppressed [ 694.532114][ T9858] loop5: detected capacity change from 0 to 1024 [ 694.545441][ T9858] EXT4-fs: Ignoring removed orlov option [ 694.551384][ T9858] ext4: Unknown parameter 'obj_user' [ 694.562964][ T9858] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10951'. [ 694.572467][ T29] audit: type=1400 audit(1766372936.255:66775): avc: denied { firmware_load } for pid=9857 comm="syz.5.10951" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 694.788124][ T29] audit: type=1400 audit(1766372936.465:66776): avc: denied { create } for pid=9862 comm="syz.9.10942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 694.808559][ T29] audit: type=1400 audit(1766372936.465:66777): avc: denied { write } for pid=9862 comm="syz.9.10942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 694.828968][ T29] audit: type=1400 audit(1766372936.465:66778): avc: denied { nlmsg_write } for pid=9862 comm="syz.9.10942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 694.855473][ T29] audit: type=1400 audit(1766372936.525:66779): avc: denied { read } for pid=9869 comm="syz.5.10945" dev="nsfs" ino=4026532661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 694.877025][ T29] audit: type=1400 audit(1766372936.525:66780): avc: denied { open } for pid=9869 comm="syz.5.10945" path="net:[4026532661]" dev="nsfs" ino=4026532661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 694.959059][ T9870] netlink: 'syz.5.10945': attribute type 1 has an invalid length. [ 694.967080][ T9870] netlink: 224 bytes leftover after parsing attributes in process `syz.5.10945'. [ 695.011696][ T29] audit: type=1400 audit(1766372936.695:66781): avc: denied { read write } for pid=1815 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 695.036468][ T29] audit: type=1400 audit(1766372936.695:66782): avc: denied { open } for pid=1815 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 695.061321][ T29] audit: type=1400 audit(1766372936.695:66783): avc: denied { ioctl } for pid=1815 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 695.326349][ T9923] syz.0.10947 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 695.337504][ T9923] CPU: 1 UID: 0 PID: 9923 Comm: syz.0.10947 Not tainted syzkaller #0 PREEMPT(voluntary) [ 695.337533][ T9923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 695.337546][ T9923] Call Trace: [ 695.337553][ T9923] [ 695.337562][ T9923] __dump_stack+0x1d/0x30 [ 695.337587][ T9923] dump_stack_lvl+0x95/0xd0 [ 695.337622][ T9923] dump_stack+0x15/0x1b [ 695.337643][ T9923] dump_header+0x81/0x240 [ 695.337665][ T9923] oom_kill_process+0x295/0x350 [ 695.337690][ T9923] out_of_memory+0x97b/0xb80 [ 695.337727][ T9923] try_charge_memcg+0x610/0xa10 [ 695.337761][ T9923] charge_memcg+0x51/0xc0 [ 695.337848][ T9923] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 695.337875][ T9923] __read_swap_cache_async+0x17b/0x2d0 [ 695.337911][ T9923] swap_cluster_readahead+0x262/0x3c0 [ 695.337945][ T9923] swapin_readahead+0xde/0x820 [ 695.337974][ T9923] ? mod_memcg_lruvec_state+0x1a1/0x280 [ 695.338036][ T9923] ? lruvec_stat_mod_folio+0xd6/0x120 [ 695.338056][ T9923] ? __rcu_read_unlock+0x4f/0x70 [ 695.338114][ T9923] ? swap_cache_get_folio+0x277/0x280 [ 695.338144][ T9923] do_swap_page+0x2b4/0x21e0 [ 695.338323][ T9923] ? __pfx_default_wake_function+0x10/0x10 [ 695.338354][ T9923] handle_mm_fault+0x9d8/0x2c60 [ 695.338386][ T9923] do_user_addr_fault+0x630/0x1080 [ 695.338464][ T9923] exc_page_fault+0x62/0xa0 [ 695.338491][ T9923] asm_exc_page_fault+0x26/0x30 [ 695.338512][ T9923] RIP: 0033:0x7f03eb9e59ec [ 695.338530][ T9923] Code: 66 0f 1f 44 00 00 69 3d c6 fc ea 00 e8 03 00 00 48 8d 1d c7 05 38 00 e8 c2 9c 12 00 eb 0c 48 81 c3 f0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 695.338545][ T9923] RSP: 002b:00007fff58572280 EFLAGS: 00010206 [ 695.338619][ T9923] RAX: 0000000000000000 RBX: 00007f03ebd65fa0 RCX: 0000000000000000 [ 695.338630][ T9923] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00005555687d2808 [ 695.338644][ T9923] RBP: 00007f03ebd67da0 R08: 0000000000000000 R09: 7fffffffffffffff [ 695.338665][ T9923] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000a9ea3 [ 695.338678][ T9923] R13: 00007f03ebd66090 R14: ffffffffffffffff R15: 00007fff58572390 [ 695.338699][ T9923] [ 695.338706][ T9923] memory: usage 307200kB, limit 307200kB, failcnt 39409 [ 695.554400][ T9923] memory+swap: usage 31540kB, limit 9007199254740988kB, failcnt 0 [ 695.562302][ T9923] kmem: usage 22920kB, limit 9007199254740988kB, failcnt 0 [ 695.569514][ T9923] Memory cgroup stats for /syz0: [ 695.574474][ T9923] cache 0 [ 695.582516][ T9923] rss 0 [ 695.585283][ T9923] shmem 0 [ 695.588290][ T9923] mapped_file 0 [ 695.591853][ T9923] dirty 0 [ 695.594794][ T9923] writeback 0 [ 695.598072][ T9923] workingset_refault_anon 698 [ 695.602872][ T9923] workingset_refault_file 6414 [ 695.607631][ T9923] swap 196608 [ 695.610992][ T9923] swapcached 16384 [ 695.615565][ T9923] pgpgin 1515904 [ 695.619116][ T9923] pgpgout 1515900 [ 695.623072][ T9923] pgfault 1399109 [ 695.626774][ T9923] pgmajfault 372 [ 695.630560][ T9923] inactive_anon 0 [ 695.634200][ T9923] active_anon 16384 [ 695.638006][ T9923] inactive_file 0 [ 695.641698][ T9923] active_file 0 [ 695.645247][ T9923] unevictable 0 [ 695.648703][ T9923] hierarchical_memory_limit 314572800 [ 695.654191][ T9923] hierarchical_memsw_limit 9223372036854771712 [ 695.660381][ T9923] total_cache 0 [ 695.663948][ T9923] total_rss 0 [ 695.667235][ T9923] total_shmem 0 [ 695.670893][ T9923] total_mapped_file 0 [ 695.674874][ T9923] total_dirty 0 [ 695.678339][ T9923] total_writeback 0 [ 695.682183][ T9923] total_workingset_refault_anon 698 [ 695.687407][ T9923] total_workingset_refault_file 6414 [ 695.692797][ T9923] total_swap 196608 [ 695.696602][ T9923] total_swapcached 16384 [ 695.700987][ T9923] total_pgpgin 1515904 [ 695.705060][ T9923] total_pgpgout 1515900 [ 695.709463][ T9923] total_pgfault 1399109 [ 695.713625][ T9923] total_pgmajfault 372 [ 695.717704][ T9923] total_inactive_anon 0 [ 695.721882][ T9923] total_active_anon 16384 [ 695.726225][ T9923] total_inactive_file 0 [ 695.730402][ T9923] total_active_file 0 [ 695.734384][ T9923] total_unevictable 0 [ 695.738361][ T9923] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.10947,pid=9923,uid=0 [ 695.753102][ T9923] Memory cgroup out of memory: Killed process 9923 (syz.0.10947) total-vm:96016kB, anon-rss:1136kB, file-rss:22572kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 695.834362][ T9986] netlink: 'syz.5.10955': attribute type 13 has an invalid length. [ 695.834861][ T9980] loop9: detected capacity change from 0 to 4096 [ 695.861363][ T9988] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 695.891341][ T9986] bridge0: port 2(bridge_slave_1) entered disabled state [ 695.891475][ T9986] bridge0: port 1(bridge_slave_0) entered disabled state [ 695.908361][ T9982] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10952'. [ 695.920925][ T9989] hub 2-0:1.0: USB hub found [ 695.925587][ T9989] hub 2-0:1.0: 8 ports detected [ 696.038386][ T9986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 696.054103][ T9986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 696.123188][T31989] lo speed is unknown, defaulting to 1000 [ 696.128993][T31989] syz2: Port: 1 Link DOWN [ 696.135674][ T1601] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.144815][ T1601] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.154123][ T1601] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.163246][ T1601] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.188240][T10005] program syz.5.10960 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 696.222797][T10007] loop5: detected capacity change from 0 to 1024 [ 696.230152][T10007] EXT4-fs: Ignoring removed orlov option [ 696.235922][T10007] ext4: Unknown parameter 'obj_user' [ 696.254251][T10007] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10961'. [ 696.323468][T10009] loop5: detected capacity change from 0 to 1024 [ 696.330588][T10009] EXT4-fs: inline encryption not supported [ 696.707104][T10020] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10966'. [ 696.718194][T10020] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10966'. [ 696.989778][T10036] program syz.9.10972 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 697.009056][T10035] loop1: detected capacity change from 0 to 1024 [ 697.029626][T10035] EXT4-fs: Ignoring removed orlov option [ 697.042862][T10035] ext4: Unknown parameter 'obj_user' [ 697.067653][T10040] loop9: detected capacity change from 0 to 1024 [ 697.071945][T10035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10973'. [ 697.089965][T10040] EXT4-fs: Ignoring removed orlov option [ 697.095936][T10040] ext4: Unknown parameter 'obj_user' [ 697.199528][T10050] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 697.227559][T10054] loop1: detected capacity change from 0 to 1024 [ 697.234895][T10054] EXT4-fs: inline encryption not supported [ 697.346400][T10067] loop9: detected capacity change from 0 to 1024 [ 697.353602][T10067] EXT4-fs: Ignoring removed orlov option [ 697.359494][T10067] ext4: Unknown parameter 'obj_user' [ 697.426754][T10076] loop9: detected capacity change from 0 to 1024 [ 697.433709][T10076] EXT4-fs: inline encryption not supported [ 697.491963][T10080] hub 2-0:1.0: USB hub found [ 697.497103][T10080] hub 2-0:1.0: 8 ports detected [ 697.589716][T10089] Cannot find add_set index 0 as target [ 697.598952][T32625] hid-generic 0000:86010001:0006.0013: unknown main item tag 0x0 [ 697.621144][T32625] hid-generic 0000:86010001:0006.0013: hidraw0: HID v69662f.2e Device [syz1] on syz0 [ 697.987479][T10100] loop9: detected capacity change from 0 to 1024 [ 697.998081][T10100] EXT4-fs: inline encryption not supported [ 698.015544][T10102] EXT4-fs: Ignoring removed orlov option [ 698.021831][T10102] ext4: Unknown parameter 'obj_user' [ 698.254418][T10118] hub 6-0:1.0: USB hub found [ 698.259112][T10118] hub 6-0:1.0: 8 ports detected [ 698.271537][T10120] EXT4-fs: inline encryption not supported [ 698.328103][T10121] hub 2-0:1.0: USB hub found [ 698.332940][T10121] hub 2-0:1.0: 8 ports detected [ 698.341895][T10127] program syz.5.11007 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 698.385405][T10129] EXT4-fs: Ignoring removed orlov option [ 698.409239][T10129] ext4: Unknown parameter 'obj_user' [ 698.432766][T10134] ext4 filesystem being mounted at /176/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 698.480531][T10136] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 698.503717][T10138] ext4 filesystem being mounted at /280/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 698.534884][T10141] EXT4-fs: inline encryption not supported [ 698.755987][T10160] hub 6-0:1.0: USB hub found [ 698.762534][T10160] hub 6-0:1.0: 8 ports detected [ 698.779443][T10162] program syz.9.11020 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 698.826665][T10166] EXT4-fs: Ignoring removed orlov option [ 698.837572][T10166] ext4: Unknown parameter 'obj_user' [ 698.850974][T10168] EXT4-fs: inline encryption not supported [ 698.910707][T10174] __nla_validate_parse: 8 callbacks suppressed [ 698.910725][T10174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11021'. [ 699.030932][T10182] program syz.1.11028 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 699.095024][T10187] EXT4-fs: inline encryption not supported [ 699.162279][T10194] EXT4-fs: inline encryption not supported [ 699.202650][T10198] EXT4-fs: Ignoring removed orlov option [ 699.208433][T10198] ext4: Unknown parameter 'obj_user' [ 699.219445][T10198] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11034'. [ 699.269493][ T29] kauditd_printk_skb: 1693 callbacks suppressed [ 699.269507][ T29] audit: type=1400 audit(1766372940.955:68477): avc: denied { read write } for pid=10199 comm="syz.1.11033" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 699.300282][ T29] audit: type=1400 audit(1766372940.955:68478): avc: denied { open } for pid=10199 comm="syz.1.11033" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 699.324597][ T29] audit: type=1400 audit(1766372940.955:68479): avc: denied { create } for pid=10199 comm="syz.1.11033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 699.344411][ T29] audit: type=1400 audit(1766372940.955:68480): avc: denied { getopt } for pid=10199 comm="syz.1.11033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 699.372693][ T29] audit: type=1326 audit(1766372941.055:68481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10201 comm="syz.5.11036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e31c4f749 code=0x7ffc0000 [ 699.408015][T10206] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11035'. [ 699.423444][T10202] EXT4-fs: inline encryption not supported [ 699.430669][ T29] audit: type=1400 audit(1766372941.085:68482): avc: denied { create } for pid=10204 comm="syz.2.11035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 699.451573][ T29] audit: type=1400 audit(1766372941.085:68483): avc: denied { write } for pid=10204 comm="syz.2.11035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 699.472451][ T29] audit: type=1326 audit(1766372941.095:68484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10201 comm="syz.5.11036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e31c4f749 code=0x7ffc0000 [ 699.496119][ T29] audit: type=1326 audit(1766372941.095:68485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10201 comm="syz.5.11036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f0e31c4f749 code=0x7ffc0000 [ 699.519901][ T29] audit: type=1326 audit(1766372941.095:68486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10201 comm="syz.5.11036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e31c4f749 code=0x7ffc0000 [ 699.651193][T10216] program syz.5.11042 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 699.679136][T10218] set_capacity_and_notify: 12 callbacks suppressed [ 699.679150][T10218] loop1: detected capacity change from 0 to 4096 [ 699.888840][T10230] loop2: detected capacity change from 0 to 1024 [ 699.893480][T10231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11044'. [ 699.895839][T10230] EXT4-fs: inline encryption not supported [ 700.232102][T10253] loop9: detected capacity change from 0 to 1024 [ 700.239224][T10253] EXT4-fs: Ignoring removed orlov option [ 700.245132][T10253] ext4: Unknown parameter 'obj_user' [ 700.262583][T10254] hub 2-0:1.0: USB hub found [ 700.270703][T10254] hub 2-0:1.0: 8 ports detected [ 700.283083][T10253] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11054'. [ 700.587829][ T5475] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 700.595479][T10270] netlink: 'syz.1.11060': attribute type 1 has an invalid length. [ 700.598751][ T5475] CPU: 1 UID: 0 PID: 5475 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 700.598775][ T5475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 700.598788][ T5475] Call Trace: [ 700.598796][ T5475] [ 700.598805][ T5475] __dump_stack+0x1d/0x30 [ 700.598849][ T5475] dump_stack_lvl+0x95/0xd0 [ 700.598911][ T5475] dump_stack+0x15/0x1b [ 700.598931][ T5475] dump_header+0x81/0x240 [ 700.599037][ T5475] oom_kill_process+0x295/0x350 [ 700.599060][ T5475] out_of_memory+0x97b/0xb80 [ 700.599096][ T5475] try_charge_memcg+0x610/0xa10 [ 700.599123][ T5475] charge_memcg+0x51/0xc0 [ 700.599152][ T5475] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 700.599188][ T5475] __read_swap_cache_async+0x17b/0x2d0 [ 700.599283][ T5475] swap_cluster_readahead+0x262/0x3c0 [ 700.599316][ T5475] swapin_readahead+0xde/0x820 [ 700.599342][ T5475] ? perf_iterate_sb+0x62a/0x650 [ 700.599366][ T5475] ? __pfx_perf_event_switch_output+0x10/0x10 [ 700.599431][ T5475] ? __perf_event_task_sched_in+0xa5b/0xac0 [ 700.599480][ T5475] ? __rcu_read_unlock+0x4f/0x70 [ 700.599499][ T5475] ? __rcu_read_unlock+0x4f/0x70 [ 700.599517][ T5475] ? __rcu_read_unlock+0x4f/0x70 [ 700.599602][ T5475] ? swap_cache_get_folio+0x277/0x280 [ 700.599636][ T5475] do_swap_page+0x2b4/0x21e0 [ 700.599663][ T5475] ? _raw_spin_unlock+0x26/0x50 [ 700.599727][ T5475] ? __schedule+0x85f/0xcd0 [ 700.599811][ T5475] ? __pfx_default_wake_function+0x10/0x10 [ 700.599880][ T5475] handle_mm_fault+0x9d8/0x2c60 [ 700.599918][ T5475] do_user_addr_fault+0x630/0x1080 [ 700.599957][ T5475] exc_page_fault+0x62/0xa0 [ 700.599984][ T5475] asm_exc_page_fault+0x26/0x30 [ 700.600003][ T5475] RIP: 0033:0x7ff472f91fc5 [ 700.600067][ T5475] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 9e 95 1f 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 700.600085][ T5475] RSP: 002b:00007ffc89cf4da8 EFLAGS: 00010246 [ 700.600101][ T5475] RAX: 0000000000000000 RBX: 0000000000000289 RCX: 00007ff472f91fc3 [ 700.600135][ T5475] RDX: 00007ffc89cf4dc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 700.600148][ T5475] RBP: 00007ffc89cf4e2c R08: 000000001fdac478 R09: 0000000000000000 [ 700.600236][ T5475] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 700.600249][ T5475] R13: 00000000000927c0 R14: 00000000000ab06a R15: 00007ffc89cf4e80 [ 700.600333][ T5475] [ 700.600367][ T5475] memory: usage 307200kB, limit 307200kB, failcnt 44246 [ 700.607107][T10270] netlink: 224 bytes leftover after parsing attributes in process `syz.1.11060'. [ 700.617079][ T5475] memory+swap: usage 307360kB, limit 9007199254740988kB, failcnt 0 [ 700.617096][ T5475] kmem: usage 307096kB, limit 9007199254740988kB, failcnt 0 [ 700.872389][ T5475] Memory cgroup stats for /syz2: [ 700.902426][ T5475] cache 0 [ 700.910434][ T5475] rss 28672 [ 700.913547][ T5475] shmem 0 [ 700.916542][ T5475] mapped_file 0 [ 700.920129][ T5475] dirty 0 [ 700.923064][ T5475] writeback 20480 [ 700.926689][ T5475] workingset_refault_anon 938 [ 700.931420][ T5475] workingset_refault_file 7871 [ 700.936175][ T5475] swap 163840 [ 700.939518][ T5475] swapcached 28672 [ 700.943368][ T5475] pgpgin 1296541 [ 700.946952][ T5475] pgpgout 1296519 [ 700.950691][ T5475] pgfault 1251226 [ 700.954399][ T5475] pgmajfault 408 [ 700.957952][ T5475] inactive_anon 28672 [ 700.961984][ T5475] active_anon 20480 [ 700.965914][ T5475] inactive_file 40960 [ 700.969945][ T5475] active_file 0 [ 700.973410][ T5475] unevictable 0 [ 700.976856][ T5475] hierarchical_memory_limit 314572800 [ 700.982330][ T5475] hierarchical_memsw_limit 9223372036854771712 [ 700.988588][ T5475] total_cache 0 [ 700.992081][ T5475] total_rss 28672 [ 700.995708][ T5475] total_shmem 0 [ 700.999159][ T5475] total_mapped_file 0 [ 701.003202][ T5475] total_dirty 0 [ 701.006668][ T5475] total_writeback 20480 [ 701.010883][ T5475] total_workingset_refault_anon 938 [ 701.016134][ T5475] total_workingset_refault_file 7871 [ 701.021466][ T5475] total_swap 163840 [ 701.025311][ T5475] total_swapcached 28672 [ 701.029652][ T5475] total_pgpgin 1296541 [ 701.033695][ T5475] total_pgpgout 1296519 [ 701.037822][ T5475] total_pgfault 1251226 [ 701.042026][ T5475] total_pgmajfault 408 [ 701.046209][ T5475] total_inactive_anon 28672 [ 701.050723][ T5475] total_active_anon 20480 [ 701.055043][ T5475] total_inactive_file 40960 [ 701.059696][ T5475] total_active_file 0 [ 701.063671][ T5475] total_unevictable 0 [ 701.067640][ T5475] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.11061,pid=10269,uid=0 [ 701.082487][ T5475] Memory cgroup out of memory: Killed process 10269 (syz.2.11061) total-vm:93968kB, anon-rss:1264kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 701.134159][T10285] loop1: detected capacity change from 0 to 128 [ 701.142622][T10287] loop2: detected capacity change from 0 to 1024 [ 701.155942][T10287] EXT4-fs: inline encryption not supported [ 701.195723][T10287] EXT4-fs mount: 130 callbacks suppressed [ 701.195803][T10287] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 701.227446][T10298] program syz.9.11072 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 701.358361][T10307] loop9: detected capacity change from 0 to 4096 [ 701.380463][ T5475] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 701.394583][T10307] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 701.410493][T10318] bridge0: entered promiscuous mode [ 701.415810][T10318] macsec1: entered promiscuous mode [ 701.422369][T10318] bridge0: port 3(macsec1) entered blocking state [ 701.428820][T10318] bridge0: port 3(macsec1) entered disabled state [ 701.435812][T10318] macsec1: entered allmulticast mode [ 701.441180][T10318] bridge0: entered allmulticast mode [ 701.447090][T10318] macsec1: left allmulticast mode [ 701.452212][T10318] bridge0: left allmulticast mode [ 701.457837][T10318] bridge0: left promiscuous mode [ 701.532705][T10324] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11082'. [ 701.537209][T10308] syz.5.11076 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 701.553001][T10308] CPU: 1 UID: 0 PID: 10308 Comm: syz.5.11076 Not tainted syzkaller #0 PREEMPT(voluntary) [ 701.553127][T10308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 701.553139][T10308] Call Trace: [ 701.553146][T10308] [ 701.553152][T10308] __dump_stack+0x1d/0x30 [ 701.553182][T10308] dump_stack_lvl+0x95/0xd0 [ 701.553239][T10308] dump_stack+0x15/0x1b [ 701.553259][T10308] dump_header+0x81/0x240 [ 701.553289][T10308] oom_kill_process+0x295/0x350 [ 701.553314][T10308] out_of_memory+0x97b/0xb80 [ 701.553411][T10308] try_charge_memcg+0x610/0xa10 [ 701.553438][T10308] charge_memcg+0x51/0xc0 [ 701.553530][T10308] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 701.553564][T10308] __read_swap_cache_async+0x17b/0x2d0 [ 701.553661][T10308] swap_cluster_readahead+0x262/0x3c0 [ 701.553703][T10308] swapin_readahead+0xde/0x820 [ 701.553800][T10308] ? mod_memcg_lruvec_state+0x1a1/0x280 [ 701.553825][T10308] ? __rcu_read_unlock+0x34/0x70 [ 701.553846][T10308] ? __rcu_read_unlock+0x4f/0x70 [ 701.553870][T10308] ? swap_cache_get_folio+0x277/0x280 [ 701.553975][T10308] do_swap_page+0x2b4/0x21e0 [ 701.554009][T10308] ? __pfx_default_wake_function+0x10/0x10 [ 701.554045][T10308] handle_mm_fault+0x9d8/0x2c60 [ 701.554084][T10308] do_user_addr_fault+0x630/0x1080 [ 701.554113][T10308] exc_page_fault+0x62/0xa0 [ 701.554148][T10308] asm_exc_page_fault+0x26/0x30 [ 701.554247][T10308] RIP: 0033:0x7f0e31b2ef94 [ 701.554264][T10308] Code: 82 b5 03 00 00 c6 44 24 1e 01 45 31 ff 45 31 f6 44 0f b6 e6 85 c0 0f 84 9e 00 00 00 44 89 f9 49 8b 50 40 4c 89 f0 49 03 14 ca <80> 3d 0d 8e 37 00 00 49 89 d6 48 89 d5 74 28 25 ff 0f 00 00 83 f0 [ 701.554288][T10308] RSP: 002b:00007ffd23f35b10 EFLAGS: 00010286 [ 701.554305][T10308] RAX: ffffffff818bcaa4 RBX: 00007f0e329d5720 RCX: 0000000000000041 [ 701.554317][T10308] RDX: ffffffff818bcb2e RSI: 0000000000002f3c RDI: 0000000000000020 [ 701.554330][T10308] RBP: ffffffff818bcf2a R08: 00007f0e31ea6128 R09: 00007f0e31e92000 [ 701.554389][T10308] R10: 00007f0e312bd008 R11: 0000000000000001 R12: 0000000000000001 [ 701.554481][T10308] R13: 0000000000000000 R14: ffffffff818bcaa4 R15: 0000000000000041 [ 701.554495][T10308] ? get_swap_device+0x14/0x1f0 [ 701.554607][T10308] ? _swap_info_get+0x11a/0x170 [ 701.554636][T10308] ? get_swap_device+0x14/0x1f0 [ 701.554664][T10308] ? get_swap_device+0x9e/0x1f0 [ 701.554743][T10308] [ 701.554751][T10308] memory: usage 307200kB, limit 307200kB, failcnt 1238 [ 701.788852][T10308] memory+swap: usage 75992kB, limit 9007199254740988kB, failcnt 0 [ 701.796677][T10308] kmem: usage 66272kB, limit 9007199254740988kB, failcnt 0 [ 701.804022][T10308] Memory cgroup stats for /syz5: [ 701.807360][T10308] cache 0 [ 701.815264][T10308] rss 0 [ 701.818019][T10308] shmem 0 [ 701.821003][T10308] mapped_file 0 [ 701.824474][T10308] dirty 0 [ 701.827420][T10308] writeback 0 [ 701.830739][T10308] workingset_refault_anon 1592 [ 701.835498][T10308] workingset_refault_file 182 [ 701.840191][T10308] swap 196608 [ 701.843467][T10308] swapcached 4096 [ 701.847090][T10308] pgpgin 161679 [ 701.850638][T10308] pgpgout 161678 [ 701.854176][T10308] pgfault 194826 [ 701.857724][T10308] pgmajfault 325 [ 701.861296][T10308] inactive_anon 0 [ 701.864940][T10308] active_anon 4096 [ 701.868738][T10308] inactive_file 0 [ 701.872422][T10308] active_file 0 [ 701.875870][T10308] unevictable 0 [ 701.879333][T10308] hierarchical_memory_limit 314572800 [ 701.884701][T10308] hierarchical_memsw_limit 9223372036854771712 [ 701.890970][T10308] total_cache 0 [ 701.894416][T10308] total_rss 0 [ 701.897794][T10308] total_shmem 0 [ 701.901267][T10308] total_mapped_file 0 [ 701.905257][T10308] total_dirty 0 [ 701.908705][T10308] total_writeback 0 [ 701.912552][T10308] total_workingset_refault_anon 1592 [ 701.917865][T10308] total_workingset_refault_file 182 [ 701.923085][T10308] total_swap 196608 [ 701.926932][T10308] total_swapcached 4096 [ 701.931092][T10308] total_pgpgin 161679 [ 701.935055][T10308] total_pgpgout 161678 [ 701.939110][T10308] total_pgfault 194826 [ 701.943308][T10308] total_pgmajfault 325 [ 701.947375][T10308] total_inactive_anon 0 [ 701.951545][T10308] total_active_anon 4096 [ 701.955771][T10308] total_inactive_file 0 [ 701.959940][T10308] total_active_file 0 [ 701.964004][T10308] total_unevictable 0 [ 701.968054][T10308] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.11076,pid=10308,uid=0 [ 701.982985][T10308] Memory cgroup out of memory: Killed process 10308 (syz.5.11076) total-vm:93968kB, anon-rss:1132kB, file-rss:22052kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 702.007917][T10322] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.023483][ T6660] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 702.024946][T10329] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 702.039927][T10329] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 702.048386][T10329] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 702.055864][T10329] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 702.086494][T10322] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.138170][T10322] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.196419][T10348] loop9: detected capacity change from 0 to 1024 [ 702.203632][T10348] EXT4-fs: inline encryption not supported [ 702.223125][T10348] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 702.237492][T10322] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.286072][ T7500] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.297423][ T7500] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.309601][ T7500] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.320413][ T6660] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 702.329477][ T7500] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.352507][T10354] netlink: 68 bytes leftover after parsing attributes in process `syz.0.11093'. [ 702.563247][T10390] loop9: detected capacity change from 0 to 1024 [ 702.570027][T10390] EXT4-fs: Ignoring removed orlov option [ 702.575837][T10390] ext4: Unknown parameter 'obj_user' [ 702.586375][T10390] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11095'. [ 702.658431][T10403] loop9: detected capacity change from 0 to 4096 [ 702.674854][T10403] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 703.008753][T10450] loop5: detected capacity change from 0 to 1024 [ 703.016228][T10450] EXT4-fs: Ignoring removed orlov option [ 703.016261][ T6660] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 703.021997][T10450] ext4: Unknown parameter 'obj_user' [ 703.046748][T10450] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11101'. [ 703.125948][T10456] lo speed is unknown, defaulting to 1000 [ 703.539143][T10477] EXT4-fs: inline encryption not supported [ 703.550812][T10477] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 703.679216][ T6660] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 703.804841][T10497] EXT4-fs: Ignoring removed orlov option [ 703.810645][T10497] ext4: Unknown parameter 'obj_user' [ 703.864312][T10496] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 703.929661][T10502] netlink: 'syz.2.11113': attribute type 1 has an invalid length. [ 703.937623][T10502] __nla_validate_parse: 1 callbacks suppressed [ 703.937638][T10502] netlink: 224 bytes leftover after parsing attributes in process `syz.2.11113'. [ 703.957615][T10512] hub 6-0:1.0: USB hub found [ 704.016539][T10512] hub 6-0:1.0: 8 ports detected [ 704.030846][T10515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11114'. [ 704.146052][T10526] EXT4-fs: inline encryption not supported [ 704.174641][T10526] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 704.279481][ T29] kauditd_printk_skb: 1631 callbacks suppressed [ 704.279495][ T29] audit: type=1326 audit(1766372945.965:70118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10523 comm="syz.5.11121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7f0e31c4f749 code=0x7ffc0000 [ 704.320284][ T5821] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 704.345656][ T29] audit: type=1400 audit(1766372945.965:70119): avc: denied { unmount } for pid=5821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 704.365557][ T29] audit: type=1326 audit(1766372945.965:70120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10523 comm="syz.5.11121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e31c4f749 code=0x7ffc0000 [ 704.389749][ T29] audit: type=1326 audit(1766372945.965:70121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10523 comm="syz.5.11121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e31c4f749 code=0x7ffc0000 [ 704.413465][ T29] audit: type=1326 audit(1766372945.995:70122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10523 comm="syz.5.11121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0e31c4f749 code=0x7ffc0000 [ 704.437114][ T29] audit: type=1400 audit(1766372945.995:70123): avc: denied { ioctl } for pid=10523 comm="syz.5.11121" path="/427/file1/file1" dev="loop5" ino=15 ioctlcmd=0x662a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 704.462130][ T29] audit: type=1326 audit(1766372945.995:70124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10523 comm="syz.5.11121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e31c4f749 code=0x7ffc0000 [ 704.486116][ T29] audit: type=1326 audit(1766372945.995:70125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10523 comm="syz.5.11121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e31c4f749 code=0x7ffc0000 [ 704.509817][ T29] audit: type=1326 audit(1766372945.995:70126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10523 comm="syz.5.11121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0e31c4df90 code=0x7ffc0000 [ 704.533965][ T29] audit: type=1400 audit(1766372945.995:70127): avc: denied { write } for pid=10523 comm="syz.5.11121" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 704.562927][T10535] EXT4-fs: Ignoring removed orlov option [ 704.568699][T10535] ext4: Unknown parameter 'obj_user' [ 704.590463][T10535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11127'. [ 704.610245][T10537] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 704.659430][ T1815] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 704.676400][T10537] ext4 filesystem being mounted at /314/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 704.811077][ T5821] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 704.839513][T10542] netlink: 'syz.2.11130': attribute type 1 has an invalid length. [ 704.847354][T10542] netlink: 224 bytes leftover after parsing attributes in process `syz.2.11130'. [ 704.877235][T10557] program syz.5.11136 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 704.924919][T10565] set_capacity_and_notify: 6 callbacks suppressed [ 704.924984][T10565] loop9: detected capacity change from 0 to 1024 [ 704.947051][T10565] EXT4-fs: inline encryption not supported [ 704.962994][T10565] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 704.968273][T10566] hub 2-0:1.0: USB hub found [ 704.983107][T10570] loop5: detected capacity change from 0 to 1024 [ 704.990174][T10570] EXT4-fs: Ignoring removed orlov option [ 704.995835][T10570] ext4: Unknown parameter 'obj_user' [ 705.001277][T10566] hub 2-0:1.0: 8 ports detected [ 705.032582][T10575] loop1: detected capacity change from 0 to 1024 [ 705.033383][T10570] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11141'. [ 705.043669][T10575] EXT4-fs: inline encryption not supported [ 705.055329][T10578] netlink: 68 bytes leftover after parsing attributes in process `syz.0.11144'. [ 705.095480][T10575] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 705.118981][ T6660] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 705.189970][ T5821] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 705.270630][T10592] netlink: 'syz.5.11146': attribute type 1 has an invalid length. [ 705.278489][T10592] netlink: 224 bytes leftover after parsing attributes in process `syz.5.11146'. [ 705.302392][T10616] program syz.1.11149 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 705.331470][T10618] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11150'. [ 705.356735][T10625] loop1: detected capacity change from 0 to 764 [ 705.364525][T10618] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11150'. [ 705.378249][T10625] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 705.489961][T10645] loop9: detected capacity change from 0 to 1024 [ 705.497921][T10645] EXT4-fs: inline encryption not supported [ 705.503205][T10650] loop1: detected capacity change from 0 to 1024 [ 705.514082][T10650] EXT4-fs: inline encryption not supported [ 705.531474][T10650] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 705.546498][T10645] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 705.610377][ T5821] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 705.628675][ T6660] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 705.711011][T10691] loop5: detected capacity change from 0 to 512 [ 705.739764][T10691] macsec0: entered promiscuous mode [ 705.745170][T10691] macsec0: entered allmulticast mode [ 705.751965][T10691] veth1_macvtap: entered allmulticast mode [ 705.777974][T10676] netlink: 'syz.1.11160': attribute type 1 has an invalid length. [ 705.785917][T10676] netlink: 224 bytes leftover after parsing attributes in process `syz.1.11160'. [ 705.878308][T10721] loop2: detected capacity change from 0 to 1024 [ 705.888151][T10725] loop1: detected capacity change from 0 to 128 [ 705.953064][T10725] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 705.956525][T10721] EXT4-fs: Ignoring removed orlov option [ 705.971537][T10725] ext4 filesystem being mounted at /326/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 706.004715][T10721] ext4: Unknown parameter 'obj_user' [ 706.076678][ T5821] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 706.312976][T10777] loop2: detected capacity change from 0 to 764 [ 706.330584][T10777] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 706.462248][T10794] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 706.525460][T10794] ext4 filesystem being mounted at /295/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 706.565283][T10804] program syz.9.11185 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 706.687739][ T5475] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 706.737871][T10819] EXT4-fs: Ignoring removed orlov option [ 706.797997][T10819] ext4: Unknown parameter 'obj_user' [ 706.946308][T10831] EXT4-fs: inline encryption not supported [ 706.963860][T10831] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 707.050338][ T5475] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 707.111370][T10854] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 707.140805][T10850] hub 2-0:1.0: USB hub found [ 707.153840][T10854] ext4 filesystem being mounted at /329/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 707.190894][T10850] hub 2-0:1.0: 8 ports detected [ 707.310825][T10890] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 707.373560][ T5821] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 707.433649][T10911] EXT4-fs: Ignoring removed orlov option [ 707.439573][T10911] ext4: Unknown parameter 'obj_user' [ 707.451863][T10905] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 707.664030][T10935] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 707.693149][T10941] program syz.2.11213 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 707.709627][T10935] ext4 filesystem being mounted at /452/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 707.823273][T10950] EXT4-fs: inline encryption not supported [ 707.855445][T10950] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 707.880761][ T1815] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 707.900346][ T6660] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 707.950839][ T5475] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 707.952466][T10964] program syz.5.11224 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 708.040216][T10972] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 708.091727][T10978] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 708.120894][T10985] FAULT_INJECTION: forcing a failure. [ 708.120894][T10985] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 708.134196][T10985] CPU: 1 UID: 0 PID: 10985 Comm: syz.9.11232 Not tainted syzkaller #0 PREEMPT(voluntary) [ 708.134226][T10985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 708.134237][T10985] Call Trace: [ 708.134244][T10985] [ 708.134253][T10985] __dump_stack+0x1d/0x30 [ 708.134341][T10985] dump_stack_lvl+0x95/0xd0 [ 708.134361][T10985] dump_stack+0x15/0x1b [ 708.134444][T10985] should_fail_ex+0x265/0x280 [ 708.134481][T10985] should_fail+0xb/0x20 [ 708.134498][T10985] should_fail_usercopy+0x1a/0x20 [ 708.134519][T10985] _copy_from_user+0x1c/0xb0 [ 708.134614][T10985] ___sys_sendmsg+0xc1/0x1d0 [ 708.134762][T10985] __x64_sys_sendmsg+0xd4/0x160 [ 708.134795][T10985] x64_sys_call+0x17ba/0x3000 [ 708.134874][T10985] do_syscall_64+0xca/0x2b0 [ 708.134905][T10985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.134939][T10985] RIP: 0033:0x7f4de17bf749 [ 708.135008][T10985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 708.135023][T10985] RSP: 002b:00007f4de0227038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 708.135040][T10985] RAX: ffffffffffffffda RBX: 00007f4de1a15fa0 RCX: 00007f4de17bf749 [ 708.135065][T10985] RDX: 0000000000000810 RSI: 0000200000000240 RDI: 0000000000000003 [ 708.135078][T10985] RBP: 00007f4de0227090 R08: 0000000000000000 R09: 0000000000000000 [ 708.135090][T10985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 708.135103][T10985] R13: 00007f4de1a16038 R14: 00007f4de1a15fa0 R15: 00007ffc83f1f4c8 [ 708.135120][T10985] [ 708.502338][T10990] hub 2-0:1.0: USB hub found [ 708.507031][T10990] hub 2-0:1.0: 8 ports detected [ 708.581070][ T1815] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 708.621238][ T5475] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 708.643182][T10995] EXT4-fs: inline encryption not supported [ 708.672186][T10995] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 708.672737][T11001] program syz.1.11237 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 708.781998][ T1815] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 708.845436][T11016] EXT4-fs: inline encryption not supported [ 708.862595][T11016] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 708.879252][T11020] EXT4-fs: Ignoring removed orlov option [ 708.885265][T11020] ext4: Unknown parameter 'obj_user' [ 708.962069][ T1815] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 708.971735][T11025] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 708.991777][T11029] __nla_validate_parse: 9 callbacks suppressed [ 708.991869][T11029] netlink: 68 bytes leftover after parsing attributes in process `syz.0.11247'. [ 709.023500][T11033] EXT4-fs: Ignoring removed orlov option [ 709.029313][T11033] ext4: Unknown parameter 'obj_user' [ 709.040524][T11033] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11250'. [ 709.130813][T11045] EXT4-fs: inline encryption not supported [ 709.151149][T11045] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 709.234123][ T5821] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 709.348257][ T29] kauditd_printk_skb: 1233 callbacks suppressed [ 709.348269][ T29] audit: type=1326 audit(1766372951.025:71361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11090 comm="syz.1.11258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facc2a2f749 code=0x7ffc0000 [ 709.378239][ T29] audit: type=1326 audit(1766372951.025:71362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11090 comm="syz.1.11258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facc2a2f749 code=0x7ffc0000 [ 709.409665][ T29] audit: type=1326 audit(1766372951.025:71363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11090 comm="syz.1.11258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7facc2a2f749 code=0x7ffc0000 [ 709.433398][ T29] audit: type=1326 audit(1766372951.025:71364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11090 comm="syz.1.11258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facc2a2f749 code=0x7ffc0000 [ 709.457269][ T29] audit: type=1326 audit(1766372951.025:71365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11090 comm="syz.1.11258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facc2a2f749 code=0x7ffc0000 [ 709.480994][ T29] audit: type=1326 audit(1766372951.035:71366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11090 comm="syz.1.11258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7facc2a2f749 code=0x7ffc0000 [ 709.504768][ T29] audit: type=1326 audit(1766372951.035:71367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11090 comm="syz.1.11258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facc2a2f749 code=0x7ffc0000 [ 709.528514][ T29] audit: type=1326 audit(1766372951.035:71368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11090 comm="syz.1.11258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7facc2a2f749 code=0x7ffc0000 [ 709.552227][ T29] audit: type=1326 audit(1766372951.035:71369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11090 comm="syz.1.11258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facc2a2f749 code=0x7ffc0000 [ 709.575915][ T29] audit: type=1326 audit(1766372951.035:71370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11090 comm="syz.1.11258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7facc2a2f749 code=0x7ffc0000 [ 709.600908][T11112] netlink: 'syz.9.11259': attribute type 1 has an invalid length. [ 709.608722][T11112] netlink: 224 bytes leftover after parsing attributes in process `syz.9.11259'. [ 709.615764][T11113] EXT4-fs: inline encryption not supported [ 709.641200][T11113] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 709.663879][T11111] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11270'. [ 709.727964][T11129] EXT4-fs: Ignoring removed orlov option [ 709.743413][T11133] EXT4-fs: Ignoring removed orlov option [ 709.744216][ T1815] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 709.749631][T11133] ext4: Unknown parameter 'obj_user' [ 709.760760][T11129] ext4: Unknown parameter 'obj_user' [ 709.788341][T11129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11263'. [ 709.814833][T11133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11265'. [ 709.919257][T11145] EXT4-fs: inline encryption not supported [ 709.952026][T11145] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 709.976014][T11177] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11274'. [ 710.016740][T11185] FAULT_INJECTION: forcing a failure. [ 710.016740][T11185] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 710.030387][T11185] CPU: 0 UID: 0 PID: 11185 Comm: syz.5.11278 Not tainted syzkaller #0 PREEMPT(voluntary) [ 710.030414][T11185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 710.030476][T11185] Call Trace: [ 710.030481][T11185] [ 710.030488][T11185] __dump_stack+0x1d/0x30 [ 710.030512][T11185] dump_stack_lvl+0x95/0xd0 [ 710.030606][T11185] dump_stack+0x15/0x1b [ 710.030625][T11185] should_fail_ex+0x265/0x280 [ 710.030648][T11185] should_fail+0xb/0x20 [ 710.030691][T11185] should_fail_usercopy+0x1a/0x20 [ 710.030729][T11185] _copy_from_user+0x1c/0xb0 [ 710.030756][T11185] __sys_bpf+0x183/0x7c0 [ 710.030803][T11185] __x64_sys_bpf+0x41/0x50 [ 710.030875][T11185] x64_sys_call+0x28e1/0x3000 [ 710.030900][T11185] do_syscall_64+0xca/0x2b0 [ 710.030962][T11185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.030981][T11185] RIP: 0033:0x7f0e31c4f749 [ 710.031017][T11185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 710.031035][T11185] RSP: 002b:00007f0e306b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 710.031054][T11185] RAX: ffffffffffffffda RBX: 00007f0e31ea5fa0 RCX: 00007f0e31c4f749 [ 710.031068][T11185] RDX: 0000000000000030 RSI: 0000200000000080 RDI: 0000000000000014 [ 710.031081][T11185] RBP: 00007f0e306b7090 R08: 0000000000000000 R09: 0000000000000000 [ 710.031104][T11185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 710.031115][T11185] R13: 00007f0e31ea6038 R14: 00007f0e31ea5fa0 R15: 00007ffd23f35ad8 [ 710.031132][T11185] [ 710.034240][T11180] hub 2-0:1.0: USB hub found [ 710.094370][T11190] program syz.1.11279 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 710.100234][T11180] hub 2-0:1.0: 8 ports detected [ 710.111937][ T6660] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 710.142516][T11191] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 710.201796][T11189] netlink: 'syz.5.11280': attribute type 1 has an invalid length. [ 710.237153][T11189] netlink: 224 bytes leftover after parsing attributes in process `syz.5.11280'. [ 710.275845][T11200] set_capacity_and_notify: 21 callbacks suppressed [ 710.275863][T11200] loop1: detected capacity change from 0 to 1024 [ 710.289757][T11200] EXT4-fs: Ignoring removed orlov option [ 710.295583][T11200] ext4: Unknown parameter 'obj_user' [ 710.305940][T11200] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11283'. [ 710.332131][T11204] loop9: detected capacity change from 0 to 128 [ 710.341573][T11204] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 710.354524][T11204] ext4 filesystem being mounted at /230/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 710.400365][ T6660] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 710.400568][T11210] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11287'. [ 710.468618][T11218] loop1: detected capacity change from 0 to 1024 [ 710.475944][T11218] EXT4-fs: inline encryption not supported [ 710.491313][T11218] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 710.556966][ T5821] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 710.593542][T11222] netlink: 'syz.9.11293': attribute type 1 has an invalid length. [ 710.607607][T11232] FAULT_INJECTION: forcing a failure. [ 710.607607][T11232] name failslab, interval 1, probability 0, space 0, times 0 [ 710.620306][T11232] CPU: 1 UID: 0 PID: 11232 Comm: syz.1.11296 Not tainted syzkaller #0 PREEMPT(voluntary) [ 710.620333][T11232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 710.620345][T11232] Call Trace: [ 710.620364][T11232] [ 710.620438][T11232] __dump_stack+0x1d/0x30 [ 710.620463][T11232] dump_stack_lvl+0x95/0xd0 [ 710.620485][T11232] dump_stack+0x15/0x1b [ 710.620504][T11232] should_fail_ex+0x265/0x280 [ 710.620600][T11232] should_failslab+0x8c/0xb0 [ 710.620624][T11232] kmem_cache_alloc_noprof+0x69/0x4b0 [ 710.620775][T11232] ? getname_flags+0x80/0x3b0 [ 710.620811][T11232] getname_flags+0x80/0x3b0 [ 710.620833][T11232] user_path_at+0x28/0x130 [ 710.620909][T11232] __x64_sys_umount+0x85/0xe0 [ 710.621009][T11232] x64_sys_call+0xd6a/0x3000 [ 710.621091][T11232] do_syscall_64+0xca/0x2b0 [ 710.621123][T11232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.621143][T11232] RIP: 0033:0x7facc2a2f749 [ 710.621158][T11232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 710.621175][T11232] RSP: 002b:00007facc1497038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 710.621202][T11232] RAX: ffffffffffffffda RBX: 00007facc2c85fa0 RCX: 00007facc2a2f749 [ 710.621213][T11232] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000200000000000 [ 710.621237][T11232] RBP: 00007facc1497090 R08: 0000000000000000 R09: 0000000000000000 [ 710.621249][T11232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 710.621259][T11232] R13: 00007facc2c86038 R14: 00007facc2c85fa0 R15: 00007ffc44aeca18 [ 710.621277][T11232] [ 710.628940][T11234] loop9: detected capacity change from 0 to 1024 [ 710.799049][T11234] EXT4-fs: Ignoring removed orlov option [ 710.804812][T11234] ext4: Unknown parameter 'obj_user' [ 710.849086][T11239] loop9: detected capacity change from 0 to 128 [ 710.857624][T11239] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 710.879904][T11239] ext4 filesystem being mounted at /236/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 710.936887][ T6660] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 711.202496][T11258] FAULT_INJECTION: forcing a failure. [ 711.202496][T11258] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 711.217450][T11258] CPU: 1 UID: 0 PID: 11258 Comm: syz.5.11306 Not tainted syzkaller #0 PREEMPT(voluntary) [ 711.217474][T11258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 711.217486][T11258] Call Trace: [ 711.217493][T11258] [ 711.217500][T11258] __dump_stack+0x1d/0x30 [ 711.217526][T11258] dump_stack_lvl+0x95/0xd0 [ 711.217561][T11258] dump_stack+0x15/0x1b [ 711.217624][T11258] should_fail_ex+0x265/0x280 [ 711.217645][T11258] should_fail+0xb/0x20 [ 711.217709][T11258] should_fail_usercopy+0x1a/0x20 [ 711.217729][T11258] _copy_to_user+0x20/0xa0 [ 711.217753][T11258] simple_read_from_buffer+0xb5/0x130 [ 711.217826][T11258] proc_fail_nth_read+0x10e/0x150 [ 711.217895][T11258] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 711.217924][T11258] vfs_read+0x1a8/0x770 [ 711.217942][T11258] ? __rcu_read_unlock+0x4f/0x70 [ 711.218041][T11258] ? __fget_files+0x184/0x1c0 [ 711.218061][T11258] ? mutex_lock+0x58/0x90 [ 711.218084][T11258] ksys_read+0xda/0x1a0 [ 711.218105][T11258] __x64_sys_read+0x40/0x50 [ 711.218124][T11258] x64_sys_call+0x2889/0x3000 [ 711.218218][T11258] do_syscall_64+0xca/0x2b0 [ 711.218340][T11258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.218358][T11258] RIP: 0033:0x7f0e31c4e15c [ 711.218373][T11258] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 711.218392][T11258] RSP: 002b:00007f0e306b7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 711.218414][T11258] RAX: ffffffffffffffda RBX: 00007f0e31ea5fa0 RCX: 00007f0e31c4e15c [ 711.218484][T11258] RDX: 000000000000000f RSI: 00007f0e306b70a0 RDI: 0000000000000009 [ 711.218498][T11258] RBP: 00007f0e306b7090 R08: 0000000000000000 R09: 0000000000000000 [ 711.218511][T11258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 711.218526][T11258] R13: 00007f0e31ea6038 R14: 00007f0e31ea5fa0 R15: 00007ffd23f35ad8 [ 711.218546][T11258] [ 711.417154][T11267] loop9: detected capacity change from 0 to 1024 [ 711.436521][T11267] EXT4-fs: Ignoring removed orlov option [ 711.455361][T11267] ext4: Unknown parameter 'obj_user' [ 711.486024][T11272] loop5: detected capacity change from 0 to 128 [ 711.524179][T11272] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 711.559629][T11272] ext4 filesystem being mounted at /475/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 711.632700][ T1815] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 711.801334][T11290] loop5: detected capacity change from 0 to 512 [ 711.911133][T11303] program syz.1.11326 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 711.987624][T11311] FAULT_INJECTION: forcing a failure. [ 711.987624][T11311] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 712.000861][T11311] CPU: 1 UID: 0 PID: 11311 Comm: syz.2.11328 Not tainted syzkaller #0 PREEMPT(voluntary) [ 712.000889][T11311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 712.000902][T11311] Call Trace: [ 712.000909][T11311] [ 712.000918][T11311] __dump_stack+0x1d/0x30 [ 712.000942][T11311] dump_stack_lvl+0x95/0xd0 [ 712.000965][T11311] dump_stack+0x15/0x1b [ 712.001063][T11311] should_fail_ex+0x265/0x280 [ 712.001084][T11311] should_fail+0xb/0x20 [ 712.001130][T11311] should_fail_usercopy+0x1a/0x20 [ 712.001151][T11311] _copy_from_user+0x1c/0xb0 [ 712.001174][T11311] xsk_setsockopt+0x308/0x640 [ 712.001229][T11311] ? __pfx_xsk_setsockopt+0x10/0x10 [ 712.001281][T11311] __sys_setsockopt+0x184/0x200 [ 712.001346][T11311] __x64_sys_setsockopt+0x64/0x80 [ 712.001370][T11311] x64_sys_call+0x21d5/0x3000 [ 712.001391][T11311] do_syscall_64+0xca/0x2b0 [ 712.001462][T11311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.001480][T11311] RIP: 0033:0x7ff472f5f749 [ 712.001495][T11311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 712.001510][T11311] RSP: 002b:00007ff4719bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 712.001527][T11311] RAX: ffffffffffffffda RBX: 00007ff4731b5fa0 RCX: 00007ff472f5f749 [ 712.001538][T11311] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000008 [ 712.001549][T11311] RBP: 00007ff4719bf090 R08: 000000000000001c R09: 0000000000000000 [ 712.001562][T11311] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 712.001573][T11311] R13: 00007ff4731b6038 R14: 00007ff4731b5fa0 R15: 00007ffc89cf4a68 [ 712.001591][T11311] [ 712.310336][T11331] loop1: detected capacity change from 0 to 512 [ 712.351085][T11339] FAULT_INJECTION: forcing a failure. [ 712.351085][T11339] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 712.364230][T11334] program syz.2.11339 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 712.364329][T11339] CPU: 1 UID: 0 PID: 11339 Comm: syz.1.11342 Not tainted syzkaller #0 PREEMPT(voluntary) [ 712.364369][T11339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 712.364382][T11339] Call Trace: [ 712.364390][T11339] [ 712.364399][T11339] __dump_stack+0x1d/0x30 [ 712.364424][T11339] dump_stack_lvl+0x95/0xd0 [ 712.364452][T11339] dump_stack+0x15/0x1b [ 712.364483][T11339] should_fail_ex+0x265/0x280 [ 712.364506][T11339] should_fail+0xb/0x20 [ 712.364533][T11339] should_fail_usercopy+0x1a/0x20 [ 712.364558][T11339] _copy_from_user+0x1c/0xb0 [ 712.364585][T11339] proc_control+0x43/0xa0 [ 712.364667][T11339] usbdev_ioctl+0x93c/0x1700 [ 712.364692][T11339] ? __pfx_usbdev_ioctl+0x10/0x10 [ 712.364716][T11339] __se_sys_ioctl+0xce/0x140 [ 712.364775][T11339] __x64_sys_ioctl+0x43/0x50 [ 712.364802][T11339] x64_sys_call+0x14b0/0x3000 [ 712.364826][T11339] do_syscall_64+0xca/0x2b0 [ 712.364951][T11339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.364973][T11339] RIP: 0033:0x7facc2a2f749 [ 712.364989][T11339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 712.365086][T11339] RSP: 002b:00007facc1497038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 712.365105][T11339] RAX: ffffffffffffffda RBX: 00007facc2c85fa0 RCX: 00007facc2a2f749 [ 712.365118][T11339] RDX: 0000200000000000 RSI: 00000000c0185500 RDI: 0000000000000003 [ 712.365131][T11339] RBP: 00007facc1497090 R08: 0000000000000000 R09: 0000000000000000 [ 712.365144][T11339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 712.365178][T11339] R13: 00007facc2c86038 R14: 00007facc2c85fa0 R15: 00007ffc44aeca18 [ 712.365197][T11339] [ 712.732963][T11360] loop9: detected capacity change from 0 to 4096 [ 712.740313][T11360] EXT4-fs: Ignoring removed nomblk_io_submit option [ 712.748271][T11366] EXT4-fs: inline encryption not supported [ 712.750599][T11360] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 712.767366][T11360] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 712.775580][T11366] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 712.840325][ T5821] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 713.079789][T11395] EXT4-fs: Ignoring removed orlov option [ 713.091262][T11395] ext4: Unknown parameter 'obj_user' [ 713.208547][T11399] EXT4-fs: inline encryption not supported [ 713.333169][T11401] netlink: 'syz.5.11369': attribute type 1 has an invalid length. [ 713.346964][T11415] IPv6: NLM_F_CREATE should be specified when creating new route [ 713.747728][T11434] syz.5.11382 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 713.758954][T11434] CPU: 0 UID: 0 PID: 11434 Comm: syz.5.11382 Not tainted syzkaller #0 PREEMPT(voluntary) [ 713.759056][T11434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 713.759068][T11434] Call Trace: [ 713.759075][T11434] [ 713.759084][T11434] __dump_stack+0x1d/0x30 [ 713.759172][T11434] dump_stack_lvl+0x95/0xd0 [ 713.759264][T11434] dump_stack+0x15/0x1b [ 713.759283][T11434] dump_header+0x81/0x240 [ 713.759345][T11434] oom_kill_process+0x295/0x350 [ 713.759364][T11434] out_of_memory+0x97b/0xb80 [ 713.759384][T11434] try_charge_memcg+0x610/0xa10 [ 713.759412][T11434] charge_memcg+0x51/0xc0 [ 713.759441][T11434] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 713.759527][T11434] __read_swap_cache_async+0x17b/0x2d0 [ 713.759557][T11434] swap_cluster_readahead+0x262/0x3c0 [ 713.759665][T11434] swapin_readahead+0xde/0x820 [ 713.759688][T11434] ? mod_memcg_lruvec_state+0x1a1/0x280 [ 713.759721][T11434] ? lruvec_stat_mod_folio+0xd6/0x120 [ 713.759780][T11434] ? __rcu_read_unlock+0x4f/0x70 [ 713.759810][T11434] ? swap_cache_get_folio+0x277/0x280 [ 713.759840][T11434] do_swap_page+0x2b4/0x21e0 [ 713.759874][T11434] ? __pfx_default_wake_function+0x10/0x10 [ 713.759925][T11434] handle_mm_fault+0x9d8/0x2c60 [ 713.759966][T11434] do_user_addr_fault+0x630/0x1080 [ 713.760003][T11434] exc_page_fault+0x62/0xa0 [ 713.760030][T11434] asm_exc_page_fault+0x26/0x30 [ 713.760046][T11434] RIP: 0033:0x7f0e31b259ec [ 713.760061][T11434] Code: 66 0f 1f 44 00 00 69 3d c6 fc ea 00 e8 03 00 00 48 8d 1d c7 05 38 00 e8 c2 9c 12 00 eb 0c 48 81 c3 f0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 713.760076][T11434] RSP: 002b:00007ffd23f35c40 EFLAGS: 00010287 [ 713.760153][T11434] RAX: 0000000000000000 RBX: 00007f0e31ea6090 RCX: 0000000000000000 [ 713.760199][T11434] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055558fd2e808 [ 713.760213][T11434] RBP: 00007f0e31ea7da0 R08: 0000000000000000 R09: 7fffffffffffffff [ 713.760227][T11434] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000ae666 [ 713.760240][T11434] R13: 00007f0e31ea6090 R14: ffffffffffffffff R15: 00007ffd23f35d50 [ 713.760261][T11434] [ 713.967791][T11434] memory: usage 281200kB, limit 307200kB, failcnt 1517 [ 713.974978][T11434] memory+swap: usage 265272kB, limit 9007199254740988kB, failcnt 0 [ 713.982896][T11434] kmem: usage 248792kB, limit 9007199254740988kB, failcnt 0 [ 713.990204][T11434] Memory cgroup stats for /syz5: [ 714.013602][T11434] cache 0 [ 714.021517][T11434] rss 4096 [ 714.024568][T11434] shmem 0 [ 714.027493][T11434] mapped_file 0 [ 714.030963][T11434] dirty 0 [ 714.033889][T11434] writeback 8192 [ 714.037441][T11434] workingset_refault_anon 1617 [ 714.042203][T11434] workingset_refault_file 273 [ 714.046894][T11434] swap 196608 [ 714.050197][T11434] swapcached 16384 [ 714.053904][T11434] pgpgin 168076 [ 714.057412][T11434] pgpgout 168072 [ 714.060960][T11434] pgfault 206228 [ 714.064568][T11434] pgmajfault 341 [ 714.068103][T11434] inactive_anon 8192 [ 714.071045][T11449] netlink: 'syz.1.11387': attribute type 1 has an invalid length. [ 714.072088][T11434] active_anon 8192 [ 714.079903][T11449] __nla_validate_parse: 8 callbacks suppressed [ 714.079916][T11449] netlink: 224 bytes leftover after parsing attributes in process `syz.1.11387'. [ 714.083580][T11434] inactive_file 0 [ 714.102514][T11434] active_file 0 [ 714.105984][T11434] unevictable 0 [ 714.109486][T11434] hierarchical_memory_limit 314572800 [ 714.114846][T11434] hierarchical_memsw_limit 9223372036854771712 [ 714.121001][T11434] total_cache 0 [ 714.124525][T11434] total_rss 4096 [ 714.128064][T11434] total_shmem 0 [ 714.131571][T11434] total_mapped_file 0 [ 714.135537][T11434] total_dirty 0 [ 714.139081][T11434] total_writeback 8192 [ 714.143164][T11434] total_workingset_refault_anon 1617 [ 714.148439][T11434] total_workingset_refault_file 273 [ 714.153660][T11434] total_swap 196608 [ 714.157467][T11434] total_swapcached 16384 [ 714.161714][T11434] total_pgpgin 168076 [ 714.165684][T11434] total_pgpgout 168072 [ 714.169851][T11434] total_pgfault 206228 [ 714.173906][T11434] total_pgmajfault 341 [ 714.178009][T11434] total_inactive_anon 8192 [ 714.182525][T11434] total_active_anon 8192 [ 714.186852][T11434] total_inactive_file 0 [ 714.191072][T11434] total_active_file 0 [ 714.195038][T11434] total_unevictable 0 [ 714.199005][T11434] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.11382,pid=11434,uid=0 [ 714.213937][T11434] Memory cgroup out of memory: Killed process 11434 (syz.5.11382) total-vm:96016kB, anon-rss:1136kB, file-rss:22572kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 714.294976][T11459] netlink: 68 bytes leftover after parsing attributes in process `syz.0.11392'. [ 714.336624][T11462] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 714.372666][ T29] kauditd_printk_skb: 1797 callbacks suppressed [ 714.372682][ T29] audit: type=1400 audit(1766372956.055:73168): avc: denied { mounton } for pid=11463 comm="syz.5.11393" path="/486/file1" dev="tmpfs" ino=2621 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 714.402352][ T29] audit: type=1400 audit(1766372956.055:73169): avc: denied { mount } for pid=11463 comm="syz.5.11393" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 714.504109][ T29] audit: type=1400 audit(1766372956.185:73170): avc: denied { add_name } for pid=11463 comm="syz.5.11393" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 714.525181][ T29] audit: type=1400 audit(1766372956.185:73171): avc: denied { create } for pid=11463 comm="syz.5.11393" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 714.545765][ T29] audit: type=1400 audit(1766372956.185:73172): avc: denied { write } for pid=11463 comm="syz.5.11393" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 714.577308][ T29] audit: type=1400 audit(1766372956.185:73173): avc: denied { open } for pid=11463 comm="syz.5.11393" path="/486/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 714.600856][ T29] audit: type=1400 audit(1766372956.255:73174): avc: denied { append } for pid=11476 comm="syz.2.11396" name="001" dev="devtmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 714.659963][ T29] audit: type=1400 audit(1766372956.345:73175): avc: denied { unmount } for pid=1815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 714.699530][ T29] audit: type=1326 audit(1766372956.385:73176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11500 comm="syz.5.11397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e31c4f749 code=0x7ffc0000 [ 714.725002][ T29] audit: type=1326 audit(1766372956.405:73177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11500 comm="syz.5.11397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0e31c465e7 code=0x7ffc0000 [ 715.331487][T11600] netlink: 'syz.1.11400': attribute type 1 has an invalid length. [ 715.339385][T11600] netlink: 224 bytes leftover after parsing attributes in process `syz.1.11400'. [ 715.421020][T11620] set_capacity_and_notify: 4 callbacks suppressed [ 715.421031][T11620] loop2: detected capacity change from 0 to 1024 [ 715.434723][T11620] EXT4-fs: Ignoring removed orlov option [ 715.440510][T11620] ext4: Unknown parameter 'obj_user' [ 715.456614][T11620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11409'. [ 715.502986][T11622] loop1: detected capacity change from 0 to 1024 [ 715.510201][T11622] EXT4-fs: inline encryption not supported [ 715.665856][T11635] program syz.1.11415 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 715.765811][T11639] netlink: 'syz.5.11417': attribute type 1 has an invalid length. [ 715.773734][T11639] netlink: 224 bytes leftover after parsing attributes in process `syz.5.11417'. [ 715.801023][T11646] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 715.812164][T11648] loop5: detected capacity change from 0 to 1024 [ 715.819799][T11648] EXT4-fs: Ignoring removed orlov option [ 715.825853][T11648] ext4: Unknown parameter 'obj_user' [ 715.839300][T11648] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11420'. [ 715.930672][T11652] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11422'. [ 716.168676][T11671] loop5: detected capacity change from 0 to 1024 [ 716.176170][T11671] EXT4-fs: Ignoring removed orlov option [ 716.182067][T11671] ext4: Unknown parameter 'obj_user' [ 716.222271][T11671] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11431'. [ 716.256131][T11669] netlink: 'syz.0.11430': attribute type 1 has an invalid length. [ 716.264023][T11669] netlink: 224 bytes leftover after parsing attributes in process `syz.0.11430'. [ 716.391598][T11689] loop9: detected capacity change from 0 to 4096 [ 716.422330][T11691] loop5: detected capacity change from 0 to 1024 [ 716.439629][T11691] EXT4-fs: inline encryption not supported [ 716.441565][T11698] loop2: detected capacity change from 0 to 1024 [ 716.452987][T11698] EXT4-fs: Ignoring removed orlov option [ 716.460764][T11698] ext4: Unknown parameter 'obj_user' [ 716.522276][T11698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11442'. [ 716.611383][T11705] loop5: detected capacity change from 0 to 1024 [ 716.618411][T11705] EXT4-fs: inline encryption not supported [ 716.833798][T11729] loop9: detected capacity change from 0 to 1024 [ 716.841498][T11729] EXT4-fs: Ignoring removed orlov option [ 716.847144][T11729] ext4: Unknown parameter 'obj_user' [ 716.872593][T11731] loop1: detected capacity change from 0 to 1024 [ 716.874867][T11732] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 716.889495][T11731] EXT4-fs: Ignoring removed orlov option [ 716.900769][T11731] ext4: Unknown parameter 'obj_user' [ 717.032800][T11742] EXT4-fs: Ignoring removed orlov option [ 717.040003][T11742] ext4: Unknown parameter 'obj_user' [ 717.185515][T11754] EXT4-fs: inline encryption not supported [ 717.337175][T11763] EXT4-fs: Ignoring removed orlov option [ 717.378576][T11763] ext4: Unknown parameter 'obj_user' [ 717.502456][T11779] EXT4-fs: Ignoring removed orlov option [ 717.508309][T11779] ext4: Unknown parameter 'obj_user' [ 717.517170][T11775] EXT4-fs: Ignoring removed orlov option [ 717.531810][T11775] ext4: Unknown parameter 'obj_user' [ 717.593380][T11786] EXT4-fs: inline encryption not supported [ 717.654174][T11790] hub 2-0:1.0: USB hub found [ 717.679897][T11790] hub 2-0:1.0: 8 ports detected [ 717.801589][T11797] syz.5.11485 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 717.811539][T11797] CPU: 0 UID: 0 PID: 11797 Comm: syz.5.11485 Not tainted syzkaller #0 PREEMPT(voluntary) [ 717.811564][T11797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 717.811578][T11797] Call Trace: [ 717.811586][T11797] [ 717.811594][T11797] __dump_stack+0x1d/0x30 [ 717.811619][T11797] dump_stack_lvl+0x95/0xd0 [ 717.811640][T11797] dump_stack+0x15/0x1b [ 717.811658][T11797] dump_header+0x81/0x240 [ 717.811675][T11797] oom_kill_process+0x295/0x350 [ 717.811693][T11797] out_of_memory+0x97b/0xb80 [ 717.811717][T11797] try_charge_memcg+0x610/0xa10 [ 717.811743][T11797] obj_cgroup_charge_pages+0xa6/0x150 [ 717.811771][T11797] obj_cgroup_charge_account+0x73/0x1a0 [ 717.811798][T11797] ? vma_set_page_prot+0xc3/0xf0 [ 717.811823][T11797] __memcg_slab_post_alloc_hook+0x397/0x530 [ 717.811849][T11797] kmem_cache_alloc_noprof+0x2c5/0x4b0 [ 717.811866][T11797] ? vm_area_dup+0x33/0x2c0 [ 717.811885][T11797] vm_area_dup+0x33/0x2c0 [ 717.811904][T11797] __split_vma+0xe9/0x660 [ 717.811926][T11797] vma_modify+0xb53/0xd50 [ 717.811951][T11797] vma_modify_flags+0x10c/0x190 [ 717.811979][T11797] mprotect_fixup+0x30f/0x5e0 [ 717.812012][T11797] do_mprotect_pkey+0x6d6/0x980 [ 717.812038][T11797] __x64_sys_mprotect+0x48/0x60 [ 717.812062][T11797] x64_sys_call+0x2c3b/0x3000 [ 717.812084][T11797] do_syscall_64+0xca/0x2b0 [ 717.812110][T11797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.812129][T11797] RIP: 0033:0x7f0e31c4f807 [ 717.812145][T11797] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 717.812162][T11797] RSP: 002b:00007ffd23f35a78 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 717.812180][T11797] RAX: ffffffffffffffda RBX: 00007f0e306966c0 RCX: 00007f0e31c4f807 [ 717.812190][T11797] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f0e30677000 [ 717.812202][T11797] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 717.812215][T11797] R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffd23f35bd0 [ 717.812227][T11797] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 717.812246][T11797] [ 717.812253][T11797] memory: usage 307200kB, limit 307200kB, failcnt 1621 [ 718.031943][T11797] memory+swap: usage 103956kB, limit 9007199254740988kB, failcnt 0 [ 718.039841][T11797] kmem: usage 87564kB, limit 9007199254740988kB, failcnt 0 [ 718.047033][T11797] Memory cgroup stats for /syz5: [ 718.050855][T11797] cache 0 [ 718.058756][T11797] rss 4096 [ 718.061839][T11797] shmem 0 [ 718.064766][T11797] mapped_file 0 [ 718.068212][T11797] dirty 0 [ 718.071260][T11797] writeback 0 [ 718.074533][T11797] workingset_refault_anon 1643 [ 718.079333][T11797] workingset_refault_file 273 [ 718.083995][T11797] swap 81920 [ 718.087263][T11797] swapcached 32768 [ 718.090979][T11797] pgpgin 171075 [ 718.094427][T11797] pgpgout 171067 [ 718.097959][T11797] pgfault 210717 [ 718.101543][T11797] pgmajfault 355 [ 718.105081][T11797] inactive_anon 0 [ 718.108702][T11797] active_anon 32768 [ 718.112512][T11797] inactive_file 0 [ 718.116133][T11797] active_file 0 [ 718.119623][T11797] unevictable 0 [ 718.123065][T11797] hierarchical_memory_limit 314572800 [ 718.128429][T11797] hierarchical_memsw_limit 9223372036854771712 [ 718.134629][T11797] total_cache 0 [ 718.138080][T11797] total_rss 4096 [ 718.141668][T11797] total_shmem 0 [ 718.145122][T11797] total_mapped_file 0 [ 718.149145][T11797] total_dirty 0 [ 718.152620][T11797] total_writeback 0 [ 718.156403][T11797] total_workingset_refault_anon 1643 [ 718.161705][T11797] total_workingset_refault_file 273 [ 718.166968][T11797] total_swap 81920 [ 718.170707][T11797] total_swapcached 32768 [ 718.174933][T11797] total_pgpgin 171075 [ 718.178893][T11797] total_pgpgout 171067 [ 718.183003][T11797] total_pgfault 210717 [ 718.187051][T11797] total_pgmajfault 355 [ 718.191138][T11797] total_inactive_anon 0 [ 718.195297][T11797] total_active_anon 32768 [ 718.199774][T11797] total_inactive_file 0 [ 718.203923][T11797] total_active_file 0 [ 718.207879][T11797] total_unevictable 0 [ 718.211867][T11797] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.11485,pid=11797,uid=0 [ 718.226602][T11797] Memory cgroup out of memory: Killed process 11797 (syz.5.11485) total-vm:96016kB, anon-rss:1136kB, file-rss:21668kB, shmem-rss:0kB, UID:0 pgtables:116kB oom_score_adj:1000 [ 718.326713][T11814] EXT4-fs: inline encryption not supported [ 718.460194][T11819] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 718.488867][T11821] EXT4-fs: Ignoring removed orlov option [ 718.494679][T11821] ext4: Unknown parameter 'obj_user' [ 718.540964][T11825] program syz.9.11495 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 718.562767][T11826] ================================================================== [ 718.570863][T11826] BUG: KCSAN: data-race in rxrpc_send_data / rxrpc_send_data_packet [ 718.578869][T11826] [ 718.581181][T11826] write to 0xffff888104f59000 of 8 bytes by task 11824 on cpu 0: [ 718.588884][T11826] rxrpc_send_data+0x8c5/0x1560 [ 718.593727][T11826] rxrpc_do_sendmsg+0xc16/0xcc0 [ 718.598573][T11826] rxrpc_sendmsg+0x47c/0x590 [ 718.603147][T11826] __sock_sendmsg+0x145/0x180 [ 718.607807][T11826] ____sys_sendmsg+0x31e/0x4a0 [ 718.612562][T11826] ___sys_sendmsg+0x17b/0x1d0 [ 718.617229][T11826] __x64_sys_sendmsg+0xd4/0x160 [ 718.622071][T11826] x64_sys_call+0x17ba/0x3000 [ 718.626737][T11826] do_syscall_64+0xca/0x2b0 [ 718.631237][T11826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.637123][T11826] [ 718.639452][T11826] read to 0xffff888104f59000 of 8 bytes by task 11826 on cpu 1: [ 718.647059][T11826] rxrpc_send_data_packet+0x465/0x1df0 [ 718.652512][T11826] rxrpc_transmit_some_data+0x63c/0x8b0 [ 718.658065][T11826] rxrpc_input_call_event+0x8bb/0xf30 [ 718.663511][T11826] rxrpc_io_thread+0x1c1e/0x21c0 [ 718.668431][T11826] kthread+0x489/0x510 [ 718.672493][T11826] ret_from_fork+0x149/0x290 [ 718.677073][T11826] ret_from_fork_asm+0x1a/0x30 [ 718.681825][T11826] [ 718.684132][T11826] value changed: 0x0000000000000000 -> 0xffff888104f5c800 [ 718.691217][T11826] [ 718.693522][T11826] Reported by Kernel Concurrency Sanitizer on: [ 718.699651][T11826] CPU: 1 UID: 0 PID: 11826 Comm: krxrpcio/0 Not tainted syzkaller #0 PREEMPT(voluntary) [ 718.709446][T11826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 718.719570][T11826] ==================================================================