last executing test programs: 44.115703147s ago: executing program 3 (id=132): prctl$PR_SET_MM(0x23, 0x6, &(0x7f000005b000/0x2000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) brk(0x200004ffc000) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, 0x0) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r2, 0x2284, &(0x7f0000000080)) 44.043695453s ago: executing program 3 (id=133): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="03040000b5"], 0xc8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}, 0x1, 0x0, 0x0, 0x2040000}, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000030605000000000000000000000000060500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'gretap0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x7, 0x1, 0xe4, 0x1, {{0x10, 0x4, 0x1, 0x6, 0x40, 0x65, 0x0, 0x0, 0x2f, 0x0, @local, @empty, {[@noop, @lsrr={0x83, 0x13, 0xd6, [@local, @multicast1, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0x17, 0xcd, [@private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast2, @rand_addr=0x64010100]}]}}}}}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="05000000000000009ac91c8c000000ff03df00"/33, @ANYRES32=r4, @ANYBLOB="12800000062401000500100004000000"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 43.96821634s ago: executing program 3 (id=134): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000180)={0x8, &(0x7f0000000140)=[{0x400, 0x3, 0x80, 0x6}, {0xc1, 0x85, 0x20, 0x3a60182d}, {0xa, 0x6, 0x0, 0xa}, {0x5, 0xf8, 0x0, 0x81}, {0x1, 0xff, 0xd, 0xfffffffb}, {0x85f2, 0xff, 0xdb, 0xaaac}, {0xffff, 0x8, 0xe3, 0x3}, {0x10, 0x20, 0x1}]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00', r2}, 0x18) lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f0000000980)='system_u:object_r:netutils_exec_t:s0\x00', 0xf, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f00000000c0)={[{@lazytime}, {@errors_remount}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") (async) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f00000000c0)={[{@lazytime}, {@errors_remount}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0x3fffffffffffe52, 0x10003, '\x00', [{}, {0xffffffff}]}) (async) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0x3fffffffffffe52, 0x10003, '\x00', [{}, {0xffffffff}]}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x2003, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x44, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x6}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x1}, @TCA_FQ_CODEL_LIMIT={0x0, 0x2, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x1}, @TCA_FQ_CODEL_INTERVAL={0x4, 0x3, 0x3}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x3}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x7}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0xfdab, 0xa, 0xaa}]}}]}, 0x78}}, 0x4000010) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 43.921476884s ago: executing program 3 (id=135): r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002880)=ANY=[@ANYBLOB="f4ff006dcdfaf06e23612d0000000000040000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmsg$inet6(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000140)="d0be0b6daaf8af47f9d01b5abb8ecefd834cf2a8b6df8c668bd63b9e5e73f7febaee38871ccc3c68ae7a73fbf426659a26713a0943df7664de47dfa4a1af8e33cdd216f3729819f6daa736e167e607c6f125bf3d416bbe865620c8656fc7be9f4e3f1844a22efdff6b46eda848a75a99eb3732358117f6ae0b0f4ee168430448c9ad34c5cab9bf26b34de88a1046e36ae8c18ed99226dad0a66b1b49ac51dc94ff1e1e60a7eb9ca9b6c5e1763560648a7485f18b2170bb7a6d58af3ae7d2835a2f62bcf0de5dda3d79aa", 0xca}, {&(0x7f0000000580)="af4b459010fef7e29ca9b5595bd25e746472c2455020f10737e182081d14077b4c94ced8a0c00b37de33285f0096faaa6c1ea107390338d86678ab4e8ea7a40f255be05ed6df3319ac832f4d9c66b3d44fcb1bf3bef3185255527490c369dcd18c7394c20806846a30d16c06bb0177538a94f999e201f1e6d0282b6fdf93ee97fdde55b6b5767d8e7f67d985fba1cbdd30376567dee7ad214e45016e2e5a46bbaaa456027d9b0b847386626df744c61fe3b0a5015ca62990507fa3b7ed273cdce5cebd", 0xc3}, {&(0x7f0000000b00)="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", 0x1000}, {&(0x7f0000000380)="16689a4f78b42f9ec170ef116257d933ed21893b52919bcad00ad286e34a4a762564b3d3a60e858fc0866bc9f2e5914e3326a6d2438d895a49a60c60833e550f941e598fac3e2dfd18b3a238e07a66557e2f2f2a1c8ee62b16e1a4ee5809356ba82d5b52193646c314aa704e4414d66b48f4b75ef5baee1d533c869aad7870b83a08c0c729f37b9d2645a871a01adbc8cbd8cdf2553bb6405f5b46057fc14b274d90a5553d2a29bed010bfbe0ac402251ca83b9fe7", 0xb5}, {&(0x7f0000000680)="2f773b22bc78e36b84c1b719792e7df5fffe0c6e2924f889fe8def1fbb5c5e909dbe0ab5a5b0cb4897816f15cc79ed4871abee9c5ae1d8859e9ddb96793e07ffa496511ba47d984267d9d5a93b3448b83b83e3ca8d612e4f3ba48d1938e6fe522e6fad7476acdedfead37bb8108dc2689d595a4a6b14aa781b6164c161534f03bbcacce8c25fa90e986f4cf64b85ec8b472dac3593837998f1f86fe99340be8c93", 0xa1}, {&(0x7f0000000740)="0c19534d743ded6e1a05a7f285127d5e6a28128210ff1e9bf01476792b5a3409d9631cd10e834f958a6f65b615cefe53853b2d77bad61ff55bff1f5e99a0ffc5f7a5fe26f9002b747b90b1a8db63685af99997824d06c819225857ebe210b01e29fb6b19ca66887d656b81193267fb3fd589577ec8047f74f75777b4522a8b077f129aac555c1370c2bb7ba0ed9bc17fcbd57c843c66454f17653345ac68191ddcf17c3703285351e6cf2cf88ed2602e18f2cf6cd7f0fa", 0xb7}, {&(0x7f0000000040)="29f43376fd84c3d016367c2644cdbbb336459eb053d99ed668bac4b85e9aabd8290597f23027f96942223d451b4152d59fbba86e52e0b2460c38e0e62eadd4780e0a7e058f1653ea398f008c47e89dc2de80fc8395f20ee54d", 0x59}, {&(0x7f0000000800)="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", 0xfe}, {&(0x7f0000000900)="80ce9c150defaaf80b9eedc43713eab689cdc21e6dd056a10475532db99a4b853417f9795f00cc80e686987a4abf44aca1170f9f10db0956c1060a733cba05fcf90cf31590bba1f2e5f993ab6fb94398454cab5442da07debde876b1143ece4549f5c6e347c6ca5c38574fd175375d174eec9d0b9ea3540c88e4e6bdfc67a57e27a887d18e3ef9c093d02081d566b097cafa5e22d73f638e9adad7994bd0ddfbdedad12c0714", 0xa6}, {&(0x7f0000000280)="1f4df8e1ff68bc2da6ec9ba2c36b09cba6fe7a2657ad0302cbd7e7a1547e47643a4368b071d7dc08bba5b9316ec52831cf07ed5b668083e59047decd03cba26a7d850af109136bc363ab516316b228a3e9", 0x51}], 0xa, &(0x7f0000001bc0)=ANY=[@ANYBLOB="480000000000000029000000040000007305000000000000c204000000030710000000030245e22b0300000000000000000100c91000000000000000000000ff09001e0001000000600000000000000029000000360000002e080000000000000740000000000e0c020006000000000000006300000000000000040000000000000001040000000000000f0e020000000000000000000100000006000000000000000000000000001400000000000000290000003e0000000400000000000000300000000000000029000000040000002b0200000000000001080000000000000000050200030502c3cc7e6846a1000700000000000014000000000000002900000034000000000000e0000000002000000000000000290000000400000067f90100000000000002"], 0x128}, 0x40800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000e1010000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001f00)={r1, 0x58, &(0x7f0000001e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b0000000700000008000000a6ad6a1a05"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0xef, 0x0, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x7}, 0xc310, 0x10000, 0x3, 0x5, 0x0, 0x8, 0x6f, 0x0, 0x7, 0x0, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000008"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000020018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800002254d1327b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) r11 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002840)={{r8}, &(0x7f00000027c0), &(0x7f0000002800)=r10}, 0x20) sendfile(r10, r11, 0x0, 0x3) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002200)=0xffffffffffffffff, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002580)={r9, 0xe0, &(0x7f0000002480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000022c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, &(0x7f0000002300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa2, &(0x7f0000002380)=[{}, {}], 0x10, 0x10, &(0x7f00000023c0), &(0x7f0000002400), 0x8, 0x73, 0x8, 0x8, &(0x7f0000002440)}}, 0x10) r15 = bpf$MAP_CREATE(0x0, &(0x7f00000025c0)=ANY=[@ANYRES64=r8, @ANYRES8, @ANYRESOCT=r13, @ANYRESHEX=r7, @ANYRES16=r4], 0x50) r16 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002680)=@generic={&(0x7f0000002640)='./bus\x00'}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002700)=@bpf_lsm={0x1d, 0x8, &(0x7f0000002900)=ANY=[@ANYBLOB="1044f8f8", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70500000800000085000000a500000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000000000008500000086000000950000000000000018110000", @ANYRES32=r16, @ANYBLOB="0000000000000000b7020000000000008500000086000000"], &(0x7f00000021c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x46, '\x00', r4, 0x1b, r12, 0x8, &(0x7f0000002240)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000002280)={0x0, 0xb, 0xba89, 0x4}, 0x10, r14, 0x0, 0x0, &(0x7f00000026c0)=[r15, r16], 0x0, 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x120c042, &(0x7f0000000840)={[{@nodiscard}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@resuid}, {@debug}, {@minixdf}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}], [{@seclabel}]}, 0x1, 0x5e7, &(0x7f0000001400)="$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") syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x0, 0x16, &(0x7f0000001d00)=ANY=[@ANYBLOB="180000000f0000000000ee00ff00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000005c39f8fff0ffffff1869000000000000000000000b00000018240000", @ANYRES32=r3, @ANYBLOB="0000000004000000185200000e0000000000000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000a00)='GPL\x00', 0x10000, 0x93, &(0x7f0000001dc0)=""/147, 0x41100, 0x40, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001f40)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000001f80)={0x2, 0x4, 0x10000, 0xa7}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001fc0)=[0xffffffffffffffff, r1], &(0x7f0000002000)=[{0x5, 0x1, 0x10, 0x2}, {0x0, 0x2, 0x4}], 0x10, 0x6}, 0x94) 43.788050336s ago: executing program 3 (id=138): capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x6, 0x81, 0xffffffff, 0x2241d13d}) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000007880)='ns/cgroup\x00') (async) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmmsg$sock(r1, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001680)=[@mark={{0x10, 0x1, 0x24, 0x550d}}], 0x10}}], 0x1, 0x4) (async) setns(r0, 0x0) (async) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8020, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) (async) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000011c0)={{{@in6=@local, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}}}, &(0x7f00000055c0)=0xe8) (async) r5 = getegid() sendmsg$netlink(0xffffffffffffffff, &(0x7f00000056c0)={&(0x7f00000007c0)=@kern={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000008c0)=[{&(0x7f0000000d40)={0x154, 0x3c, 0x100, 0x70bd2d, 0x25dfdbfe, "", [@nested={0x81, 0xfc, 0x0, 0x1, [@nested={0x4, 0x50}, @typed={0x8, 0x4c, 0x0, 0x0, @str='pci\x00'}, @generic="5851b32e66d851af41e5cd817edc70d196c9a848ce5a9f36087039be502845c6329a0de27c84acf49da7100a4d2e8038fe6eb26b43fa99858404dce499f4e5147df523fc3ff7c105c7deda7bfe2e607f0ccf15dbc5f2aaa932c9c445263cc3c14d2dfd30efc296c3f1ab3f49b4", @nested={0x4, 0xab}]}, @nested={0x4, 0x5e}, @generic="fc17b2fb77247d0c0dc2c414ef038090d4a0f09f4a3c9fc834ee3cd4218bf41ea032b1ff138c10876599c34a0694d6e943919f84613de771009eec3cca3c16fd0793cc001ef0a3983b6e68dadd575f72f8d75714516d96e333336543b9b3e7881c3e2a54958a3345ddf89e4ffbfc17a9c84c", @nested={0x4, 0xea}, @typed={0x8, 0x111, 0x0, 0x0, @uid}, @generic="6611a386ed13df1b2a080a0addfc371ee68189e2ea9db2d37a625317b5f570a5c22491033def9989b8228f2beb0c208d9c1a1dd2b5ea", @typed={0x8, 0x14c, 0x0, 0x0, @fd}]}, 0x154}, {0x0}], 0x2, &(0x7f0000005600)=[@rights={{0x18, 0x1, 0x1, [r3, r2]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}], 0xb8, 0x40000}, 0x90) quotactl_fd$Q_QUOTAON(r1, 0xffffffff80000200, r4, &(0x7f0000000040)='./file0\x00') 43.390619532s ago: executing program 3 (id=144): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") (async) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000040)={&(0x7f00000004c0)={0x64, 0x1, 0x9, 0x3, 0x0, 0x0, {0x7}, [@NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x14}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFCTH_TUPLE={0x4}, @NFCTH_TUPLE={0x14, 0x2, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @NFCTH_STATUS={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) flistxattr(r2, 0x0, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r2, 0x40082102, &(0x7f0000000000)) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_DISABLE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={0x14, r3, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) 43.390318852s ago: executing program 32 (id=144): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") (async) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000040)={&(0x7f00000004c0)={0x64, 0x1, 0x9, 0x3, 0x0, 0x0, {0x7}, [@NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x14}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFCTH_TUPLE={0x4}, @NFCTH_TUPLE={0x14, 0x2, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @NFCTH_STATUS={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) flistxattr(r2, 0x0, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r2, 0x40082102, &(0x7f0000000000)) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_DISABLE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={0x14, r3, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) 31.61007261s ago: executing program 2 (id=297): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xb9, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000f2ff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) futex_waitv(&(0x7f0000003e00)=[{0x0, &(0x7f0000000700)=0x1, 0x2}, {0x9, &(0x7f0000000840)=0x4, 0x82}, {0xc351, &(0x7f0000000880), 0x82}, {0x3, &(0x7f00000008c0)=0x307, 0x2}, {0xb3, &(0x7f0000000900)=0x419, 0x82}, {0x400, &(0x7f0000000940)=0xfffffffffffffffd, 0x82}, {0x1, &(0x7f0000000980)=0xfa, 0x82}, {0x800, &(0x7f0000000b00)=0x9, 0x82}, {0x375f, &(0x7f0000000b40)=0xc5, 0x2}, {0x5, &(0x7f0000000bc0)=0x354, 0x2}, {0x17, &(0x7f0000000c00)=0x2, 0x82}, {0x9953, &(0x7f0000001800)=0x8, 0x82}, {0x2, &(0x7f0000001840), 0x2}, {0xfffffffffffffffd, &(0x7f0000001880)=0x5, 0x2}, {0x7, &(0x7f00000018c0)=0x9, 0x82}, {0x9, &(0x7f0000001900)=0xa, 0x2}, {0x0, &(0x7f0000001940)=0x1000000, 0x82}, {0x21, &(0x7f00000019c0)=0x7, 0x2}, {0xffff, &(0x7f0000001a00)=0x3, 0x82}, {0x0, &(0x7f0000001a40)=0x1, 0x82}, {0x8, &(0x7f0000001a80)=0xfffe000000000000, 0x2}, {0xfffffffffffffffc, &(0x7f0000001ac0)=0x3, 0x2}, {0x5, &(0x7f0000001b00), 0x82}, {0x1, &(0x7f0000001b40)=0x2, 0x82}, {0x401, &(0x7f0000001b80)=0xfffffffffffff1df, 0x82}, {0x1, &(0x7f0000001bc0)=0xbec, 0x2}, {0xfffffffffffffffd, &(0x7f0000001c00)=0x9, 0x2}, {0x9, &(0x7f0000001c40)=0x3fe, 0x82}, {0x6, &(0x7f0000001c80)=0x1, 0x2}, {0x0, &(0x7f0000001cc0)=0x4}, {0x4, &(0x7f0000001d00), 0x2}, {0x3, &(0x7f0000001d40)=0x6, 0x2}, {0x9, &(0x7f0000001d80)=0x3a5, 0x82}, {0x7, &(0x7f0000001dc0)=0x5, 0x82}, {0x2, &(0x7f0000001e00), 0x80}, {0x4, &(0x7f0000001e40)=0x1f2, 0x2}, {0x3, &(0x7f0000001e80)=0x9, 0x82}, {0x8, &(0x7f0000001ec0)=0x7, 0x82}, {0x7, &(0x7f0000001f00)=0xa, 0x82}, {0x0, &(0x7f0000001f40)=0x7, 0x2}, {0x1, &(0x7f0000001f80), 0x82}, {0x2, &(0x7f0000001fc0)=0x6, 0x2}, {0x1ec, &(0x7f0000002000)=0x1196, 0x2}, {0x52c, &(0x7f0000002080)=0x6b91, 0x82}, {0x9, &(0x7f00000020c0), 0x43}, {0x0, &(0x7f0000002100)=0x5, 0x82}, {0x7, &(0x7f0000002140)=0x3, 0x2}, {0x775f673d, &(0x7f0000002180)=0x8, 0x82}, {0x1c, &(0x7f00000021c0)=0x6ff33460, 0x2}, {0x80, &(0x7f0000002200)=0x2, 0x82}, {0x80000001, &(0x7f0000002240)=0xab5, 0x2}, {0xb69b, &(0x7f0000002280)=0xffff, 0x2}, {0xfdd2, &(0x7f00000022c0)=0x1f, 0x2}, {0x50, &(0x7f0000002300)=0xe, 0x2}, {0x10001, &(0x7f0000002340)=0x9}, {0x3, &(0x7f0000002380)=0x61eb, 0x2}, {0xc70, &(0x7f00000023c0)=0x5, 0x2}, {0x5, &(0x7f0000002400), 0x2}, {0x1ff, &(0x7f0000002440)=0x2, 0x82}, {0x8, &(0x7f0000002480)=0xffffffff, 0x82}, {0x68bd, &(0x7f00000024c0)=0x100, 0x82}, {0xcfba, &(0x7f0000002500)=0x2, 0x82}, {0xa9, &(0x7f0000002540)=0xaf, 0x80}, {0x7, &(0x7f0000002580)=0xe, 0x2}, {0x1, &(0x7f00000025c0)=0x100, 0x82}, {0x4, &(0x7f0000002600), 0x82}, {0x9, &(0x7f0000002640)=0xfffffffffffffff8, 0x2}, {0xd, &(0x7f0000002680)=0x3, 0x82}, {0x2, &(0x7f00000026c0)=0x1, 0x82}, {0x0, &(0x7f0000002700)=0x9, 0x2}, {0xa, &(0x7f0000002740)=0x686b, 0x2}, {0x3, &(0x7f0000002780), 0x2}, {0x2, &(0x7f00000027c0)=0x8, 0x82}, {0x7, &(0x7f0000002800)=0x9, 0x2}, {0x80000000, &(0x7f0000002840)=0x81, 0x2}, {0x7, &(0x7f0000002880)=0x9, 0x2}, {0x0, &(0x7f00000028c0)=0x3f, 0x2}, {0x8, &(0x7f0000002900), 0x2}, {0x2, &(0x7f0000002940)=0x7fffffff, 0x2}, {0x2, &(0x7f0000002980)=0x5, 0x82}, {0x4, &(0x7f00000029c0)=0xfac, 0x2}, {0x80, &(0x7f0000002a00)=0x9, 0x82}, {0x7, &(0x7f0000002a40)=0x6fb, 0x2}, {0x6, &(0x7f0000002a80)=0x4, 0x2}, {0x401, &(0x7f0000002ac0)=0x100000001, 0x82}, {0x4, &(0x7f0000002b00)=0x56f, 0x82}, {0x6, &(0x7f0000002b40)=0x7, 0x2}, {0x7, &(0x7f0000002b80)=0x6, 0x82}, {0x8, &(0x7f0000002bc0)=0xffff, 0x2}, {0x9, &(0x7f0000002c00)=0xb, 0x2}, {0x9b, &(0x7f0000002c40)=0x8, 0x2}, {0x3, &(0x7f0000002c80)=0x7, 0x82}, {0x1, &(0x7f0000002cc0)=0x9, 0x2}, {0x2, &(0x7f0000002d00)=0xdaa, 0x2}, {0x2, &(0x7f0000002d40)=0x9, 0x2}, {0x7f, &(0x7f0000002d80)=0x3ff, 0x82}, {0x8000, &(0x7f0000002dc0)=0x8000000000000000, 0x82}, {0xffff, &(0x7f0000002e00)=0xb, 0x2}, {0x3, &(0x7f0000002e40)=0x8000000000000001, 0x82}, {0x7fffffff, &(0x7f0000002e80)=0x6, 0x82}, {0x6, &(0x7f0000002ec0)=0x5, 0x82}, {0x6, &(0x7f0000002f00)=0x554d, 0x2}, {0x7ff, &(0x7f0000002f40)=0x8, 0x82}, {0x4a, &(0x7f0000002f80)=0x7, 0x2}, {0x80000000, &(0x7f0000002fc0)=0x5, 0x2}, {0xcc04, &(0x7f0000003000)=0x8, 0x2}, {0x2, &(0x7f0000003040)=0x67f, 0x2}, {0xe983, &(0x7f0000003080)=0x3ae, 0x2}, {0x7ff, &(0x7f00000030c0)=0x9, 0x82}, {0x40, &(0x7f0000003300)=0x4000000, 0x2}, {0xfffffffffffffffd, &(0x7f0000003140)=0x10, 0x2}, {0x185, 0x0, 0x2}], 0x70, 0x0, &(0x7f00000006c0)={0x0, 0x3938700}, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, &(0x7f0000000380)="bfa2d56d965589d3626e265223a9664d41313782e60fa18105f369530c40319145ace770c14bd3cd95d5243e8f6eb4bfb6c420445c641313f84a7f358858066028cdc66256624fdb57c3874f10a10890c4408f831382c4ab36e9161e81745ce93c9c6e07a1b170cf732f0fd62e004bcf51eb3fae029c") r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='fib6_table_lookup\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000800)='fib6_table_lookup\x00', r2}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) r7 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000840)="ff", 0x1, 0xffffffffffffffff) r8 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r8, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000340)=@chain={'key_or_keyring:', r7}) keyctl$KEYCTL_MOVE(0x1e, r7, 0xffffffffffffffff, r8, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffffffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) 31.512599099s ago: executing program 2 (id=301): r0 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x60) getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2000000, &(0x7f0000000200)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@privport}, {@loose}, {@dfltuid={'dfltuid', 0x3d, r1}}, {@version_9p2000}, {@privport}, {@cachetag}, {@access_client}], [{@appraise}]}}) r2 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r2, &(0x7f0000000b40)={&(0x7f00000002c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000440)=""/224, 0xe0}, {&(0x7f0000000540)=""/20, 0x14}, {&(0x7f0000000580)=""/215, 0xd7}, {&(0x7f0000000680)=""/12, 0xc}, {&(0x7f00000006c0)=""/255, 0xff}, {&(0x7f00000007c0)=""/117, 0x75}, {&(0x7f0000000840)=""/150, 0x96}, {&(0x7f0000000900)=""/44, 0x2c}, {&(0x7f0000000940)=""/15, 0xf}], 0xa, &(0x7f0000000a40)=""/254, 0xfe}, 0x100) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x13) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000b80)={'vxcan0\x00', 0x0}) r4 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_aout(r4, &(0x7f0000000bc0)={{0xcc, 0x40, 0x2, 0x1c5, 0x370, 0x7, 0x3ca, 0x81}, "894eac08bfbf646650ecd38327d5bd1df1985ccc12a7e00181cf43b4594ced18d3b7ddb5a7c77d3aefd1162baff32d6f9ad545eab98e9b27449cd2741b26c628d8a2592a055f9c70550a780415839016ddf57711b884530489368d39ae7f37792e2530a52b9525feb6902a251aad5af80819d177554eb86764185da0c9389d61412c748b2c90fad17cb1021713dd", ['\x00', '\x00', '\x00', '\x00']}, 0x4ae) r5 = syz_io_uring_setup(0x9c1, &(0x7f0000001080)={0x0, 0x34d0, 0x2000, 0x1, 0x24}, &(0x7f0000001100)=0x0, &(0x7f0000001140)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000001180)=0x6, 0x0, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(r6) r8 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r8, 0xc0189376, &(0x7f0000001200)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) futex(&(0x7f0000001240)=0x2, 0x0, 0x0, &(0x7f0000001280), &(0x7f00000012c0)=0x1, 0x0) fcntl$getown(r2, 0x9) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001300)={0xffffffffffffffff, 0x1, 0x10}, 0xc) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001480)={{r9, 0xffffffffffffffff}, &(0x7f0000001400), &(0x7f0000001440)='%-010d \x00'}, 0x20) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x3, 0x7, &(0x7f0000001340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}]}, &(0x7f0000001380)='GPL\x00', 0xe5, 0x3c, &(0x7f00000013c0)=""/60, 0x41100, 0x0, '\x00', r3, @sched_cls=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, &(0x7f00000014c0)=[r11], &(0x7f0000001500)=[{0x5, 0x2, 0xf, 0xb}, {0x2, 0x1, 0x6, 0x2}, {0x4, 0x3, 0x9, 0x3}], 0x10, 0xc}, 0x94) syz_io_uring_setup(0x7b58, &(0x7f0000001600)={0x0, 0x7510, 0x1, 0x3, 0x2fb, 0x0, r8}, &(0x7f0000001680)=0x0, &(0x7f00000016c0)) syz_io_uring_setup(0x48ee, &(0x7f0000001700)={0x0, 0x6130, 0x20, 0x0, 0x50, 0x0, r8}, &(0x7f0000001780), &(0x7f00000017c0)=0x0) syz_io_uring_submit(r13, r14, &(0x7f0000001800)=@IORING_OP_POLL_ADD={0x6, 0x55, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x8400}, 0x1}) setsockopt$IP_VS_SO_SET_DEL(r4, 0x0, 0x484, &(0x7f0000001840)={0x33, @dev={0xac, 0x14, 0x14, 0x40}, 0x4e23, 0x1, 'none\x00', 0x28, 0x1, 0x7d}, 0x2c) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000001880), &(0x7f00000018c0)=0xc) sendmsg$nl_route_sched_retired(r9, &(0x7f0000001b40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001b00)={&(0x7f0000001940)=@newtclass={0x1bc, 0x28, 0x4, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x3, 0x1}, {0xc, 0x6}, {0x8, 0x8}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x5}}}, @c_atm={{0x8}, {0xa8, 0x2, [@TCA_ATM_FD={0x8, 0x1, r7}, @TCA_ATM_FD={0x8, 0x1, r8}, @TCA_ATM_HDR={0x17, 0x3, "2545b6495318b50d7bd88246f74a2ba37daa9f"}, @TCA_ATM_HDR={0x3d, 0x3, "c93b5bcc1a5de2991543c2358c3aa6e600c8426e6870dc2a7818559e56d85e95e98506ab1f28acc39592f11aa9d10a77de9c84a804ebebc508"}, @TCA_ATM_HDR={0x31, 0x3, "b8069bc416ebb55d6a06d5523e4d3c34869898a3564bcd606239d4305d93bdb90699549d72760e98a5fb412e4f"}, @TCA_ATM_EXCESS={0x8, 0x4, {0xfff1, 0xfff3}}]}}, @c_atm={{0x8}, {0x94, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0x4, 0x8}}, @TCA_ATM_HDR={0x11, 0x3, "0e780b902926a266cef18dc95c"}, @TCA_ATM_HDR={0x40, 0x3, "041f5f6414bcda70e095794bf29a2af1c16997a53d344202766279ab9fcbbd06c83f17ec8cd2463a905ffc1c393c0733858d06fdccb7b0d4d1b55415"}, @TCA_ATM_HDR={0x1c, 0x3, "71e097a6cec878a2fed3ded135885e76ef496a7a74998dfd"}, @TCA_ATM_HDR={0xe, 0x3, "ef238dbae7ab469f4d45"}, @TCA_ATM_EXCESS={0x8, 0x4, {0x4, 0x9}}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0xb}}}, @c_atm={{0x8}, {0x14, 0x2, [@TCA_ATM_HDR={0xd, 0x3, "d355bcf30d2d44f3f2"}]}}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x8013}, 0x20000880) sendmsg$NFT_MSG_GETOBJ(r9, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x74, 0x13, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x48080}, 0x10) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000001cc0)=@gcm_256={{0x304}, "9cbf6b0fcd87eb93", "f69e61f45d9e200a067f2b4cd4ecf7f9444540bc7c2e27eaecf671cfb0f60f4c", "eb466d77", "f8c336191722756b"}, 0x38) newfstatat(0xffffffffffffff9c, &(0x7f0000001d00)='./file0\x00', &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) quotactl_fd$Q_GETNEXTQUOTA(r12, 0xffffffff80000900, r15, &(0x7f0000001dc0)) 30.560180454s ago: executing program 2 (id=311): keyctl$chown(0x4, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x5, 0x47a840) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1, 0x0, 0x400000040000000}, 0x18) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0xfffffffffffffccc, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 30.28406905s ago: executing program 2 (id=316): syz_emit_ethernet(0x2d1, &(0x7f0000000ac0)={@local, @remote, @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x2, 0x1, 0x2c3, 0x67, 0x0, 0x5, 0x2f, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x27}, {[@noop]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x93, 0x0, [], "2105f1c4604a522f119d7d9ec074c93611a0cf75ef7f586642d66880789013e0992256dd4ccdc940b9e0e5a68f087ce2306ce17302190001a67e6aec43dd5f9ca4d8e23907314b191f4b3d449e62d6ef6b8bde041f63e71f1b6e92afffd71f0291e10b4bf4bb1c9cab69a496dfdf3dff2f5838f3eca817fd43eddb676001678f50dacd3ebf332fb33ff2d7153932bbafe51119"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [], "822cc985f57074720dfb4b40762b5476e47fdb3a47cededc3c2ed6d7446a85c3f163ec78d945988a0b9f12253bb4a6d3f9cbb23af9b2958a3e177a46a179354f95f5cc664c26054c87d5551c229bcfc9bf50e1fe4c292ef7392dfcc87034646899a8f038ee8bbe0bc455ccf1e67e67bbed077bb5b262c455b6c94c49163ee61379f46885bbab4ba45676eecb8f6b7dba68042246344c7ef10df5b0526fd03767adabdf6e039b84e5a1bf067c298c2063a33d32d2ef086602a1b8a9818e246b24701d2424776bf4f2098e0022af8f5420542d2af10af4078a513a2d"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [0x5, 0xc041, 0x101], "d790b2f6814c4df08f38751d741bf3b4ee24ce3df0062751dd8a6f847135cfb2441f9f9c14db260996237db9868e9616d14f608a441a7b3a677b8930a6fca8782360cbbb74c8cd8f3c4f9229754bea66eb105fdf0a5a8838f34c274c6dcebe885bb5ad1ed4063a2d19f71caec765a64b3d38fb5b147900000000958c384d4912962bd3552335ffda547fc67f443c53473b56a6780ff807b0166eda969f1782d97fa7d49e456f01a4d3c2aea2e23719398a94a2eb90f7526f7515ca21b460dace261e05ea8070c1cb2a2790f00e27b4d43f7ce34b84d8eb821a4e2200000000"}, {0x8, 0x88be, 0x4, {{0x7, 0x1, 0xe, 0x2, 0x1, 0x3, 0x3, 0x5}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x2, {{0x8, 0x2, 0x5, 0x0, 0x0, 0x3, 0x7, 0x8}, 0x2, {0x4, 0x1, 0x1, 0x19, 0x1, 0x0, 0x2, 0x0, 0x1}}}, {0x8, 0x6558, 0x1, "323a0668bc050e63f3e1e03cfeb628726b07c946"}}}}}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) syz_open_dev$usbfs(0x0, 0x800000001fe, 0x82) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="c80000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0305000000000000940012800b0001006261746164760000840002800c0001004241544d414e5f560d0001d5ac1d7e197a6217872da4b5004241544d414e5f4956080000000000000041544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560d0001004241544d414e5f49560000000c0001004241544d414e5f560d0001004241544d414e5f495600000008000500", @ANYRES32=r4, @ANYBLOB="0a000100aaaaaaaaaa180000"], 0xc8}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x4f3, &(0x7f00000005c0)="$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") mount$9p_fd(0x0, &(0x7f0000002400)='./file0\x00', 0x0, 0x4800, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0xff, 0x0, &(0x7f00000007c0)) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) wait4(r5, 0x0, 0x8, 0x0) ptrace$poke(0x5, r5, &(0x7f00000004c0), 0xc000000000000005) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00') mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{}, &(0x7f00000008c0), &(0x7f0000000880)}, 0x20) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000001740), r6) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) 30.027302432s ago: executing program 2 (id=321): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x9, 0x1, 0x7fe2, 0x1, 0x10}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000001e18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000fee5e62a8150c233c211db1f4bfc61e99b5515d8545d001450cdf6eb89c4ed19c47343a9d885c82611af889dc8dc279fa6ff87835f19bc311b09a1f739644a785dba3ac95f330b3f4b06e99c8f0b283fd3a52cfe9c36a6f1ce38496bc493ce917eb4ecd9ddace3fd564a8726e73a567b4d834ef576655c2900bdf520775f25b484cf6ef47d31b7616947eba1c939061c28b335b3f97e9f6e1bacc32b16ec47", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c000000200a01010000000000000000020000040c00054020000000000000020900010073797a30"], 0x54}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010426bd7000fcdbdf2502000000080001"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r6 = syz_open_dev$sg(&(0x7f00000001c0), 0x6883, 0x20000) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000340)={'\x00', 0x2, 0x2, 0xfffffffa, 0x5ceef4e2, 0x3}) 29.464880523s ago: executing program 2 (id=328): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps_rollup\x00') lseek(r0, 0x2004, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000004c0)='kmem_cache_free\x00', r1}, 0x18) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x6a) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) timer_create(0x5, &(0x7f0000000080)={0x0, 0x3b, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000180)) 29.443072065s ago: executing program 33 (id=328): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps_rollup\x00') lseek(r0, 0x2004, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000004c0)='kmem_cache_free\x00', r1}, 0x18) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x6a) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) timer_create(0x5, &(0x7f0000000080)={0x0, 0x3b, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000180)) 2.316538692s ago: executing program 0 (id=780): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="05000000040000000900000044"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x18) r2 = epoll_create1(0x0) epoll_pwait2(r2, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x1ff, 0x7, 0x2, 0x1, 0xffffffff}, &(0x7f0000000140)=0x14) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000180)={r5, 0x4}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0x20002017}) close_range(r2, 0xffffffffffffffff, 0x0) 2.190930083s ago: executing program 0 (id=782): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x1000, 0x1) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) msgget$private(0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c000000000000000000000c850000006d00000095"], &(0x7f0000001800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='9p_protocol_dump\x00', r2}, 0x10) r3 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x480002, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [{@smackfsdef}, {@hash}, {@context={'context', 0x3d, 'sysadm_u'}}], 0x6b}}) 2.150938247s ago: executing program 0 (id=784): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800f3ffffffff01000000000408000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newqdisc={0xffffff1a, 0x24, 0x100, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x1ff, 0x6, 0xfffffffd, 0xfff, 0xfffffffd, 0x32d}, [@TCA_NETEM_RATE64={0x0, 0x8, 0xb9785581c453d0b}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000100}, 0x1) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r7}, 0x18) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) setresuid(0x0, 0xee00, 0x0) io_uring_setup(0x4b63, &(0x7f0000000300)={0x0, 0xbfffeffb, 0x10000, 0x0, 0x3cf}) setrlimit(0x40000000000008, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x40800300, 0x0, 0x0, 0x0, 0x0, 0x0) 1.984065142s ago: executing program 5 (id=787): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) mq_open(0x0, 0x42, 0x120, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x8000000000000}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r6, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000043c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x531, &(0x7f0000000640)="$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") sendmsg$key(r0, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="020e0080150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff000000000600330000000000000000000000eafffd8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x2) 1.767963941s ago: executing program 5 (id=790): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x13, 0xb, &(0x7f0000000180)=ANY=[@ANYRES8=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0x0, 0xa041a, 0x7fffffff, 0x2, 0x2, 0x2, 0x1, 0x0, 0x7, 0x21}) (async, rerun: 32) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000580)={{0x80}, 'port0\x00', 0x50, 0x100c75, 0x7, 0x4, 0x1ff, 0x3, 0x8, 0x0, 0x1}) (async, rerun: 32) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x5, 0x8, 0x3}, 0x0) (async) r4 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000040)={0x0, 'veth1_virt_wifi\x00', {0x4}, 0x8}) (async, rerun: 32) ioprio_set$pid(0x2, 0x0, 0x0) (async, rerun: 32) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0xecf86c37d53048d6) (async) r6 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000001c0)={{{@in, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x8, 0x4e20, 0x43, 0xa, 0x50, 0x0, 0x21, 0x0, 0xffffffffffffffff}, {}, {0x0, 0xfffffffffffffffe, 0x101}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x6c}, 0x0, @in=@empty, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, 0xe8) close(r5) (async) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x6}, 0x18) (async) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$eJzs3M1vFOUfAPDvzLblx2v7Q3wBUavE2PjS0oLKwYtGEw8YTfSAN2tbCKFQQ2sihEg1Bi8mhkTP6tHEv8CbF6OeTLzq3ZAQ5QJ6qpnZmbK7dLctLLuF/XySZZ9n5pl9nm9nnp1n5pklgJ41nP2TRGyLiN8jYrCarS8wXH27duXc1D9Xzk0lsbT05l9JXu7qlXNTZdFyu61FZiSNSD9JikrqzZ85e2JydnbmdJEfWzj53tj8mbPPHD85eWzm2MypiUOHDh4Yf/65iWfbEmcW19U9H87t3f3q2xdfmzpy8d2fv8vau61YXxtHg00N72s2nAX+91JueWFafXt83RFsbNtr0klfFxvCulQiIttd/Xn/H4xKXN95g/HKx11tHHBbZeemFie2xSXgLpZEt1sAdEd5os+uf8tXh4YeG8LlF6sXQFnc14pXdU1feameXxttv031D0fEkcV/v8pe0fo+BABAW3w29eXheHql8V8a99WU21HMoQxFxP8jYmdE3BMRuyLi3oi87P0R8cDqVaa1mcapoRvHP+mlmw5uDbLx3wvF3Fb9+G+5mUOVIrc9j78/OXp8dmZ/8TcZif5NWX68RR0/vPzb583W1Y7/sldWfzkWLNpxqa/hBt305MJkPihtg8sfRezpWyn+ZHkmIImI3RGxZ30fvaNMHH/y273NCq0efwttmGda+ibiier+X4yG+EtJ6/nJsf/F7Mz+sfKouNEvv154o1n9txR/G2T7f0v98d9YZCipna+dX38dF/74tOk1zc0e/wPJW/m2A8WyDyYXFk6PRwwkh/N83fKJ69uW+bJ8Fv/IvpX7/85imyz+ByMiO4gfioiHI+KRou2PRsRjEbGvRfw/vdR8XX38m7d1Y/9PN3z/bc7XLB//Dft//YnKiR+/X7n2r99Z2/4/mKdGiiX5998q1trAW/zzAQAAwB0hzZ+BT9LR5XSajo5Wn+HfFVvS2bn5haeOzr1/arr6rPxQ9Kflna7Bmvuh48li8YnV/ERxr7hcf6C4b/xFZXOeH52am53ucuzQ67Y26f+ZPyvdbh1w2600jzYx0IWGAB3X2P/T+uz51zvZGKCjmj5Hs6Wz7QA6b5Xn6NJOtQPoPP9fC/Sulfr/+Ya8uQC4Ozn/Q+/S/6F36f/Qu/R/6Emr/Ui+cou//Ze44xLJ2gpH2v2mboxEf0S05QMHNkQ4RaLb30wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADt8V8AAAD//5qI6jE=") (async, rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r8 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r7, &(0x7f0000000140)={0x0, 0x43, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0902000000000000000001000000050002000a00000014000700ff00000000000000000000000000000108000b00"], 0x38}}, 0x0) 1.760232772s ago: executing program 5 (id=792): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r2, 0x0, 0x10000001}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x5, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2e, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r4}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d900"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x32c861007ab3ebe9, 0x8, &(0x7f0000002500)=ANY=[@ANYRES64=r6], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x96, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) ioctl$BTRFS_IOC_TREE_SEARCH(r7, 0xd0009411, 0x0) clock_nanosleep(0x2, 0x0, 0x0, 0x0) r8 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x2, 0x3, 0x290, 0xb, 0x0, 0xf0, 0xf8, 0xf0, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1, 0x0, 0x0, 'ip6gretap0\x00', 'syzkaller1\x00', {}, {}, 0x11}, 0xb000000, 0xd8, 0xf8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x8}}, @common=@unspec=@quota={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) clock_nanosleep(0x7, 0x0, &(0x7f0000000680), &(0x7f00000006c0)) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r10, 0x89a2, &(0x7f0000000200)='bridge0\x00') ioctl$sock_SIOCBRDELBR(r9, 0x89a3, &(0x7f0000000200)='bridge0\x00') r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="40009511f72436b6ec8c00001000030400000000", @ANYRES32=0x0, @ANYBLOB="0002000080000000200012800b00010065727370616e000010000280040012000800150055c70d02"], 0x40}}, 0x40000c0) sendmsg$nl_route_sched(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x6}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40080}, 0x4000c00) 1.024009058s ago: executing program 1 (id=794): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x2}, 0x94) r1 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r3, 0x0, 0x115}, 0x18) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r5, 0xfffffffffffffffe, r5, 0x1) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f0000000080)=ANY=[@ANYBLOB="c331000001"]) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000100)={'bond0\x00', @ifru_names='ip6tnl0\x00'}) syz_open_dev$usbfs(&(0x7f0000000380), 0x8000, 0x202100) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001200576d100000000000000007000000", @ANYRES32=0x0, @ANYBLOB="088402000000000008001d00ca0e00000e8f30165d73587c56b86e30eaaea5b1a237cac02e1b6f3076486ea81e8b845f21fc11147baac8fe1bf83bd555850d919c7c23d8745addc981db4767094c71c3a42dfa8820cc97fc45600308a55db78ae49b52a1cf727f41027d3603d479ee136805a4103294a5ffc8b4719756ecc21bbe1c9a"], 0x28}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="16000000000000000400000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000000101010300000000000000000a0000010c0019"], 0x50}, 0x1, 0x0, 0x0, 0x904}, 0x80088c0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x41) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffe15) socket(0xa, 0x6, 0x48000007) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r9}, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) read(0xffffffffffffffff, &(0x7f0000001180)=""/4096, 0x1000) 938.563426ms ago: executing program 1 (id=795): syz_io_uring_setup(0x151, &(0x7f0000000140)={0x0, 0x8206, 0x400, 0x43, 0x26}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6711f234db5aaa13f382ad796bd667c9e00000009873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x68) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r2, 0x5421, &(0x7f0000000140)=0x1) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_submit(0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x24044005) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)="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", 0xfb}, {&(0x7f0000000900)="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", 0x386}], 0x2}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) poll(&(0x7f0000000080)=[{r5, 0x10}], 0x1, 0x2) writev(r5, &(0x7f0000000080), 0x1109) close(r2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80, 0x162) ioctl$sock_inet6_tcp_SIOCATMARK(r6, 0x8905, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x16, 0xcb518c4815769044, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xc0000}) 467.231038ms ago: executing program 1 (id=796): pipe(&(0x7f0000000040)={0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) r2 = syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000180)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}, {@oldalloc}]}, 0x1, 0x5e1, &(0x7f0000000bc0)="$eJzs3c1vFVUbAPBnbj9oKe/bQt68igtpYgwkSksLGGJcwNaQBj/ixo2VFkQKNLRGiyaUBDcmxo0xJq5ciP+FEtmy0pULN64MCVHD0sRr5nam9LZz+0V7pzK/X3LpzJw7nGd6+/Sce3rO3AAqazD9pxaxPyKmk4j+ZH6xrDOywsGF5z3486Oz6SOJev2135NIsmP585Psa192ck9E/PhDEvs6VtY7M3ft4vjU1OTVbH949tL08MzctcMXLo2fnzw/eXn0hdETx48dPzFyZFPXdb3g2Omb777f/8nYm9989Vcy8u0vY0mcjJezJy69jq0yGION70mysqjvxFZXVpKO7Odk6UucdJYYEBuSv35dEfFE9EdHPHzx+uPjV0oNDthW9SSiDlRUIv+hovJ+QP7efvn74FopvRKgHe6fWhgAWJn/nQtjg9HTGBvY/SCJpcM6SURsbmSu2Z6IuHtn7Oa5O2M3Y5vG4YBi8zci4smi/E8a+T8QPTHQyP9aU/6n/YIz2df0+KubrH/5ULH8h/ZZyP+eVfM/WuT/W0vy/+1N1j/4cPOd3qb8793sJQEAAAAAAEBl3T4VEc8X/f2/tjj/Jwrm//RFxMktqH9w2f7Kv//X7m1BNUCB+6ciXiqc/1vLZ/8OdGRb/2nMB+hKzl2YmjwSEf+NiEPRtSvdH1mljsOf7vuyVdlgNv8vf6T1383mAmZx3Ovc1XzOxPjs+KNeNxBx/0bEU4Xzf5PF9j8paP/T3wfT66xj37O3zrQqWzv/ge1S/zriYGH7//CuFcnq9+cYbvQHhvNewUpPf/jZd63q32z+u8UEPLq0/d+9ev4PJEvv1zOz8TqOznXWW5Vttv/fnbzeuOVMd3bsg/HZ2asjEd3J6Y70aNPx0Y3HDI+jPB/yfEnz/9Azq4//FfX/eyNiftn/nfzRvKY49/+/+35tFY/+P5Qnzf+JDbX/G98YvTXwfav619f+H2u09YeyI8b/YMEXeZp2Nx8vSMfOoqJ2xwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAj4NaROyJpDa0uF2rDQ1F9EXE/2J3berKzOxz5668d3kiLWt8/n8t/6Tf/oX9JP/8/4El+6PL9o9GxN6I+Lyjt7E/dPbK1ETZFw8AAAAAAAAAAAAAAAAAAAA7RF+L9f+p3zrKjg7Ydp1lBwCUpiD/fyojDqD9tP9QXfIfqkv+Q3XJf6iudeb/ye2OA2g/7T9Ul/yH6pL/AAAAAADwWNl74PbPSUTMv9jbeKS6s7KuUiMDtlut7ACA0rjFD1SXqT9QXd7jA8ka5T0tT1rrzNVMn32EkwEAAAAAAAAAAACgcg7ut/4fqsr6f6gu6/+huvL1/wdKjgNoP+/xgVhjJX/h+v81zwIAAAAAAAAAAAAAttLM3LWL41NTk1dtvLEzwmjnRr1ev57+FOyUeP7lG/lU+J0Sz7KNfK3f+s4q73cSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ7J8AAAD//yTpJQU=") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f00000002c0), 0xff, 0x255, &(0x7f00000017c0)="$eJzs3U1oFGcYB/BnZnebJllK2l4KpR9QSmkCIb0VekkvLQRKCKUUWiEi4kVJhJjgLfHkxYOeVXLyEsSb0aPkErwogqeoOcSLoMGDwYMeVnYngXysH3HjjmR+P5idmd2ZeWaY+b+zh513AyisnogYjIhSRPRFRCUiks0LfJ8NPeuzs52LoxG12t9Pk8Zy2XxmY73uiJiJiF8jYiFN4mg5Ymr+/5XnS3/+dGay8uOl+f8623qQ61ZXlv9auzh8+urQL1O37z4eTmIwqluOa+8lTd4rJxFffIhiH4mknPce8C5GTl65V8/9lxHxQyP/lUgjO3lnJz5ZqETvhdete+7Jna/bua/A3qvVKvV74EwNKJw0IqqRpP0RkU2naX9/9h3+fqkrPTY+caLvyPjk2OG8Wypgr1Qjlv+43nGte1v+H5Wy/AP7Vz3//4zMPahPr5Xy3hugLb7JRvX89x2c/jnkHwpH/qG45B+KS/6huOQfiuvN+W/2q1Vgv3D/h+KSfyiIJs9jyT8UVzV65R8KavP9HwAollpH3k8gA3nJu/0BAAAAAAAAAAAAAAAAAAB2mu1cHN0Y2lXz5vmI1d+z/gl31i81/o844tPGa9ezZEs3hknzbg135cB3LW6gRZdzfvr6s4f51r/1bb71p8ciZk5FxEC5vPP6S9avv/f3+Vs+rxxqscAube/V/7d/21t/u5dz+dYfWoq4UW9/Bpq1P2l81Rg3b3+q9fPXYv3jL1rcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG3zKgAA//90r212") r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="14200000", @ANYRES16=r4, @ANYBLOB="0902000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x4008080}, 0x4000080) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0x8004587d, &(0x7f0000000080)={0x0, r5}) pwrite64(r5, 0x0, 0x0, 0x80000001) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x2, 0x1, 0xc7, 0x5, 0x6, 0xc7, 0x4, 0x0, 0x9d}) r6 = socket(0x10, 0x803, 0x6) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}}, 0x24}}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x6e) write$binfmt_elf64(r7, &(0x7f0000000300)=ANY=[], 0x5b0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') splice(r8, 0x0, r10, 0x0, 0x402000784853bb, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) vmsplice(r9, &(0x7f0000000240)=[{&(0x7f0000000040)='d', 0x1}], 0x1, 0xa) 463.826178ms ago: executing program 5 (id=798): r0 = socket$inet_udplite(0x2, 0x2, 0x88) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020a07b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x1e00, 0x6f, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r2}, 0x18) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCFLSH(r4, 0x400455c8, 0x0) (async) r5 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r5, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}, 0x20002880) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r1}, 0x18) (async) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x7, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r9) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) (async) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000811}, 0x40) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) (async) r11 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r11, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x80000}, 0x100}) (async) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0xfffffffffffffffd, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0x0, 0xa, 0x148, 0x0, 0x60, 0x3c8, 0x2a8, 0x2a8, 0x3c8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x330, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x330, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x1, 0x2}, {0x0, 0x1, 0x3}, {0xffffffffffffffff, 0x6, 0x3}, 0x5, 0x401}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x44}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x20000000}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4c0) 461.022788ms ago: executing program 5 (id=800): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = gettid() r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2082) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000040)) mount(&(0x7f00000002c0)=@rnullb, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='securityfs\x00', 0x244002, &(0x7f0000000500)='kfree\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmsg(r6, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e", 0x24}], 0x1}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000001040)={'lo\x00', {0x2, 0x4e1e, @broadcast}}) r8 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000002000010000000000000000000200200003000000000000001400110076657468305f6d616376746170000000080002"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) read(r3, &(0x7f0000000100)=""/140, 0xde) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r10 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r10, 0x402c542c, &(0x7f0000000100)={0xfffffff8, 0xaeb, 0xe57, 0x1, 0x7, "3ce6920887000000000000000d00", 0x4, 0x1ff}) ioctl$TIOCSTI(r10, 0x5412, &(0x7f00000001c0)=0xd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r9}, 0x10) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000003580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0xffffffffffffffff}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f00000005c0)={0x197, @time={0x1, 0x2}, 0x0, {}, 0xff, 0x2}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r3, 0xc058534b, &(0x7f0000000240)={0x151a, 0x0, 0x5, 0x3, 0x4, 0xb}) tkill(r2, 0x7) 460.117909ms ago: executing program 1 (id=801): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000020000000080000000b"], 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r2, &(0x7f0000000000), 0x0}, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80000, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) rt_sigprocmask(0x0, &(0x7f0000000500)={[0xfffffffffffffff9]}, 0x0, 0x8) r3 = gettid() r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000001700000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) sendmmsg$inet(r6, &(0x7f0000003100)=[{{&(0x7f0000000080)={0x2, 0x4e1e, @multicast1}, 0x10, 0x0}}], 0x1, 0xc044) write$binfmt_misc(r6, 0x0, 0x0) tkill(r3, 0x12) tkill(r3, 0x3a) tkill(0x0, 0x14) 459.071999ms ago: executing program 1 (id=802): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x3fff8002}, 0xa00, 0x81, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x8000000, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCOUTQNSD(r2, 0x40049409, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$nci(r3, 0x0, 0xfffffeea) 457.664579ms ago: executing program 4 (id=803): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x6, &(0x7f0000000000)=@framed={{0xffffffb7, 0x2, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0xc4}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) 457.392519ms ago: executing program 4 (id=804): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$inet_mptcp(0x2, 0x1, 0x106) (async) socket$inet_mptcp(0x2, 0x1, 0x106) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000000)=0x3, 0xf, 0x3) (async) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000000)=0x3, 0xf, 0x3) get_mempolicy(0x0, 0x0, 0x8, &(0x7f0000ffe000/0x2000)=nil, 0x3) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e000000650000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000000200015b", 0xe, 0xfffffffffffffffd) (async) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000000200015b", 0xe, 0xfffffffffffffffd) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000401"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) (async) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_open_dev$sg(&(0x7f0000000100), 0x48639146, 0x1a5080) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_9p2000}]}}) 440.74382ms ago: executing program 6 (id=805): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000400000000000000400000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kmem_cache_free\x00', r0, 0x0, 0x6}, 0x18) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ptrace(0x10, r1) (async) ptrace$pokeuser(0x6, r1, 0x388, 0x41d9fda7) (async) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x80044940, &(0x7f00000010c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$msdos(&(0x7f00000003c0), &(0x7f0000000340)='.\x00', 0x126a4b5, &(0x7f0000004140)=ANY=[@ANYRES16=r8, @ANYRES64=r6, @ANYRES16=r5, @ANYRES16=r8, @ANYRESDEC=r7, @ANYRES16=r4, @ANYRES16, @ANYBLOB="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", @ANYRESHEX=0x0, @ANYRES32=r3], 0x5, 0x0, &(0x7f0000000000)) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f00000003c0)={{r3, 0x72, 0xfdf, 0x8001, 0x3c4f, 0x5, 0x100000001, 0xff, 0x10000, 0x7, 0x8, 0x1, 0x100000001, 0x5, 0x5}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r10}, 0x18) setpriority(0x1, 0xff, 0x7) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0x1c, 0x6, 0x7ffc1ff8}]}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x9, &(0x7f0000000340)=[{0x398, 0x0, 0x0, 0x7}, {0x80, 0x35, 0x4}, {0xb2e, 0x2, 0x7, 0xbd}, {0x10, 0x28, 0x3, 0xfffffffc}, {0x4, 0xfb, 0x3, 0x5}, {0x4, 0x2, 0x6, 0xfffffffb}, {0x32, 0x5, 0x80}, {0x4, 0x9, 0x3, 0x1}, {0x400, 0x0, 0xe, 0x42}]}, 0x10) r11 = accept$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) sendto$unix(r11, &(0x7f0000000140)="ca35bd4587790312446e9c7e2fa5c7b9be8f48eab15a71e4026e96e61594f0e5e9edd57b00d2d2a67ed4c8ea4327e11e3df93d6d8b6d3cc4598aaf9c47a466bdca58cdc36139b9ce2d378ec799aecc3b8cc08757ad420c86061d81a472682c9b3a08", 0x62, 0x4000000, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) connect$llc(0xffffffffffffffff, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) 392.015795ms ago: executing program 1 (id=806): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="700000001000030500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="35c60100ef000000500012800e0001006970366772657461700000003c00028014000600fe88000000000000000000000000010114000700ff8000000000000000000000000000bb060002000700000008000100", @ANYRES64=r1], 0x70}, 0x1, 0x0, 0x0, 0x200488c0}, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000011c0)) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000010c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="400002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="ca2704925b0900000000000000c9dc8de88cc40e183cfd2c06220712a10549b5d0fe5b1726b99b12075a480c6a0dad0ba7f11f857a712350d21d8ded8686a6fe5c5e4bf8bfae5170225b3964e23b35331625756baf358441aa7f66018aebd58f161c5f750d6a96c8b64b534d2a211286ae2425a64781fc58f96339"], 0x5c}}, 0x40000) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r9}, 0x18) r10 = syz_open_procfs(0x0, &(0x7f0000000380)='map_files\x00') getdents64(r10, &(0x7f0000000fc0)=""/224, 0xe0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f00000000c0), &(0x7f00000005c0)=r3}, 0x20) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000001340)=ANY=[@ANYBLOB="18000000000000000000000000000000181100000035588a8951bd2e6a8e4379084a98123bce8fa8f6dd610e8f83028c5d42b3b903b2f45ab3d1d1c445f4a323754524f694cced61e736eb75757e2b8adb9fc929ad850a3bf486c6b5e0b6c31b3cc21586395a83bfa8e1553c4d30bc261ffd9f18683fe43ac672b008fc5dcf2b225d44b769bf9119e043551dd9b83a32d00ea1cef62ea34a20d750c77d03a1dc623760f14a2e8b60d69da5efb5c291c9c3e76c6d263780bf267fcb0df80219caf09d4b6ea8118a6feb006662", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRESHEX=r3, @ANYBLOB="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"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r12, 0x0, 0xf}, 0x18) execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) r13 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r13, 0x84, 0x2, &(0x7f0000000180)={0x7a2a, 0x9, 0x5a}, 0x8) sendmsg$inet_sctp(r13, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000640)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) r14 = getpgrp(0xffffffffffffffff) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r14, 0x0, 0x4004) r15 = socket$inet6(0xa, 0x1, 0x0) dup2(r3, r15) 387.964075ms ago: executing program 6 (id=807): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x7, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000400)='objagg_obj_root_destroy\x00', r2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x6}, 0x18) pipe2(&(0x7f0000000000), 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000140)=0x80, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f00000001c0)) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) mq_unlink(0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f00000001c0)="5122dfb5a85e76ee7abd6050e5bac524c4698a8d1058790d31fc430f0fdb3f5e06787a910e938e7dff62b3cffabac4e5147ff905bc7005590c8043e1209b5e00d97eee4606ac06e4b96e7e396ed27ece28eacdfa2ecc8397aa859e732765", 0x0, 0x4}, 0x20) unshare(0x2a020400) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) syz_open_dev$evdev(&(0x7f0000000000), 0xe9, 0x400) 387.101345ms ago: executing program 4 (id=808): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000038460fdfa2393d52b905ae00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000580)='kmem_cache_free\x00', r2, 0x0, 0x7fff}, 0x18) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="00a85f000000000000007b8af8ff00000000bfa200000000000007020000f8ffffdfb70300000000850000000100000095000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0x3}, 0x18) (async) mkdir(&(0x7f0000000580)='./file0\x00', 0x92) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) (async) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0xfffffffffffffff7) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) memfd_secret(0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async) setreuid(0xee01, 0x0) shmat(0x0, &(0x7f0000ff1000/0x3000)=nil, 0x400c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x300, 0x300, 0x8, 0x300}}) socket$kcm(0x21, 0x5, 0xa) perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x80, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x550, 0xfffffffffffffc75}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r6 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r6, 0x400, 0x2) 373.360126ms ago: executing program 4 (id=809): syz_clone(0x908091, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT') syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061114c00000000008500000088000002"], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002", @ANYRES32=0x0], 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="a8020000", @ANYRES16=r3, @ANYBLOB="010028bd7000fbdbdf2505"], 0x2a8}, 0x1, 0x0, 0x0, 0x48c05}, 0x2404c140) 362.453497ms ago: executing program 6 (id=810): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) r3 = socket$kcm(0x10, 0x2, 0x0) timer_create(0x2, 0x0, &(0x7f0000bbdffc)=0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xc, 0x6, 0x7ffc1ff8}]}) timer_gettime(r4, &(0x7f0000000040)) sendmsg$kcm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a115000100ff11142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r6}, 0x18) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300009c0e0000850000002d000000850000000e00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r8}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000100000004"], 0x48) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000040)=0x15, 0x4) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r9, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001500)=ANY=[@ANYBLOB='\v\x00'], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 336.264429ms ago: executing program 4 (id=811): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r3, 0x6, 0x25, 0x0, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000000085000000720000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r4, 0x0, 0x80}, 0x18) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYRESHEX=r1], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f00000002c0)={'ip6_vti0\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x32, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) readv(r7, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/113, 0x71}], 0x1) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x26}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0x6, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async) r9 = memfd_secret(0x80000) fcntl$setlease(r9, 0x400, 0x0) mkdirat(r9, &(0x7f00000000c0)='./file0\x00', 0x2) (async) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x2, 0x0, 0x0) 243.945608ms ago: executing program 4 (id=812): r0 = syz_open_pts(0xffffffffffffffff, 0x101001) ioctl$KDMKTONE(r0, 0x4b30, 0x7) (async) clock_adjtime(0x7, &(0x7f0000000000)={0x7, 0x4, 0x0, 0x2, 0x8000, 0x10, 0x10, 0x9, 0x8, 0xfffffffffffffff9, 0x3, 0x4, 0x8, 0x7fff, 0x2000000000000000, 0xffffffffffffff80, 0xe3, 0x80000001, 0x3, 0xfffffffffffffffd, 0x7, 0x1, 0x2, 0x3, 0x7, 0x9}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/sync_on_suspend', 0x10000, 0x1) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) (async) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timerfd_settime(r1, 0x6, &(0x7f00000001c0)={{r2, r3+60000000}, {r4, r5+60000000}}, &(0x7f0000000200)) io_uring_register$IORING_UNREGISTER_EVENTFD(r1, 0x5, 0x0, 0x0) (async) r6 = open(&(0x7f0000000240)='./file0\x00', 0x202000, 0x358) (async) r7 = open(&(0x7f0000000280)='./file0\x00', 0x4200, 0x40) ioctl$AUTOFS_IOC_PROTOVER(r7, 0x80049363, &(0x7f00000002c0)) clock_adjtime(0x4, &(0x7f0000000300)={0x3, 0x7, 0x4fc, 0x7, 0x3, 0x6, 0x0, 0xffffffff, 0x8, 0x6, 0x0, 0x8, 0x5, 0xb34, 0x6, 0x0, 0x100, 0x9671, 0x100000001, 0x5, 0x4, 0x0, 0x3, 0xfad0, 0x2, 0x10001}) (async) ioctl$KDSIGACCEPT(r6, 0x4b4e, 0x39) clock_adjtime(0x3, &(0x7f0000000400)={0x7, 0xa, 0x0, 0x5, 0x3, 0x7, 0x3, 0x91, 0x100000000, 0xfffffffffffffffe, 0x5, 0x0, 0x3, 0x9, 0x5, 0x1, 0x56, 0x4, 0x7, 0x7, 0x400, 0x2, 0x0, 0x2, 0x80000001, 0x4}) r8 = openat$cgroup_ro(r1, &(0x7f0000000500)='cpuacct.usage_percpu\x00', 0x0, 0x0) (async) ioctl$AUTOFS_IOC_PROTOSUBVER(r7, 0x80049367, &(0x7f0000000540)) (async) sendfile(r6, r7, &(0x7f0000000580)=0x7, 0x3) memfd_create(&(0x7f00000005c0)=',]&$*\x00', 0x5) (async) r9 = fcntl$dupfd(r1, 0x406, r8) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r6, 0x0, 0x8, 0x0, &(0x7f0000000600)="4385c03da96c1cc6", &(0x7f0000000640), 0x7, 0x0, 0x2e, 0xb, &(0x7f0000000680)="6c21037262f04b0eaeadcbe4313540c72ec0893fa3f6597d88793af2dc449aebe9a7a75c276018097c8ea3758f13", &(0x7f00000006c0)="c25819e81cec3008b49c70", 0x3, 0x0, 0x2}, 0x50) creat(&(0x7f0000000780)='./file0\x00', 0x95) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000800)={0x6, &(0x7f00000007c0)=[{0x2, 0x8, 0x6, 0xc31}, {0xbce, 0x4, 0xc, 0x2}, {0xfe00, 0x0, 0x7, 0x5}, {0x6, 0xfd, 0x6b, 0x1}, {0x3000, 0x8, 0x7, 0x1}, {0x40, 0x6, 0xfc, 0x2d7e}]}) (async) syz_emit_ethernet(0x29, &(0x7f0000000840)={@local, @local, @void, {@mpls_uc={0x8847, {[{0x7, 0x0, 0x1}, {0x1, 0x0, 0x1}], @generic="bb77829a534848c4fc5839ad9e2f6766e4672e"}}}}, 0x0) (async) r10 = semget$private(0x0, 0x2, 0x30) semtimedop(r10, &(0x7f0000000880)=[{0x1, 0x2}, {0x4, 0x7, 0x1000}, {0x4, 0x2}, {0x1, 0x4e51, 0x800}, {0x3, 0xb, 0x800}, {0x1, 0x4}], 0x6, &(0x7f00000008c0)) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000009c0)={'ip6gre0\x00', &(0x7f0000000940)={'syztnl1\x00', 0x0, 0x29, 0x8, 0xe1, 0x18, 0xa, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0x40, 0x20, 0x1, 0xa}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f0000000a80)={'ip6gre0\x00', &(0x7f0000000a00)={'ip6_vti0\x00', 0x0, 0x2f, 0xd8, 0x5, 0x4, 0x1, @private1, @loopback, 0x20, 0x7, 0x4}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000b40)={'ip6gre0\x00', &(0x7f0000000ac0)={'syztnl2\x00', 0x0, 0x4, 0x1, 0x8, 0xb, 0x22, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x40, 0x80, 0x8, 0xc}}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000e00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000b80)={0x230, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [{{0x8, 0x1, r11}, {0x214, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x52c5f651}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x97}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x230}, 0x1, 0x0, 0x0, 0x4040000}, 0x40081) 183.280723ms ago: executing program 0 (id=813): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000020000000080000000b"], 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r2, &(0x7f0000000000), 0x0}, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80000, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) rt_sigprocmask(0x0, &(0x7f0000000500)={[0xfffffffffffffff9]}, 0x0, 0x8) r3 = gettid() r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000001700000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) sendmmsg$inet(r6, &(0x7f0000003100)=[{{&(0x7f0000000080)={0x2, 0x4e1e, @multicast1}, 0x10, 0x0}}], 0x1, 0xc044) r7 = gettid() tkill(r3, 0x12) tkill(r3, 0x3a) tkill(r7, 0x14) 170.322324ms ago: executing program 6 (id=814): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x1000, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000000c0)="41c9bfe76be0c1c20f9e6900fb7236841b80e8510c3042b31368a010c442cc22", 0x20}, {&(0x7f0000000100)="b82ad075de52f323589e92f31d5eb14828bd4ae434f1bed1cbf810f8dee61e7a413b0ca779bf940e29b5d8fcbeac9e050faab4e4b36b154e7fefa9", 0x3b}, {&(0x7f0000000140)="e55aa5619a45f45cfcf94ba92208147a7e31502c42f43bef1d9ff714bc26029daf705513b08b31ea3fced1062a4e69bf3b8cd37ad2ec632a61ea750ce7014a38b0a730b73340d8da181062af4b7eec5b44e5613d063addca417fb5a67bce2850e14613", 0x63}], 0x3}, 0x80) (async) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000240)=0x4090821) (async) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8001, 0x74}}}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x66}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008800}, 0x40000) (async) r1 = accept4$bt_l2cap(r0, &(0x7f0000000380)={0x1f, 0x0, @fixed}, &(0x7f00000003c0)=0xe, 0x100800) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000400), &(0x7f0000000440)=0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000480)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000680)={{r2, 0x8000000000000000, 0xb9, 0x4, 0xf3, 0x7, 0x9c, 0x3, 0xffffffff, 0x8001, 0x800, 0x5, 0x3, 0x1ff000000000, 0x100}}) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000001680)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee01}}, './file0\x00'}) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f0000001780)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x38, 0x1412, 0x1, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000010) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x8008000}, 0xc, &(0x7f0000001880)={&(0x7f0000001800)={0x48, 0x140f, 0x300, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'smc_ib\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'uverbs\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'cm\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x20000022) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001940), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001980)={'wpan0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000019c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r5, &(0x7f0000001b80)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001a00)={0x124, r6, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x34, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_OUT_KEY_ID={0xa4, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x24040004) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0x10, r3, 0x22bdc000) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000001bc0)=0x1, &(0x7f0000001c00)=0x4) (async) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001c80), r3) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000001f00)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001cc0)={0x1f4, r9, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x148, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x8000, @local, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffffb}}, {0x14, 0x2, @in={0x2, 0x4e21, @loopback}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xdd, @mcast2, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, '\x00', 0x41}, 0x7}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'team0\x00'}}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'bridge_slave_0\x00'}}]}, @TIPC_NLA_MEDIA={0x98, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x51}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3576}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x1f4}}, 0x80) (async) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000001f40)={'wpan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001f80)) (async) ioprio_set$uid(0x3, r4, 0x2004) (async) r11 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002000), r5) (async) r13 = fcntl$getown(r11, 0x9) (async) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000002040)=0x0) (async) r15 = getpgid(0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000002140)={&(0x7f0000001fc0), 0xc, &(0x7f0000002100)={&(0x7f0000002080)={0x44, r12, 0x224, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r13}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_PID={0x8, 0x1c, r14}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_PID={0x8, 0x1c, r15}]}, 0x44}, 0x1, 0x0, 0x0, 0x5}, 0x4041) (async) sendmsg(0xffffffffffffffff, &(0x7f0000003380)={0x0, 0x0, &(0x7f0000002240)=[{&(0x7f0000002180)="57b8796eeb301e791dfd1befc188c5876e7f95bd6ed0e8e9a6da21f9374917e7bbe8e2fff35c297f8289858b3680af5c7e44420692d2fd920af4a88ffc3d4ff46e51baf2473dd58fe612ddb7d50db2540f910f47e2b33ca8552174eac0c2eccd74a837e3ab2b9d5d016bc4477ab3c973e83abdd9d69f0a6537e5bd4e14b0d625d4978fbea45fb006fe7f80337d723ddbced8cc13", 0x94}], 0x1, &(0x7f0000002280)=[{0xd0, 0x112, 0xffffffff, "178f4e56ef0d430f1cae8e21db69d69e47b3a85bac6004a330d575abdb3553be50464417ed83d122d52e7e94df774d91a37804908745a8a318a9a2b6ddf2abfbb001de923b1b8f32bccfb52e55210f1394dba5d5a57ae8fcbd0d02410c96a1cb1ead91bc20e2e7a416cbcf681699f6fd84055a25d8f1109e0198ae9b054c8e37b421fae8bb24d00300af869985406ca1aa96d816cbfffea5a7539027965c4c4dea3f620b4fb0b86e57808d7fed37e83bee1ddc94eae346b0cd2ab6cc654b7733"}, {0x1010, 0x3a, 0x8, "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"}], 0x10e0}, 0x90) 143.770577ms ago: executing program 0 (id=815): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) (async, rerun: 32) arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004) (rerun: 32) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0xf96c, 0x3010, 0x4, 0x18a}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0xe8}, 0x0, 0x24040092, 0x1}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000007000000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x7a) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r5}, 0x10) (async) io_uring_enter(r2, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='xen_mmu_set_p4d\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) (rerun: 64) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) (async) close(r6) (async) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) 87.049412ms ago: executing program 6 (id=816): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x9, 0x800, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x42, 0x110) pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) (async) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="48000000090601020000000000000000000000000900020073797a31000000000500010007000000200007800c00018008000140640101020e001a003a2a24275d5d282a2c000000cb54281f1dd72009e04de362fa62a1bb4005f27ba6edae5fe08f0e92273564eb2a4bda5d6c0ea00a46931373433231c2cd0c38183ad2c344c19c74211f7a9f7446172bc4937a424a66198aab4fda08ffc286852485ed63fb51162953910970d388e3d447249611cd27ea67c8d0186785db7ac8f4448d80a7be57a09d525754bf5680d8f965"], 0x48}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) (async) syz_io_uring_setup(0x117, &(0x7f0000000340)={0x0, 0x4db1, 0x10}, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_clone3(&(0x7f0000000300)={0x4000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) getsockopt$inet6_opts(r4, 0x29, 0x3b, &(0x7f00000008c0)=""/4096, &(0x7f0000000100)=0x1000) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r0, @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x8c000}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xe0b, 0xfefffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x2, 0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}}, 0x0) sendto$packet(r1, &(0x7f0000000080)="39c394e534ecf02e7e0e9ca208004b54", 0x10, 0x0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) sendmsg$nl_route_sched(r0, 0x0, 0x24044004) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0000}, 0x4054) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4801}, 0x800) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x8005) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', r7, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000580)='sched_switch\x00', r8}, 0x3d) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000018c0)=ANY=[@ANYRESOCT=r7, @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000003c0)='thermal_power_allocator_pid\x00', r9, 0x0, 0x8}, 0x18) 86.460602ms ago: executing program 5 (id=817): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="180000003800ffcf000000000000000003"], 0x18}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) rseq(0x0, 0x0, 0x4, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000800008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) chdir(0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x17, 0x10, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0xfda0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000640)={0x20, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xe10, 0x61}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f00000002c0)='kfree\x00', r3, 0x0, 0x40}, 0x18) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d6163736563000014000280050006000000000005000f000000000008000500", @ANYRES32=r5], 0x4c}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/cgroup.procs\x00', 0x2, 0x128) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x6}}]}, 0x1, 0x50f, &(0x7f0000000680)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r7, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) io_setup(0x6, &(0x7f00000001c0)=0x0) io_destroy(r8) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x18) r10 = perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x550, 0xfffffffffffffc75}, 0x0, 0x0, 0x8000003, 0x4, 0x0, 0x40d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x40082406, &(0x7f0000000180)='cpu<=0||!') io_submit(r8, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x95255000) 86.186522ms ago: executing program 6 (id=818): unshare(0x22020400) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f00000014c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) nanosleep(&(0x7f0000000040), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) mq_timedreceive(r0, &(0x7f0000000180)=""/170, 0xaa, 0x693, &(0x7f0000000240)={0x77359400}) ptrace$ARCH_MAP_VDSO_X32(0x1e, r3, 0x91, 0x2001) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000100), 0x1, 0x4c4, &(0x7f0000000f40)="$eJzs3ctrW1caAPBPku3YjmfymGFIMjAJZCDzIJYfDLFnZjOrmVkEhgl000Lq2oqbWraMJaexCdRpd1l0UVpaKF1037+gm2bVUChdt/vSRUlpUxfaQkHlXkmJrViuKI7V+P5+cJNzH9J3jsV3OPfoXt0AMutM8k8uYiQiPoqII43V7Qecafy3ee/GbLLkol6/9GUuPS5Zbx3aet3hiNiIiMGI+P+/I57JPRy3ura+MFMul1aa68Xa4nKxurZ+/urizHxpvrQ0PnVhenpqbHJies/aeuvl525dfPe/A+98+9LdO6+8/15SrZHmvq3t2EuNpvfHsS3b+iLin48iWA8Umu0Z6nVF+FmSz+83EXE2zf8jUUg/TSAL6vV6/Yf6oU67N+rAgZVPx8C5/GhENMr5/OhoYwz/2xjOlyvV2l+vVFaX5hpj5aPRn79ytVwaa54rHI3+XLI+npYfrE+0rU9GpGPgVwtD6frobKU8t79dHdDmcFv+f1No5D+QEU75IbvkP2SX/Ifskv+QXfIfskv+Q3bJf8gu+Q/ZJf8hu+Q/ZJf8h0z638WLyVJv3f8+d21tdaFy7fxcqbowurg6OzpbWVkena9U5tN7dhZ/6v3Klcry+N9i9XqxVqrWitW19cuLldWl2uX0vv7Lpf59aRXQjWOnb3+Si4iNvw+lS2KguU+uwsFWr+ei1/cgA71R6HUHBPSMqT/ILuf4QPtP9LaPCwY7vXD5wXwh8HjJ97oCQM+cO+n7P8gq8/+QXeb/IbuM8YEdHtG3zW7z/8Djyfw/ZNtOz//61ZZnd41FxK8j4uNC/6HWs76AgyD/ea45/j935I8j7XsHct+lXxEMRMTzb156/fpMrbYynmz/6v722hvN7RNbXtjxhAHolVaetvIYAMiuzXs3ZlvLfsb94l+NixAejt/XnJscTL+jHN7MbbtWIbdH1y5s3IyIEzvFzzWfd944kRneLDyI90Ij/vFmPXKNt0jr25c+N/0Rx2/GPLkl/h+2xD+1B38XyILbSf8ztlP+5dOcjvv5t73/Gdmjayc693/5+/1foUP/d7rLGM++9eJnHePfjDi1Y/xWvME0Vnv8pG7nuox/96knftdpX/3txvvsFL8lKRVri8vF6tr6+fR35OZLS+NTF6anp8YmJ6aL6Rx1sTVT/bB/nPjwzm7tH+4Qf7f2J9v+3GX7v//9B0+e2SX+n87u/Pkf3yX+UET8pcv4X098+nSnfUn8uQ7tz+8SP9k22WX86mv/OdTloQDAPqiurS/M9EVpJS2UywoKCvtbuPnLqEZbodc9E/CoVdeSU/Mk6XtdEwAAAAAAAAAAAKBb+3E5ca/bCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwEPwYAAD//yvJ1G8=") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xe) kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) 0s ago: executing program 0 (id=819): socket$nl_route(0x10, 0x3, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500010006"], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) dup(0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@version_9p2000}]}}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r7, &(0x7f0000000200)='./file0\x00', 0x8900, &(0x7f0000000080)={0x0, 0x7d, 0x100000, {r7}}, 0x20) getuid() sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4) getresgid(0x0, 0x0, &(0x7f0000003ac0)) r8 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$FIDEDUPERANGE(r8, 0xc0189436, &(0x7f0000000300)={0x1ff, 0x9}) syz_clone(0x4084000, 0x0, 0x0, 0x0, &(0x7f0000003bc0), &(0x7f0000003c00)=' :') r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 0xc1/0x110 [ 43.517775][ T4200] ? inode_to_bdi+0x47/0xa0 [ 43.517844][ T4200] ? balance_dirty_pages_ratelimited_flags+0x40b/0x5e0 [ 43.517871][ T4200] ? __pfx_default_wake_function+0x10/0x10 [ 43.517950][ T4200] handle_mm_fault+0x9d8/0x2c60 [ 43.517987][ T4200] do_user_addr_fault+0x630/0x1080 [ 43.518013][ T4200] exc_page_fault+0x62/0xa0 [ 43.518039][ T4200] asm_exc_page_fault+0x26/0x30 [ 43.518088][ T4200] RIP: 0033:0x7f6555ddf06b [ 43.518104][ T4200] Code: 83 e6 03 0f 85 0e 02 00 00 48 89 df be 04 00 00 00 e8 49 9e fe ff 48 8b 43 38 83 43 28 04 48 8d 50 fc 48 89 53 38 44 89 68 fc <8b> 43 28 48 83 c4 38 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 00 c6 [ 43.518120][ T4200] RSP: 002b:00007ffcc8c4c470 EFLAGS: 00010206 [ 43.518136][ T4200] RAX: 0000001b33f23f8c RBX: 00007f6556c85720 RCX: 0000000000000003 [ 43.518149][ T4200] RDX: 0000001b33f23f88 RSI: 0000000000000004 RDI: 00007f6556c85720 [ 43.518167][ T4200] RBP: ffffffffffffff8c R08: 00007f6556156128 R09: 00007f6556142000 [ 43.518177][ T4200] R10: 00007f655556d008 R11: 0000000000000006 R12: 0000000000000074 [ 43.518187][ T4200] R13: 0000000000000000 R14: 0000000000000000 R15: 000000000000ddf9 [ 43.518235][ T4200] [ 43.518241][ T4200] memory: usage 307200kB, limit 307200kB, failcnt 535 [ 43.717749][ T4215] loop2: detected capacity change from 0 to 128 [ 43.721392][ T4200] memory+swap: usage 89472kB, limit 9007199254740988kB, failcnt 0 [ 43.769727][ T4200] kmem: usage 47120kB, limit 9007199254740988kB, failcnt 0 [ 43.776985][ T4200] Memory cgroup stats for /syz1: [ 43.778434][ T4200] cache 0 [ 43.786347][ T4200] rss 8192 [ 43.789484][ T4200] shmem 0 [ 43.792411][ T4200] mapped_file 0 [ 43.795877][ T4200] dirty 0 [ 43.798804][ T4200] writeback 4096 [ 43.802478][ T4200] workingset_refault_anon 22 [ 43.807138][ T4200] workingset_refault_file 109 [ 43.811923][ T4200] swap 155648 [ 43.815247][ T4200] swapcached 32768 [ 43.818956][ T4200] pgpgin 9137 [ 43.822902][ T4200] pgpgout 9127 [ 43.826635][ T4200] pgfault 11043 [ 43.830445][ T4200] pgmajfault 11 [ 43.833900][ T4200] inactive_anon 4096 [ 43.837784][ T4200] active_anon 36864 [ 43.841608][ T4200] inactive_file 0 [ 43.845231][ T4200] active_file 0 [ 43.848756][ T4200] unevictable 0 [ 43.852222][ T4200] hierarchical_memory_limit 314572800 [ 43.857582][ T4200] hierarchical_memsw_limit 9223372036854771712 [ 43.863969][ T4200] total_cache 0 [ 43.867461][ T4200] total_rss 8192 [ 43.871058][ T4200] total_shmem 0 [ 43.874510][ T4200] total_mapped_file 0 [ 43.878621][ T4200] total_dirty 0 [ 43.882231][ T4200] total_writeback 4096 [ 43.886306][ T4200] total_workingset_refault_anon 22 [ 43.891505][ T4200] total_workingset_refault_file 109 [ 43.896886][ T4200] total_swap 155648 [ 43.900787][ T4200] total_swapcached 32768 [ 43.905018][ T4200] total_pgpgin 9137 [ 43.908847][ T4200] total_pgpgout 9127 [ 43.912934][ T4200] total_pgfault 11043 [ 43.917073][ T4200] total_pgmajfault 11 [ 43.921101][ T4200] total_inactive_anon 4096 [ 43.925534][ T4200] total_active_anon 36864 [ 43.927141][ T4048] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 43.929871][ T4200] total_inactive_file 0 [ 43.929880][ T4200] total_active_file 0 [ 43.929887][ T4200] total_unevictable 0 [ 43.929894][ T4200] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.165,pid=4200,uid=0 [ 43.929956][ T4200] Memory cgroup out of memory: Killed process 4200 (syz.1.165) total-vm:93968kB, anon-rss:1136kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 43.984162][ T4200] syz.1.165 (4200) used greatest stack depth: 10088 bytes left [ 44.000025][ T4048] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 44.029382][ T4221] netlink: 660 bytes leftover after parsing attributes in process `+}[@'. [ 44.038463][ T4048] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 44.065248][ T4227] loop1: detected capacity change from 0 to 1024 [ 44.084886][ T4227] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 44.095896][ T4227] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 44.110893][ T4227] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 44.118013][ T4048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.140959][ T4227] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #3: comm syz.1.169: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 44.178535][ T4227] EXT4-fs (loop1): no journal found [ 44.180673][ T4048] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.183833][ T4227] EXT4-fs (loop1): can't get journal size [ 44.201228][ T4236] netlink: 64 bytes leftover after parsing attributes in process `syz.0.170'. [ 44.216644][ T4158] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.223751][ T4158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.238976][ T4227] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 44.251689][ T4238] netlink: 64 bytes leftover after parsing attributes in process `syz.0.170'. [ 44.252360][ T4048] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 44.271046][ T4048] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 44.287304][ T4227] EXT4-fs (loop1): ext4_remount: Checksum for group 0 failed (38281!=20869) [ 44.302992][ T3488] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 44.304248][ T4158] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.318180][ T4158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.351949][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.375897][ T4048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.417210][ T4264] netlink: 4 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 44.434301][ T4261] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4261 comm=syz.0.174 [ 44.479721][ T4276] netlink: 'syz.1.177': attribute type 30 has an invalid length. [ 44.490561][ T4279] loop2: detected capacity change from 0 to 256 [ 44.507693][ T4279] vfat: Unknown parameter '' [ 44.545240][ T4279] netlink: 12 bytes leftover after parsing attributes in process `syz.2.176'. [ 44.554624][ T4279] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 44.562606][ T4279] program syz.2.176 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 44.575286][ T4048] veth0_vlan: entered promiscuous mode [ 44.584344][ T4048] veth1_vlan: entered promiscuous mode [ 44.611531][ T4048] veth0_macvtap: entered promiscuous mode [ 44.633530][ T4048] veth1_macvtap: entered promiscuous mode [ 44.664081][ T4048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.689112][ T4048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.709751][ T52] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.729421][ T52] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.752112][ T52] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.777083][ T4306] program is using a deprecated SCSI ioctl, please convert it to SG_IO [ 44.794972][ T52] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.805320][ T3397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 44.817008][ T4310] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.183: error while reading EA inode 32 err=-116 [ 44.830615][ T4306] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 44.861039][ T4310] EXT4-fs (loop0): Remounting filesystem read-only [ 44.885132][ T4310] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 44.898264][ T4310] EXT4-fs warning (device loop0): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 44.920670][ T4325] x_tables: duplicate underflow at hook 2 [ 44.970100][ T4310] EXT4-fs (loop0): 1 orphan inode deleted [ 44.991893][ T4336] syz.2.188 uses obsolete (PF_INET,SOCK_PACKET) [ 45.016532][ T4310] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.054019][ T29] kauditd_printk_skb: 953 callbacks suppressed [ 45.054071][ T29] audit: type=1326 audit(1767880577.480:2029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4353 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa95b9ff749 code=0x7ffc0000 [ 45.132019][ T29] audit: type=1326 audit(1767880577.510:2030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4353 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa95b9ff749 code=0x7ffc0000 [ 45.154966][ T29] audit: type=1326 audit(1767880577.510:2031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4353 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa95b9ff749 code=0x7ffc0000 [ 45.177968][ T29] audit: type=1326 audit(1767880577.510:2032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4353 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fa95b9ff749 code=0x7ffc0000 [ 45.200854][ T29] audit: type=1326 audit(1767880577.510:2033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4353 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa95b9ff749 code=0x7ffc0000 [ 45.223836][ T29] audit: type=1326 audit(1767880577.520:2034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4301 comm="syz.0.183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd897bcdf90 code=0x7ffc0000 [ 45.247187][ T29] audit: type=1326 audit(1767880577.520:2035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4301 comm="syz.0.183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fd897bce497 code=0x7ffc0000 [ 45.270467][ T29] audit: type=1326 audit(1767880577.520:2036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4301 comm="syz.0.183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd897bcdf90 code=0x7ffc0000 [ 45.284907][ T4369] ext4: Unknown parameter 'uid>00000000000000000000' [ 45.293799][ T29] audit: type=1326 audit(1767880577.520:2037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4301 comm="syz.0.183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd897bcf749 code=0x7ffc0000 [ 45.323747][ T29] audit: type=1326 audit(1767880577.520:2038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4301 comm="syz.0.183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd897bcf749 code=0x7ffc0000 [ 45.359232][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.371192][ T4368] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.388256][ T4368] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.402151][ T4376] FAT-fs (loop5): Directory bread(block 32) failed [ 45.408768][ T4376] FAT-fs (loop5): Directory bread(block 33) failed [ 45.415557][ T4368] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.195: iget: bad i_size value: 2533274857506816 [ 45.429387][ T4368] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.195: iget: bad i_size value: 2533274857506816 [ 45.446214][ T4380] capability: warning: `syz.2.199' uses deprecated v2 capabilities in a way that may be insecure [ 45.460218][ T4376] FAT-fs (loop5): Directory bread(block 34) failed [ 45.473412][ T4376] FAT-fs (loop5): Directory bread(block 35) failed [ 45.480266][ T4376] FAT-fs (loop5): Directory bread(block 36) failed [ 45.487042][ T4376] FAT-fs (loop5): Directory bread(block 37) failed [ 45.493701][ T4376] FAT-fs (loop5): Directory bread(block 38) failed [ 45.500600][ T4376] FAT-fs (loop5): Directory bread(block 39) failed [ 45.507274][ T4376] FAT-fs (loop5): Directory bread(block 40) failed [ 45.515475][ T4376] FAT-fs (loop5): Directory bread(block 41) failed [ 45.536149][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.548976][ T4376] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 45.556633][ T4376] FAT-fs (loop5): Filesystem has been set read-only [ 45.598172][ T4379] ip6erspan0: entered promiscuous mode [ 45.626509][ T4394] EXT4-fs: Ignoring removed i_version option [ 45.632716][ T4394] EXT4-fs: Ignoring removed bh option [ 45.634658][ T4395] EXT4-fs: Ignoring removed orlov option [ 45.669909][ T4395] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.684929][ T4394] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.699064][ T4394] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 45.713989][ T4395] xt_CT: You must specify a L4 protocol and not use inversions on it [ 45.769909][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.795535][ T4048] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.819718][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 45.913473][ T4435] __nla_validate_parse: 8 callbacks suppressed [ 45.913522][ T4435] netlink: 4 bytes leftover after parsing attributes in process `syz.4.213'. [ 45.931066][ T4439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 45.934117][ T4432] set_capacity_and_notify: 6 callbacks suppressed [ 45.934130][ T4432] loop5: detected capacity change from 0 to 2048 [ 45.947649][ T4438] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4438 comm=syz.0.212 [ 45.978737][ T4441] loop2: detected capacity change from 0 to 512 [ 45.991288][ T4441] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 46.020073][ T4441] EXT4-fs (loop2): 1 truncate cleaned up [ 46.026227][ T4432] EXT4-fs (loop5): failed to initialize system zone (-117) [ 46.033952][ T4441] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.049410][ T4432] EXT4-fs (loop5): mount failed [ 46.058383][ T4441] netlink: 'syz.2.208': attribute type 1 has an invalid length. [ 46.079707][ T4447] loop0: detected capacity change from 0 to 2048 [ 46.081826][ T4441] bond1: (slave ip6gretap1): making interface the new active one [ 46.098896][ T4433] loop5: detected capacity change from 0 to 512 [ 46.106451][ T4433] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 46.127609][ T4447] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.150602][ T36] IPVS: starting estimator thread 0... [ 46.157505][ T4441] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 46.195432][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.232169][ T4461] netlink: 'syz.5.220': attribute type 4 has an invalid length. [ 46.249498][ T4457] IPVS: using max 2544 ests per chain, 127200 per kthread [ 46.598239][ T4495] loop5: detected capacity change from 0 to 128 [ 46.612577][ T4496] netlink: 40 bytes leftover after parsing attributes in process `syz.0.227'. [ 46.622254][ T4495] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 46.649723][ T4496] netlink: 4 bytes leftover after parsing attributes in process `syz.0.227'. [ 46.664690][ T4495] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 46.690239][ T4496] netlink: 664 bytes leftover after parsing attributes in process `syz.0.227'. [ 46.710473][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.871538][ T3483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 46.932281][ T4498] syz.1.228 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 46.948940][ T4493] netlink: 68 bytes leftover after parsing attributes in process `syz.1.228'. [ 46.968881][ T4511] loop2: detected capacity change from 0 to 512 [ 46.976860][ T4511] EXT4-fs: Mount option(s) incompatible with ext2 [ 47.208607][ T4539] netlink: 'syz.5.241': attribute type 2 has an invalid length. [ 47.281223][ T4544] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4544 comm=syz.4.242 [ 47.339447][ T3379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 47.374994][ T4547] netlink: 32 bytes leftover after parsing attributes in process `syz.0.243'. [ 47.403682][ T4547] loop0: detected capacity change from 0 to 512 [ 47.442980][ T4547] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.488845][ T4547] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.502246][ T4547] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 47.517309][ T4547] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 28 [ 47.529580][ T4547] EXT4-fs (loop0): This should not happen!! Data will be lost [ 47.529580][ T4547] [ 47.539494][ T4547] EXT4-fs (loop0): Total free blocks count 0 [ 47.545523][ T4547] EXT4-fs (loop0): Free/Dirty block details [ 47.551559][ T4547] EXT4-fs (loop0): free_blocks=65280 [ 47.557014][ T4547] EXT4-fs (loop0): dirty_blocks=1 [ 47.562199][ T4547] EXT4-fs (loop0): Block reservation details [ 47.568182][ T4547] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 47.675156][ T4560] netlink: 'syz.1.246': attribute type 13 has an invalid length. [ 47.703252][ T4560] 9p: Bad value for 'rfdno' [ 47.910576][ T3483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 48.069514][ T4563] netlink: 2 bytes leftover after parsing attributes in process `syz.5.247'. [ 48.096757][ T4563] lo: entered promiscuous mode [ 48.101593][ T4563] lo: entered allmulticast mode [ 48.120856][ T4563] tunl0: entered promiscuous mode [ 48.125912][ T4563] tunl0: entered allmulticast mode [ 48.142488][ T4563] gre0: entered promiscuous mode [ 48.147482][ T4563] gre0: entered allmulticast mode [ 48.157277][ T4568] loop4: detected capacity change from 0 to 1024 [ 48.169990][ T4568] EXT4-fs: Ignoring removed mblk_io_submit option [ 48.190511][ T4563] gretap0: entered promiscuous mode [ 48.195757][ T4563] gretap0: entered allmulticast mode [ 48.210911][ T4568] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.211085][ T4563] erspan0: entered promiscuous mode [ 48.228319][ T4563] erspan0: entered allmulticast mode [ 48.244266][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.245400][ T4563] ip_vti0: entered promiscuous mode [ 48.258556][ T4563] ip_vti0: entered allmulticast mode [ 48.272782][ T4563] ip6_vti0: entered promiscuous mode [ 48.278176][ T4563] ip6_vti0: entered allmulticast mode [ 48.289926][ T4563] sit0: entered promiscuous mode [ 48.294897][ T4563] sit0: entered allmulticast mode [ 48.301263][ T4563] ip6tnl0: entered promiscuous mode [ 48.306478][ T4563] ip6tnl0: entered allmulticast mode [ 48.321252][ T4563] ip6gre0: entered promiscuous mode [ 48.326514][ T4563] ip6gre0: entered allmulticast mode [ 48.346392][ T4573] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 48.354739][ T4573] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 48.363050][ T4573] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 48.388636][ T4563] syz_tun: entered promiscuous mode [ 48.393929][ T4563] syz_tun: entered allmulticast mode [ 48.417443][ T4563] ip6gretap0: entered promiscuous mode [ 48.422985][ T4563] ip6gretap0: entered allmulticast mode [ 48.423478][ T4578] loop0: detected capacity change from 0 to 1024 [ 48.436268][ T4578] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 48.456513][ T4563] bridge0: entered promiscuous mode [ 48.461942][ T4563] bridge0: entered allmulticast mode [ 48.482930][ T4563] vcan0: entered promiscuous mode [ 48.488002][ T4563] vcan0: entered allmulticast mode [ 48.495941][ T4563] bond0: entered promiscuous mode [ 48.501110][ T4563] bond_slave_0: entered promiscuous mode [ 48.506853][ T4563] bond_slave_1: entered promiscuous mode [ 48.512767][ T4563] bond0: entered allmulticast mode [ 48.517929][ T4563] bond_slave_0: entered allmulticast mode [ 48.523698][ T4563] bond_slave_1: entered allmulticast mode [ 48.543045][ T4563] team0: entered promiscuous mode [ 48.548115][ T4563] team_slave_0: entered promiscuous mode [ 48.554181][ T4563] team_slave_1: entered promiscuous mode [ 48.559985][ T4563] team0: entered allmulticast mode [ 48.565148][ T4563] team_slave_0: entered allmulticast mode [ 48.570928][ T4563] team_slave_1: entered allmulticast mode [ 48.584954][ T4563] dummy0: entered promiscuous mode [ 48.590215][ T4563] dummy0: entered allmulticast mode [ 48.601094][ T4563] nlmon0: entered promiscuous mode [ 48.606313][ T4563] nlmon0: entered allmulticast mode [ 48.619243][ T4563] caif0: entered promiscuous mode [ 48.624490][ T4563] caif0: entered allmulticast mode [ 48.629653][ T4563] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 48.665524][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.712720][ T4572] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 48.721013][ T4572] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 48.736973][ T4586] netlink: 16 bytes leftover after parsing attributes in process `syz.4.252'. [ 48.755302][ T4589] loop5: detected capacity change from 0 to 512 [ 48.926580][ T4589] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.940025][ T3424] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 48.942513][ T4589] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.124126][ T4048] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.232813][ T4604] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.561842][ T4610] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 49.841129][ T4614] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4614 comm=syz.4.258 [ 49.922775][ T4614] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=263 sclass=netlink_route_socket pid=4614 comm=syz.4.258 [ 50.259578][ T4625] netlink: 660 bytes leftover after parsing attributes in process `+}[@'. [ 50.278978][ T4630] vfat: Unknown parameter '' [ 50.525547][ T4628] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.550752][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 50.560588][ T3379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 50.573122][ T4628] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.687576][ T4637] pimreg: entered allmulticast mode [ 50.694201][ T4628] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.729516][ T4636] pimreg: left allmulticast mode [ 50.832453][ T4639] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 50.917470][ T29] kauditd_printk_skb: 291 callbacks suppressed [ 50.917485][ T29] audit: type=1400 audit(1767880583.340:2330): avc: denied { write } for pid=4640 comm="syz.1.266" name="ptp0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 51.053863][ T4646] netlink: 4 bytes leftover after parsing attributes in process `syz.4.268'. [ 51.078381][ T29] audit: type=1400 audit(1767880583.380:2331): avc: denied { read } for pid=4640 comm="syz.1.266" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 51.101142][ T29] audit: type=1400 audit(1767880583.380:2332): avc: denied { open } for pid=4640 comm="syz.1.266" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 51.124756][ T29] audit: type=1400 audit(1767880583.380:2333): avc: denied { ioctl } for pid=4640 comm="syz.1.266" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 51.149953][ T29] audit: type=1400 audit(1767880583.380:2334): avc: denied { read } for pid=4640 comm="syz.1.266" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 51.173183][ T29] audit: type=1400 audit(1767880583.380:2335): avc: denied { open } for pid=4640 comm="syz.1.266" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 51.197003][ T29] audit: type=1400 audit(1767880583.390:2336): avc: denied { map } for pid=4640 comm="syz.1.266" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 51.220600][ T29] audit: type=1400 audit(1767880583.390:2337): avc: denied { execute } for pid=4640 comm="syz.1.266" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 51.271510][ T4652] netlink: 4 bytes leftover after parsing attributes in process `syz.4.268'. [ 51.699213][ T4668] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 51.705850][ T4668] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 51.713551][ T4668] vhci_hcd vhci_hcd.0: Device attached [ 51.771463][ T4669] vhci_hcd: connection closed [ 51.771952][ T4161] vhci_hcd vhci_hcd.5: stop threads [ 51.782091][ T4161] vhci_hcd vhci_hcd.5: release socket [ 51.787515][ T4161] vhci_hcd vhci_hcd.5: disconnect device [ 51.907039][ T29] audit: type=1400 audit(1767880584.330:2338): avc: denied { ioctl } for pid=4675 comm="syz.1.276" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 52.042311][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.086715][ T4678] set_capacity_and_notify: 4 callbacks suppressed [ 52.086728][ T4678] loop0: detected capacity change from 0 to 512 [ 52.150558][ T4678] EXT4-fs error (device loop0): __ext4_fill_super:5553: inode #2: comm syz.0.277: iget: checksum invalid [ 52.162726][ T4678] EXT4-fs (loop0): get root inode failed [ 52.168401][ T4678] EXT4-fs (loop0): mount failed [ 52.202916][ T4678] netlink: 8 bytes leftover after parsing attributes in process `syz.0.277'. [ 52.212517][ T29] audit: type=1400 audit(1767880584.640:2339): avc: denied { setopt } for pid=4677 comm="syz.0.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 52.288926][ T4689] IPv6: Can't replace route, no match found [ 52.383706][ T4694] netlink: 28 bytes leftover after parsing attributes in process `syz.4.281'. [ 52.392674][ T4694] netlink: 28 bytes leftover after parsing attributes in process `syz.4.281'. [ 52.409507][ T4694] netlink: 28 bytes leftover after parsing attributes in process `syz.4.281'. [ 52.523700][ T4704] loop4: detected capacity change from 0 to 512 [ 52.533023][ T4704] EXT4-fs: Ignoring removed nomblk_io_submit option [ 52.539849][ T4704] EXT4-fs: Ignoring removed bh option [ 52.553510][ T4704] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 52.569496][ T4704] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #11: comm syz.4.284: corrupted inode contents [ 52.581668][ T4704] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #11: comm syz.4.284: mark_inode_dirty error [ 52.593284][ T4704] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.284: invalid indirect mapped block 1 (level 1) [ 52.606868][ T4704] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #11: comm syz.4.284: corrupted inode contents [ 52.619180][ T4704] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 52.628062][ T4704] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #11: comm syz.4.284: corrupted inode contents [ 52.640425][ T4704] EXT4-fs error (device loop4): ext4_truncate:4635: inode #11: comm syz.4.284: mark_inode_dirty error [ 52.651777][ T4704] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 52.660919][ T4704] EXT4-fs (loop4): 1 truncate cleaned up [ 52.667173][ T4704] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.681701][ T4704] EXT4-fs error (device loop4): ext4_find_dest_de:2050: inode #2: block 13: comm syz.4.284: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 52.850124][ T4719] netlink: 12 bytes leftover after parsing attributes in process `syz.1.287'. [ 52.897605][ T4722] netlink: 8 bytes leftover after parsing attributes in process `syz.5.288'. [ 52.897809][ T4723] netlink: 8 bytes leftover after parsing attributes in process `syz.5.288'. [ 52.977037][ T4730] net_ratelimit: 7 callbacks suppressed [ 52.977052][ T4730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 52.979457][ T4731] loop5: detected capacity change from 0 to 1024 [ 52.998157][ T4731] EXT4-fs: Ignoring removed mblk_io_submit option [ 52.998897][ T4730] loop0: detected capacity change from 0 to 1024 [ 53.009694][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.020531][ T4731] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 53.030651][ T4730] EXT4-fs: dax option not supported [ 53.031481][ T4731] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.060785][ T4730] gtp0: entered promiscuous mode [ 53.096344][ T4737] lo speed is unknown, defaulting to 1000 [ 53.101936][ T4734] loop4: detected capacity change from 0 to 1024 [ 53.106060][ T4737] lo speed is unknown, defaulting to 1000 [ 53.115042][ T4734] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 53.120043][ T4739] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.126020][ T4734] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 53.133353][ T4739] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.151861][ T4734] JBD2: no valid journal superblock found [ 53.152167][ T4739] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.157610][ T4734] EXT4-fs (loop4): Could not load journal inode [ 53.165194][ T4739] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.184913][ T4734] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 53.209883][ T4737] lo speed is unknown, defaulting to 1000 [ 53.226177][ T4048] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.236897][ T4737] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 53.246538][ T4737] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 53.263203][ T4737] lo speed is unknown, defaulting to 1000 [ 53.298146][ T4737] lo speed is unknown, defaulting to 1000 [ 53.310839][ T4737] lo speed is unknown, defaulting to 1000 [ 53.316978][ T4737] lo speed is unknown, defaulting to 1000 [ 53.326456][ T4737] lo speed is unknown, defaulting to 1000 [ 53.332812][ T4737] lo speed is unknown, defaulting to 1000 [ 53.360691][ T4746] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 53.532061][ T4769] lo speed is unknown, defaulting to 1000 [ 53.683373][ T4773] netlink: 28 bytes leftover after parsing attributes in process `syz.1.303'. [ 53.759943][ T3483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 53.887871][ T4734] syz.4.292 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 53.902036][ T4734] CPU: 0 UID: 0 PID: 4734 Comm: syz.4.292 Not tainted syzkaller #0 PREEMPT(voluntary) [ 53.902067][ T4734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 53.902078][ T4734] Call Trace: [ 53.902085][ T4734] [ 53.902097][ T4734] __dump_stack+0x1d/0x30 [ 53.902133][ T4734] dump_stack_lvl+0x95/0xd0 [ 53.902157][ T4734] dump_stack+0x15/0x1b [ 53.902179][ T4734] dump_header+0x81/0x240 [ 53.902244][ T4734] oom_kill_process+0x295/0x350 [ 53.902267][ T4734] out_of_memory+0x97b/0xb80 [ 53.902349][ T4734] try_charge_memcg+0x610/0xa10 [ 53.902383][ T4734] obj_cgroup_charge_pages+0xa6/0x150 [ 53.902407][ T4734] __memcg_kmem_charge_page+0x9f/0x170 [ 53.902437][ T4734] __alloc_frozen_pages_noprof+0x18f/0x360 [ 53.902492][ T4734] alloc_pages_mpol+0xb3/0x260 [ 53.902516][ T4734] alloc_pages_noprof+0x90/0x130 [ 53.902545][ T4734] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 53.902623][ T4734] __kvmalloc_node_noprof+0x492/0x6b0 [ 53.902699][ T4734] ? ip_set_alloc+0x24/0x30 [ 53.902726][ T4734] ? ip_set_alloc+0x24/0x30 [ 53.902818][ T4734] ip_set_alloc+0x24/0x30 [ 53.902858][ T4734] hash_netiface_create+0x282/0x740 [ 53.902893][ T4734] ? __pfx_hash_netiface_create+0x10/0x10 [ 53.902968][ T4734] ip_set_create+0x3cc/0x970 [ 53.903010][ T4734] ? __nla_parse+0x40/0x60 [ 53.903037][ T4734] nfnetlink_rcv_msg+0x4c6/0x590 [ 53.903134][ T4734] netlink_rcv_skb+0x123/0x220 [ 53.903163][ T4734] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 53.903196][ T4734] nfnetlink_rcv+0x167/0x16c0 [ 53.903294][ T4734] ? kmem_cache_free+0xe3/0x3a0 [ 53.903320][ T4734] ? __kfree_skb+0x109/0x150 [ 53.903355][ T4734] ? nlmon_xmit+0x4f/0x60 [ 53.903374][ T4734] ? consume_skb+0x49/0x150 [ 53.903405][ T4734] ? nlmon_xmit+0x4f/0x60 [ 53.903427][ T4734] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 53.903473][ T4734] ? __dev_queue_xmit+0x13a6/0x1ee0 [ 53.903501][ T4734] ? __dev_queue_xmit+0x148/0x1ee0 [ 53.903594][ T4734] ? ref_tracker_free+0x37d/0x3e0 [ 53.903622][ T4734] ? __netlink_deliver_tap+0x4dc/0x500 [ 53.903650][ T4734] netlink_unicast+0x5c0/0x690 [ 53.903679][ T4734] netlink_sendmsg+0x58b/0x6b0 [ 53.903760][ T4734] ? __pfx_netlink_sendmsg+0x10/0x10 [ 53.903846][ T4734] __sock_sendmsg+0x145/0x180 [ 53.903863][ T4734] ____sys_sendmsg+0x31e/0x4a0 [ 53.903895][ T4734] ___sys_sendmsg+0x17b/0x1d0 [ 53.903937][ T4734] __x64_sys_sendmsg+0xd4/0x160 [ 53.904041][ T4734] x64_sys_call+0x17ba/0x3000 [ 53.904066][ T4734] do_syscall_64+0xca/0x2b0 [ 53.904174][ T4734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.904197][ T4734] RIP: 0033:0x7f703f4ff749 [ 53.904268][ T4734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.904286][ T4734] RSP: 002b:00007f703df5f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 53.904360][ T4734] RAX: ffffffffffffffda RBX: 00007f703f755fa0 RCX: 00007f703f4ff749 [ 53.904374][ T4734] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 000000000000000e [ 53.904388][ T4734] RBP: 00007f703f583f91 R08: 0000000000000000 R09: 0000000000000000 [ 53.904401][ T4734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 53.904414][ T4734] R13: 00007f703f756038 R14: 00007f703f755fa0 R15: 00007ffc360ea288 [ 53.904431][ T4734] [ 53.904437][ T4734] memory: usage 307200kB, limit 307200kB, failcnt 606 [ 54.233434][ T4734] memory+swap: usage 307580kB, limit 9007199254740988kB, failcnt 0 [ 54.241504][ T4734] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 54.248847][ T4734] Memory cgroup stats for /syz4: [ 54.361021][ T4734] cache 0 [ 54.368902][ T4734] rss 0 [ 54.371728][ T4734] shmem 0 [ 54.374660][ T4734] mapped_file 0 [ 54.378467][ T4734] dirty 0 [ 54.381547][ T4734] writeback 0 [ 54.384822][ T4734] workingset_refault_anon 48 [ 54.389436][ T4734] workingset_refault_file 552 [ 54.394103][ T4734] swap 389120 [ 54.397377][ T4734] swapcached 0 [ 54.400799][ T4734] pgpgin 26675 [ 54.404171][ T4734] pgpgout 26675 [ 54.407621][ T4734] pgfault 29802 [ 54.411158][ T4734] pgmajfault 32 [ 54.414602][ T4734] inactive_anon 0 [ 54.418291][ T4734] active_anon 0 [ 54.421766][ T4734] inactive_file 0 [ 54.425479][ T4734] active_file 0 [ 54.428979][ T4734] unevictable 0 [ 54.432462][ T4734] hierarchical_memory_limit 314572800 [ 54.437835][ T4734] hierarchical_memsw_limit 9223372036854771712 [ 54.444058][ T4734] total_cache 0 [ 54.447509][ T4734] total_rss 0 [ 54.450824][ T4734] total_shmem 0 [ 54.454367][ T4734] total_mapped_file 0 [ 54.458429][ T4734] total_dirty 0 [ 54.461918][ T4734] total_writeback 0 [ 54.465732][ T4734] total_workingset_refault_anon 48 [ 54.470854][ T4734] total_workingset_refault_file 552 [ 54.476080][ T4734] total_swap 389120 [ 54.479889][ T4734] total_swapcached 0 [ 54.483769][ T4734] total_pgpgin 26675 [ 54.487650][ T4734] total_pgpgout 26675 [ 54.491659][ T4734] total_pgfault 29802 [ 54.495679][ T4734] total_pgmajfault 32 [ 54.499667][ T4734] total_inactive_anon 0 [ 54.503805][ T4734] total_active_anon 0 [ 54.507766][ T4734] total_inactive_file 0 [ 54.511933][ T4734] total_active_file 0 [ 54.515920][ T4734] total_unevictable 0 [ 54.519903][ T4734] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.292,pid=4733,uid=0 [ 54.534466][ T4734] Memory cgroup out of memory: Killed process 4733 (syz.4.292) total-vm:93968kB, anon-rss:1116kB, file-rss:22424kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 54.606587][ T4734] syz.4.292 (4734) used greatest stack depth: 6408 bytes left [ 54.762474][ T3663] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 54.780541][ T4715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 54.792123][ T4872] loop2: detected capacity change from 0 to 512 [ 54.810612][ T4872] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.829863][ T4872] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.874274][ T4881] infiniband syû: set active [ 54.878912][ T4881] infiniband syû: added bond_slave_0 [ 54.899947][ T4881] RDS/IB: syû: added [ 54.910861][ T4881] smc: adding ib device syû with port count 1 [ 54.918385][ T3324] EXT4-fs error (device loop2): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 54.924622][ T4881] smc: ib device syû port 1 has no pnetid [ 54.944789][ T3324] EXT4-fs error (device loop2): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 55.032919][ T4879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.045512][ T4879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.147965][ T4895] loop0: detected capacity change from 0 to 2048 [ 55.174226][ T4895] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.313325][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.340246][ T4909] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 [ 55.376842][ T4914] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4914 comm=syz.1.326 [ 55.481717][ T4884] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.527406][ T4921] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 55.535649][ T4921] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 55.548271][ T4035] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.567085][ T4921] loop5: detected capacity change from 0 to 1024 [ 55.574137][ T4921] EXT4-fs: inline encryption not supported [ 55.588446][ T4921] EXT4-fs: Ignoring removed mblk_io_submit option [ 55.613384][ T4035] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.625581][ T4921] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.676461][ T4035] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.696238][ T4940] dummy0: entered promiscuous mode [ 55.702633][ T4940] dummy0: left promiscuous mode [ 55.718484][ T4923] lo speed is unknown, defaulting to 1000 [ 55.727428][ T4035] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.819860][ T1039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 55.838059][ T4923] chnl_net:caif_netlink_parms(): no params data found [ 55.851858][ T4035] bridge_slave_1: left allmulticast mode [ 55.857555][ T4035] bridge_slave_1: left promiscuous mode [ 55.863218][ T4035] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.871779][ T4035] bridge_slave_0: left allmulticast mode [ 55.877450][ T4035] bridge_slave_0: left promiscuous mode [ 55.883205][ T4035] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.918498][ T4035] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 55.971953][ T4035] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 55.982007][ T4035] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 55.990410][ T3663] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 55.999766][ T4035] bond0 (unregistering): Released all slaves [ 56.008432][ T4035] bond1 (unregistering): Released all slaves [ 56.040176][ T4957] loop4: detected capacity change from 0 to 256 [ 56.056212][ T4035] tipc: Disabling bearer [ 56.061522][ T4035] tipc: Left network mode [ 56.061555][ T4923] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.061599][ T4923] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.080375][ T4923] bridge_slave_0: entered allmulticast mode [ 56.087186][ T4923] bridge_slave_0: entered promiscuous mode [ 56.094055][ T4923] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.101210][ T4923] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.108661][ T4923] bridge_slave_1: entered allmulticast mode [ 56.117116][ T4923] bridge_slave_1: entered promiscuous mode [ 56.117151][ T29] kauditd_printk_skb: 342 callbacks suppressed [ 56.117162][ T29] audit: type=1326 audit(1767880588.540:2682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4961 comm="syz.4.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f703f4ff749 code=0x7ffc0000 [ 56.152603][ T29] audit: type=1326 audit(1767880588.570:2683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4961 comm="syz.4.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f703f4b6357 code=0x7ffc0000 [ 56.175926][ T29] audit: type=1326 audit(1767880588.570:2684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4961 comm="syz.4.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f703f4b63b6 code=0x7ffc0000 [ 56.199211][ T29] audit: type=1326 audit(1767880588.570:2685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4961 comm="syz.4.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f703f4ff749 code=0x7ffc0000 [ 56.222534][ T29] audit: type=1326 audit(1767880588.570:2686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4961 comm="syz.4.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f703f4ff749 code=0x7ffc0000 [ 56.245889][ T29] audit: type=1326 audit(1767880588.570:2687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4961 comm="syz.4.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f703f4ff749 code=0x7ffc0000 [ 56.269221][ T29] audit: type=1326 audit(1767880588.570:2688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4961 comm="syz.4.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f703f4b6357 code=0x7ffc0000 [ 56.292493][ T29] audit: type=1326 audit(1767880588.570:2689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4961 comm="syz.4.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f703f4b63b6 code=0x7ffc0000 [ 56.315751][ T29] audit: type=1326 audit(1767880588.570:2690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4961 comm="syz.4.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f703f4ff749 code=0x7ffc0000 [ 56.339115][ T29] audit: type=1326 audit(1767880588.570:2691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4961 comm="syz.4.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f703f4ff749 code=0x7ffc0000 [ 56.407013][ T4048] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.416070][ T4035] hsr_slave_0: left promiscuous mode [ 56.426315][ T4035] hsr_slave_1: left promiscuous mode [ 56.442420][ T4035] veth1_macvtap: left promiscuous mode [ 56.448099][ T4035] veth0_macvtap: left promiscuous mode [ 56.454405][ T4035] veth1_vlan: left promiscuous mode [ 56.462666][ T4035] veth0_vlan: left promiscuous mode [ 56.484181][ T4979] __nla_validate_parse: 4 callbacks suppressed [ 56.484197][ T4979] netlink: 660 bytes leftover after parsing attributes in process `+}[@'. [ 56.510134][ T4984] netlink: 4 bytes leftover after parsing attributes in process `syz.1.341'. [ 56.554699][ T4986] loop5: detected capacity change from 0 to 8192 [ 56.561642][ T4035] team0 (unregistering): Port device team_slave_1 removed [ 56.581223][ T4035] team0 (unregistering): Port device team_slave_0 removed [ 56.620289][ T3402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 56.662184][ T3663] lo speed is unknown, defaulting to 1000 [ 56.667950][ T3663] infiniband syz2: ib_query_port failed (-19) [ 56.675895][ T4923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.685287][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 56.704242][ T4923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.727832][ T4923] team0: Port device team_slave_0 added [ 56.734434][ T4923] team0: Port device team_slave_1 added [ 56.754404][ T4994] vfat: Unknown parameter 's' [ 56.788492][ T4998] EXT4-fs: Ignoring removed orlov option [ 56.809741][ T4923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.816778][ T4923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.823105][ T4998] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.842800][ T4923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.865762][ T1039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 56.884501][ T4923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.891485][ T4923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.917498][ T4923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.964795][ T5002] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 56.989339][ T4923] hsr_slave_0: entered promiscuous mode [ 56.999044][ T4998] x_tables: duplicate underflow at hook 1 [ 57.002880][ T4923] hsr_slave_1: entered promiscuous mode [ 57.013121][ T4923] debugfs: 'hsr0' already exists in 'hsr' [ 57.018863][ T4923] Cannot create hsr debugfs directory [ 57.025871][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.054800][ T5011] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 57.073491][ T5011] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 57.081748][ T5011] EXT4-fs (loop0): orphan cleanup on readonly fs [ 57.091570][ T5011] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.350: Failed to acquire dquot type 0 [ 57.108678][ T5012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.117686][ T5011] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.350: Failed to acquire dquot type 0 [ 57.137857][ T5012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.146386][ T5011] EXT4-fs error (device loop0): ext4_free_blocks:6728: comm syz.0.350: Freeing blocks not in datazone - block = 0, count = 4096 [ 57.160091][ T5011] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.350: Failed to acquire dquot type 0 [ 57.166176][ T5012] netlink: 4 bytes leftover after parsing attributes in process `syz.4.349'. [ 57.171679][ T5011] EXT4-fs (loop0): 1 orphan inode deleted [ 57.191621][ T5011] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 57.225401][ T5012] netlink: 8 bytes leftover after parsing attributes in process `syz.4.349'. [ 57.230308][ T4923] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 57.243981][ T4923] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 57.255239][ T5011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.274673][ T4923] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 57.285234][ T5011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.305708][ T5016] netlink: 4 bytes leftover after parsing attributes in process `syz.4.349'. [ 57.308590][ T5011] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.324448][ T4923] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 57.379037][ T4923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.398350][ T4923] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.408682][ T4181] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.415846][ T4181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.429497][ T4160] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.436607][ T4160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.504960][ T5035] netlink: '+}[@': attribute type 1 has an invalid length. [ 57.512137][ T4923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.526905][ T5035] 8021q: adding VLAN 0 to HW filter on device bond1 [ 57.550441][ T5035] bond1: (slave gretap1): making interface the new active one [ 57.558767][ T5035] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 57.688917][ T4923] veth0_vlan: entered promiscuous mode [ 57.697711][ T4923] veth1_vlan: entered promiscuous mode [ 57.718309][ T4923] veth0_macvtap: entered promiscuous mode [ 57.729036][ T4923] veth1_macvtap: entered promiscuous mode [ 57.740791][ T4923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.741824][ T5064] 9p: Bad value for 'wfdno' [ 57.753784][ T4923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.765805][ T4209] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.779741][ T5065] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 57.784868][ T4209] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.788957][ T5065] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 57.804518][ T4209] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.831745][ T5067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.839107][ T4209] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.843362][ T5065] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 57.860280][ T5067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.879496][ T5065] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 57.879526][ T5065] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 57.889582][ T5065] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 57.897145][ T5065] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 57.905675][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 57.928912][ T5065] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 57.928946][ T5065] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 57.937847][ T5065] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 57.939878][ T5072] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 57.959662][ T5065] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 57.962841][ T5065] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 57.971677][ T5065] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 57.979231][ T5065] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 57.987125][ T5065] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 57.995512][ T5065] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 58.003927][ T5065] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 58.012198][ T5065] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 58.044080][ T5065] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 58.067030][ T5065] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 58.099544][ T5065] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 58.119536][ T5065] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 58.127053][ T5065] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 58.151014][ T5065] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 58.169394][ T5065] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 58.188959][ T5065] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 58.199229][ T5065] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 58.206812][ T5065] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 58.214441][ T5065] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 58.258646][ T5083] set_capacity_and_notify: 3 callbacks suppressed [ 58.258661][ T5083] loop6: detected capacity change from 0 to 512 [ 58.259584][ T5065] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 58.269541][ T5083] ------------[ cut here ]------------ [ 58.292480][ T5083] EA inode 11 i_nlink=2 [ 58.292493][ T5083] WARNING: fs/ext4/xattr.c:1058 at ext4_xattr_inode_update_ref+0x2e6/0x320, CPU#0: syz.6.329/5083 [ 58.307479][ T5083] Modules linked in: [ 58.311423][ T5083] CPU: 0 UID: 0 PID: 5083 Comm: syz.6.329 Not tainted syzkaller #0 PREEMPT(voluntary) [ 58.321072][ T5083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 58.331208][ T5083] RIP: 0010:ext4_xattr_inode_update_ref+0x305/0x320 [ 58.337932][ T5083] Code: d1 e2 9c ff 4c 8d 2d 6a ef 20 05 49 8d 7e 40 e8 d1 6b b8 ff 49 8b 6e 40 4c 89 e7 e8 e5 66 b8 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 2b ff ff ff e8 ac ac ba 03 66 66 66 2e 0f 1f 84 [ 58.348204][ T5065] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 58.357660][ T5083] RSP: 0018:ffffc900041575a0 EFLAGS: 00010246 [ 58.371339][ T5083] RAX: ffff888103a83c10 RBX: ffff88810a355c18 RCX: ffffffff81bb1d5b [ 58.379309][ T5083] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff86dc0cb0 [ 58.387554][ T5083] RBP: 000000000000000b R08: 000188810a355bcb R09: 0000000000000000 [ 58.395637][ T5083] R10: 0000000000000406 R11: 0000000000000002 R12: ffff88810a355bc8 [ 58.398973][ T5065] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 58.403675][ T5083] R13: ffffffff86dc0cb0 R14: ffff88810a355b80 R15: 0000000000000001 [ 58.419197][ T5083] FS: 00007fac7f1656c0(0000) GS:ffff8882aedc5000(0000) knlGS:0000000000000000 [ 58.428207][ T5083] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.428255][ T5065] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 58.434800][ T5083] CR2: 0000000000000000 CR3: 000000010c7f2000 CR4: 00000000003506f0 [ 58.434836][ T5083] DR0: fffffffffffffffe DR1: 0000000000000000 DR2: 0000000000000000 [ 58.434849][ T5083] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 58.466354][ T5083] Call Trace: [ 58.469692][ T5083] [ 58.472629][ T5083] ext4_xattr_set_entry+0x77f/0x1020 [ 58.478006][ T5083] ext4_xattr_ibody_set+0x184/0x3c0 [ 58.483326][ T5083] ext4_expand_extra_isize_ea+0xcbb/0x11f0 [ 58.489219][ T5083] __ext4_expand_extra_isize+0x246/0x280 [ 58.494889][ T5083] __ext4_mark_inode_dirty+0x29d/0x3f0 [ 58.500417][ T5083] ext4_evict_inode+0x7c4/0xd40 [ 58.505270][ T5083] ? __pfx_ext4_evict_inode+0x10/0x10 [ 58.510704][ T5083] evict+0x2af/0x510 [ 58.514645][ T5083] ? __dquot_initialize+0x146/0x7c0 [ 58.519887][ T5083] iput+0x4bd/0x650 [ 58.523698][ T5083] ext4_process_orphan+0x1a9/0x1c0 [ 58.528808][ T5083] ext4_orphan_cleanup+0x6a8/0xa00 [ 58.534033][ T5083] ext4_fill_super+0x3411/0x37a0 [ 58.539127][ T5083] ? set_blocksize+0x1a8/0x310 [ 58.544796][ T5083] ? sb_set_blocksize+0xfc/0x170 [ 58.550274][ T5083] ? setup_bdev_super+0x30e/0x370 [ 58.555367][ T5083] ? __pfx_ext4_fill_super+0x10/0x10 [ 58.560701][ T5083] get_tree_bdev_flags+0x291/0x300 [ 58.565812][ T5083] ? __pfx_ext4_fill_super+0x10/0x10 [ 58.571130][ T5083] get_tree_bdev+0x1f/0x30 [ 58.575587][ T5083] ext4_get_tree+0x1c/0x30 [ 58.580064][ T5083] vfs_get_tree+0x57/0x1d0 [ 58.584607][ T5083] do_new_mount+0x24d/0x6a0 [ 58.589136][ T5083] path_mount+0x4ab/0xb80 [ 58.593557][ T5083] ? user_path_at+0xbf/0x130 [ 58.598154][ T5083] __se_sys_mount+0x28c/0x2e0 [ 58.602956][ T5083] __x64_sys_mount+0x67/0x80 [ 58.607576][ T5083] x64_sys_call+0x2cca/0x3000 [ 58.612301][ T5083] do_syscall_64+0xca/0x2b0 [ 58.616858][ T5083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.622874][ T5083] RIP: 0033:0x7fac808b0eea [ 58.627314][ T5083] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.646955][ T5083] RSP: 002b:00007fac7f164e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 58.655441][ T5083] RAX: ffffffffffffffda RBX: 00007fac7f164ef0 RCX: 00007fac808b0eea [ 58.663566][ T5083] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fac7f164eb0 [ 58.671608][ T5083] RBP: 0000200000000180 R08: 00007fac7f164ef0 R09: 0000000000800700 [ 58.679613][ T5083] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 58.687617][ T5083] R13: 00007fac7f164eb0 R14: 000000000000046f R15: 000000000000002c [ 58.695642][ T5083] [ 58.698658][ T5083] ---[ end trace 0000000000000000 ]--- [ 58.708833][ T5083] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #18: comm syz.6.329: iget: bad extra_isize 90 (inode size 256) [ 58.722520][ T5083] EXT4-fs (loop6): Remounting filesystem read-only [ 58.729110][ T5083] EXT4-fs warning (device loop6): ext4_evict_inode:273: xattr delete (err -30) [ 58.739870][ T5095] netlink: 300 bytes leftover after parsing attributes in process `syz.1.365'. [ 58.759370][ T5083] EXT4-fs (loop6): 1 orphan inode deleted [ 58.765492][ T5083] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.778346][ T5083] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.835429][ T5100] usb usb1: usbfs: process 5100 (syz.5.367) did not claim interface 0 before use [ 58.904413][ T5100] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 58.997468][ T5113] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.085806][ T5121] pimreg: entered allmulticast mode [ 59.091636][ T5119] netlink: 256 bytes leftover after parsing attributes in process `syz.6.371'. [ 59.111258][ T5113] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.126407][ T5121] pimreg: left allmulticast mode [ 59.406277][ T5134] netlink: 16 bytes leftover after parsing attributes in process `syz.1.374'. [ 59.522138][ T5147] can0: slcan on ttyS3. [ 59.551081][ T5146] can0 (unregistered): slcan off ttyS3. [ 59.579298][ T5151] usb usb1: usbfs: process 5151 (syz.1.378) did not claim interface 0 before use [ 59.611646][ T5155] program syz.1.379 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.724422][ T5167] macvlan2: entered promiscuous mode [ 59.730938][ T5167] netlink: 'syz.0.382': attribute type 1 has an invalid length. [ 59.969559][ T5191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.388'. [ 59.979148][ T5191] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=5191 comm=syz.0.388 [ 59.991813][ T5191] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=5191 comm=syz.0.388 [ 60.004336][ T5191] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=5191 comm=syz.0.388 [ 60.196424][ T5199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.227453][ T5199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.253576][ T5199] netlink: 'syz.5.390': attribute type 13 has an invalid length. [ 60.267110][ T5203] loop4: detected capacity change from 0 to 512 [ 60.294999][ T5203] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.391: Failed to acquire dquot type 1 [ 60.316035][ T5199] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.317646][ T5203] EXT4-fs (loop4): 1 truncate cleaned up [ 60.323339][ T5199] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.329609][ T5203] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.348601][ T5203] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.352805][ T5196] 9p: Bad value for 'rfdno' [ 60.374723][ T5196] loop5: detected capacity change from 0 to 512 [ 60.393025][ T5196] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 60.421835][ T5199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.432329][ T5199] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.520247][ T4160] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.546077][ T4160] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.573724][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.575949][ T4160] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.591844][ T4151] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.894450][ T5113] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.110182][ T5255] netlink: 660 bytes leftover after parsing attributes in process `+}[@'. [ 61.119647][ T29] kauditd_printk_skb: 733 callbacks suppressed [ 61.119686][ T29] audit: type=1326 audit(1767880593.550:3417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5250 comm="syz.0.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd897c02005 code=0x7ffc0000 [ 61.149399][ T29] audit: type=1326 audit(1767880593.550:3418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5250 comm="syz.0.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd897c02005 code=0x7ffc0000 [ 61.172886][ T29] audit: type=1326 audit(1767880593.550:3419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5250 comm="syz.0.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd897c02005 code=0x7ffc0000 [ 61.196249][ T29] audit: type=1326 audit(1767880593.550:3420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5250 comm="syz.0.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd897c02005 code=0x7ffc0000 [ 61.219642][ T29] audit: type=1326 audit(1767880593.550:3421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5250 comm="syz.0.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd897c02005 code=0x7ffc0000 [ 61.242953][ T29] audit: type=1326 audit(1767880593.550:3422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5250 comm="syz.0.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd897c02005 code=0x7ffc0000 [ 61.266337][ T29] audit: type=1326 audit(1767880593.550:3423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5250 comm="syz.0.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd897c02005 code=0x7ffc0000 [ 61.289697][ T29] audit: type=1326 audit(1767880593.550:3424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5250 comm="syz.0.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd897c02005 code=0x7ffc0000 [ 61.312986][ T29] audit: type=1326 audit(1767880593.550:3425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5250 comm="syz.0.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd897c02005 code=0x7ffc0000 [ 61.336269][ T29] audit: type=1326 audit(1767880593.550:3426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5250 comm="syz.0.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd897c02005 code=0x7ffc0000 [ 61.530132][ T5272] netlink: 4 bytes leftover after parsing attributes in process `syz.0.405'. [ 61.736068][ T5281] loop4: detected capacity change from 0 to 4096 [ 61.745870][ T5113] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.778226][ T5281] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.816063][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.848045][ T4151] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.871248][ T5113] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.890977][ T5302] netlink: 96 bytes leftover after parsing attributes in process `syz.0.416'. [ 61.909602][ T5301] netlink: 96 bytes leftover after parsing attributes in process `syz.0.416'. [ 61.922904][ T5298] netlink: 12 bytes leftover after parsing attributes in process `syz.5.415'. [ 61.938504][ T5298] 8021q: adding VLAN 0 to HW filter on device bond2 [ 61.948665][ T5298] netlink: 4 bytes leftover after parsing attributes in process `syz.5.415'. [ 61.959307][ T5298] bond2 (unregistering): Released all slaves [ 62.177938][ T5342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.186550][ T5342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.220692][ T5349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.428'. [ 62.233027][ T5351] netlink: 260 bytes leftover after parsing attributes in process `syz.5.429'. [ 62.259416][ T5353] netlink: 4 bytes leftover after parsing attributes in process `syz.0.430'. [ 62.637522][ T5380] netlink: 36 bytes leftover after parsing attributes in process `syz.0.438'. [ 62.739283][ T5387] macvtap0: entered promiscuous mode [ 62.744705][ T5387] macvtap0: entered allmulticast mode [ 62.778223][ T5396] bridge_slave_0: left allmulticast mode [ 62.783999][ T5396] bridge_slave_0: left promiscuous mode [ 62.789683][ T5396] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.798222][ T5396] bridge_slave_1: left allmulticast mode [ 62.804021][ T5396] bridge_slave_1: left promiscuous mode [ 62.809791][ T5396] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.827145][ T5396] bond0: (slave bond_slave_0): Releasing backup interface [ 62.838308][ T5396] bond0: (slave bond_slave_1): Releasing backup interface [ 62.850226][ T5396] team0: Port device team_slave_0 removed [ 62.856795][ T5396] team0: Port device team_slave_1 removed [ 62.864057][ T5396] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.864644][ T5401] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=515 sclass=netlink_route_socket pid=5401 comm=syz.0.444 [ 62.884331][ T5396] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.892267][ T5396] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 62.908473][ T5400] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 62.979719][ T5409] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.042979][ T5409] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.083293][ T5409] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.145292][ T5409] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.175620][ T5417] loop5: detected capacity change from 0 to 512 [ 63.182624][ T5417] EXT4-fs: Ignoring removed i_version option [ 63.198332][ T5417] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.199138][ T4035] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.224338][ T4147] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.234327][ T4048] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.243497][ T4035] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.257596][ T4035] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.285864][ T5423] netlink: 660 bytes leftover after parsing attributes in process `+}[@'. [ 63.372491][ T5443] loop5: detected capacity change from 0 to 512 [ 63.379289][ T5443] EXT4-fs: Ignoring removed i_version option [ 63.403925][ T5443] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.468700][ T4048] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.036223][ T5477] netlink: 'syz.1.464': attribute type 4 has an invalid length. [ 64.044819][ T5476] loop4: detected capacity change from 0 to 512 [ 64.052280][ T5476] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 64.072274][ T5477] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1016 sclass=netlink_route_socket pid=5477 comm=syz.1.464 [ 64.091152][ T5476] EXT4-fs (loop4): too many log groups per flexible block group [ 64.099084][ T5476] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 64.106185][ T5476] EXT4-fs (loop4): mount failed [ 64.116109][ T5474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.132265][ T5474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.145919][ T5474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.155269][ T5474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.170632][ T5474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.189800][ T5474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.198252][ T5474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.223120][ T5474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.244507][ T5474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.273824][ T5474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.296487][ T5474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.308887][ T5474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.357095][ T5504] loop5: detected capacity change from 0 to 764 [ 64.522157][ T4181] Bluetooth: hci0: Frame reassembly failed (-84) [ 64.614587][ T5549] SELinux: Context system_u:object_r:var_lib_t:s0 is not valid (left unmapped). [ 64.734768][ T5554] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 64.884741][ T5563] loop4: detected capacity change from 0 to 1024 [ 64.912028][ T5563] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.944852][ T5563] ext4 filesystem being mounted at /75/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.074914][ T5570] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 65.086138][ T3315] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 65.093554][ T5570] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 65.097090][ T3315] CPU: 0 UID: 0 PID: 3315 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 65.097129][ T3315] Tainted: [W]=WARN [ 65.097144][ T3315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 65.097156][ T3315] Call Trace: [ 65.097163][ T3315] [ 65.097172][ T3315] __dump_stack+0x1d/0x30 [ 65.097196][ T3315] dump_stack_lvl+0x95/0xd0 [ 65.097217][ T3315] dump_stack+0x15/0x1b [ 65.097236][ T3315] dump_header+0x81/0x240 [ 65.097263][ T3315] oom_kill_process+0x295/0x350 [ 65.097285][ T3315] out_of_memory+0x97b/0xb80 [ 65.097308][ T3315] try_charge_memcg+0x610/0xa10 [ 65.097431][ T3315] charge_memcg+0x51/0xc0 [ 65.097458][ T3315] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 65.097489][ T3315] __read_swap_cache_async+0x17b/0x2d0 [ 65.097646][ T3315] swap_cluster_readahead+0x262/0x3c0 [ 65.097677][ T3315] swapin_readahead+0xde/0x820 [ 65.097732][ T3315] ? __rcu_read_unlock+0x4f/0x70 [ 65.097751][ T3315] ? __perf_event_task_sched_in+0xa5b/0xac0 [ 65.097847][ T3315] ? __list_add_valid_or_report+0x38/0xe0 [ 65.097882][ T3315] ? __rcu_read_unlock+0x4f/0x70 [ 65.097901][ T3315] ? swap_cache_get_folio+0x277/0x280 [ 65.097932][ T3315] do_swap_page+0x2b4/0x21e0 [ 65.098028][ T3315] ? _raw_spin_unlock+0x26/0x50 [ 65.098051][ T3315] ? __schedule+0x85f/0xcd0 [ 65.098073][ T3315] ? __pfx_default_wake_function+0x10/0x10 [ 65.098105][ T3315] handle_mm_fault+0x9d8/0x2c60 [ 65.098211][ T3315] do_user_addr_fault+0x630/0x1080 [ 65.098291][ T3315] exc_page_fault+0x62/0xa0 [ 65.098316][ T3315] asm_exc_page_fault+0x26/0x30 [ 65.098334][ T3315] RIP: 0033:0x7fd897c01fc5 [ 65.098347][ T3315] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 9e 95 1f 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 65.098411][ T3315] RSP: 002b:00007ffe82cc2178 EFLAGS: 00010246 [ 65.098458][ T3315] RAX: 0000000000000000 RBX: 000000000000018a RCX: 00007fd897c01fc3 [ 65.098499][ T3315] RDX: 00007ffe82cc2190 RSI: 0000000000000000 RDI: 0000000000000000 [ 65.098512][ T3315] RBP: 00007ffe82cc21fc R08: 0000000000699997 R09: 0000000000000000 [ 65.098525][ T3315] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 65.098563][ T3315] R13: 00000000000927c0 R14: 000000000000fcc3 R15: 00007ffe82cc2250 [ 65.098582][ T3315] [ 65.098589][ T3315] memory: usage 307200kB, limit 307200kB, failcnt 950 [ 65.309746][ T5561] xt_connbytes: Forcing CT accounting to be enabled [ 65.314954][ T3315] memory+swap: usage 307916kB, limit 9007199254740988kB, failcnt 0 [ 65.330195][ T5561] xt_NFQUEUE: number of total queues is 0 [ 65.331413][ T3315] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 65.368733][ T3315] Memory cgroup stats for /syz0: [ 65.369185][ T3315] cache 0 [ 65.377177][ T3315] rss 0 [ 65.380104][ T3315] shmem 0 [ 65.383078][ T3315] mapped_file 0 [ 65.386544][ T3315] dirty 0 [ 65.389606][ T3315] writeback 0 [ 65.393025][ T3315] workingset_refault_anon 111 [ 65.397915][ T3315] workingset_refault_file 1092 [ 65.402791][ T3315] swap 733184 [ 65.406141][ T3315] swapcached 8192 [ 65.409871][ T3315] pgpgin 54799 [ 65.413425][ T3315] pgpgout 54794 [ 65.416877][ T3315] pgfault 57807 [ 65.420376][ T3315] pgmajfault 98 [ 65.424345][ T3315] inactive_anon 8192 [ 65.428231][ T3315] active_anon 0 [ 65.431761][ T3315] inactive_file 12288 [ 65.435725][ T3315] active_file 0 [ 65.439157][ T3315] unevictable 0 [ 65.442613][ T3315] hierarchical_memory_limit 314572800 [ 65.448017][ T3315] hierarchical_memsw_limit 9223372036854771712 [ 65.454223][ T3315] total_cache 0 [ 65.457680][ T3315] total_rss 0 [ 65.460958][ T3315] total_shmem 0 [ 65.464473][ T3315] total_mapped_file 0 [ 65.468429][ T3315] total_dirty 0 [ 65.471907][ T3315] total_writeback 0 [ 65.475710][ T3315] total_workingset_refault_anon 111 [ 65.480914][ T3315] total_workingset_refault_file 1092 [ 65.486273][ T3315] total_swap 733184 [ 65.490083][ T3315] total_swapcached 8192 [ 65.494308][ T3315] total_pgpgin 54799 [ 65.498175][ T3315] total_pgpgout 54794 [ 65.502153][ T3315] total_pgfault 57807 [ 65.506127][ T3315] total_pgmajfault 98 [ 65.510162][ T3315] total_inactive_anon 8192 [ 65.514559][ T3315] total_active_anon 0 [ 65.518512][ T3315] total_inactive_file 12288 [ 65.523032][ T3315] total_active_file 0 [ 65.527001][ T3315] total_unevictable 0 [ 65.530996][ T3315] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.485,pid=5547,uid=0 [ 65.545476][ T3315] Memory cgroup out of memory: Killed process 5547 (syz.0.485) total-vm:93968kB, anon-rss:1268kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 65.595578][ T5578] netlink: 'syz.0.493': attribute type 1 has an invalid length. [ 65.741758][ T5574] infiniband syz1: set active [ 65.746504][ T5574] infiniband syz1: added syz_tun [ 65.818268][ T5574] RDS/IB: syz1: added [ 65.829886][ T5574] smc: adding ib device syz1 with port count 1 [ 65.833490][ T5596] SELinux: Context system_u:object_r:va is not valid (left unmapped). [ 65.839697][ T5574] smc: ib device syz1 port 1 has no pnetid [ 66.130337][ T29] kauditd_printk_skb: 1080 callbacks suppressed [ 66.130352][ T29] audit: type=1326 audit(1767880598.560:4507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5573 comm="syz.4.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f703f532005 code=0x7ffc0000 [ 66.164329][ T29] audit: type=1326 audit(1767880598.570:4508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5573 comm="syz.4.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f703f4ff749 code=0x7ffc0000 [ 66.187739][ T29] audit: type=1326 audit(1767880598.570:4509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5573 comm="syz.4.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f703f4ff749 code=0x7ffc0000 [ 66.211237][ T29] audit: type=1400 audit(1767880598.570:4510): avc: denied { create } for pid=5616 comm="syz.1.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 66.231436][ T29] audit: type=1326 audit(1767880598.590:4511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5573 comm="syz.4.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f703f4ff749 code=0x7ffc0000 [ 66.260455][ T29] audit: type=1326 audit(1767880598.680:4512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5573 comm="syz.4.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f703f4ff749 code=0x7ffc0000 [ 66.312499][ T29] audit: type=1400 audit(1767880598.740:4513): avc: denied { read write } for pid=5629 comm="syz.4.505" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 66.337692][ T29] audit: type=1400 audit(1767880598.740:4514): avc: denied { open } for pid=5629 comm="syz.4.505" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 66.362260][ T29] audit: type=1400 audit(1767880598.740:4515): avc: denied { ioctl } for pid=5629 comm="syz.4.505" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 66.415060][ T29] audit: type=1326 audit(1767880598.840:4516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5633 comm="syz.6.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac808af749 code=0x7ffc0000 [ 66.454902][ T5634] loop6: detected capacity change from 0 to 4096 [ 66.468688][ T5634] EXT4-fs mount: 1 callbacks suppressed [ 66.468737][ T5634] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 66.505441][ T4923] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.541526][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 66.586664][ T5646] syzkaller1: entered promiscuous mode [ 66.592179][ T5646] syzkaller1: entered allmulticast mode [ 66.665241][ T5652] __nla_validate_parse: 8 callbacks suppressed [ 66.665255][ T5652] netlink: 8 bytes leftover after parsing attributes in process `syz.0.513'. [ 66.680282][ T5652] netlink: 8 bytes leftover after parsing attributes in process `syz.0.513'. [ 66.752590][ T5655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.514'. [ 66.815977][ T5658] netlink: 4 bytes leftover after parsing attributes in process `syz.6.515'. [ 66.928916][ T5665] wireguard0: entered promiscuous mode [ 66.932471][ T5677] loop4: detected capacity change from 0 to 512 [ 66.934635][ T5665] wireguard0: entered allmulticast mode [ 66.962136][ T5677] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.978519][ T5677] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.027903][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.226657][ T5727] loop6: detected capacity change from 0 to 8192 [ 67.279722][ T3597] loop6: p1 < > p2 p3 < p5 p6 > p4 [ 67.284961][ T3597] loop6: partition table partially beyond EOD, truncated [ 67.292306][ T3597] loop6: p1 start 100663296 is beyond EOD, truncated [ 67.298990][ T3597] loop6: p2 size 134217732 extends beyond EOD, truncated [ 67.314708][ T3597] loop6: p4 size 14876672 extends beyond EOD, truncated [ 67.340109][ T3597] loop6: p5 size 134217732 extends beyond EOD, truncated [ 67.349162][ T3597] loop6: p6 size 14876672 extends beyond EOD, truncated [ 67.361307][ T5727] loop6: p1 < > p2 p3 < p5 p6 > p4 [ 67.366636][ T5727] loop6: partition table partially beyond EOD, truncated [ 67.383941][ T5727] loop6: p1 start 100663296 is beyond EOD, truncated [ 67.390782][ T5727] loop6: p2 size 134217732 extends beyond EOD, truncated [ 67.425664][ T5727] loop6: p4 size 14876672 extends beyond EOD, truncated [ 67.439023][ T5727] loop6: p5 size 134217732 extends beyond EOD, truncated [ 67.455520][ T5727] loop6: p6 size 14876672 extends beyond EOD, truncated [ 67.531299][ T5754] netlink: 4 bytes leftover after parsing attributes in process `syz.5.537'. [ 67.549003][ T5748] loop5: detected capacity change from 0 to 512 [ 67.595588][ T5758] netlink: 8 bytes leftover after parsing attributes in process `Ptp'. [ 67.603910][ T5758] netlink: 12 bytes leftover after parsing attributes in process `Ptp'. [ 67.640634][ T5748] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.653876][ T5748] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.712331][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 67.724343][ T5757] udevd[5757]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 67.737022][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory [ 67.737755][ T3597] udevd[3597]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 67.759146][ T3600] udevd[3600]: inotify_add_watch(7, /dev/loop6p6, 10) failed: No such file or directory [ 67.808540][ T4048] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.825370][ T3600] udevd[3600]: inotify_add_watch(7, /dev/loop6p6, 10) failed: No such file or directory [ 67.829462][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory [ 67.836457][ T3597] udevd[3597]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 67.845210][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 67.857734][ T5757] udevd[5757]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 67.910520][ T5766] loop5: detected capacity change from 0 to 512 [ 68.020428][ T5776] dummy0: mtu less than device minimum [ 68.073087][ T5781] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 68.116112][ T5781] SELinux: failed to load policy [ 68.207144][ T5788] netlink: 28 bytes leftover after parsing attributes in process `syz.5.549'. [ 68.216071][ T5788] netlink: 28 bytes leftover after parsing attributes in process `syz.5.549'. [ 68.241070][ T5792] syzkaller1: entered promiscuous mode [ 68.246603][ T5792] syzkaller1: entered allmulticast mode [ 68.311939][ T5795] loop5: detected capacity change from 0 to 1024 [ 68.318895][ T5795] EXT4-fs: inline encryption not supported [ 68.339812][ T5795] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.471171][ T4048] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.504927][ T5824] netlink: 272 bytes leftover after parsing attributes in process `syz.5.559'. [ 68.581809][ T4160] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.594538][ T4160] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.613275][ T4160] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.630646][ T4160] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.797755][ T5848] netlink: 'syz.6.563': attribute type 10 has an invalid length. [ 68.805704][ T5848] lo: entered promiscuous mode [ 68.812051][ T5848] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 68.944488][ T5850] loop5: detected capacity change from 0 to 512 [ 68.961800][ T5850] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 68.982884][ T5850] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.004861][ T5850] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.032337][ T4048] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.061002][ T5856] IPVS: Error connecting to the multicast addr [ 69.493385][ T5904] veth2: entered promiscuous mode [ 69.498564][ T5904] veth2: entered allmulticast mode [ 69.865722][ T3488] hid_parser_main: 19 callbacks suppressed [ 69.865738][ T3488] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.879053][ T3488] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.886529][ T3488] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.894004][ T3488] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.901416][ T3488] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.908828][ T3488] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.916263][ T3488] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.923678][ T3488] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.931153][ T3488] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.938541][ T3488] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.982108][ T3488] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [sy] on syz0 [ 70.032154][ T5960] fido_id[5960]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 70.081666][ T5978] loop6: detected capacity change from 0 to 1024 [ 70.088896][ T5978] EXT4-fs: Ignoring removed orlov option [ 70.136174][ T5978] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.287477][ T5992] xt_CT: You must specify a L4 protocol and not use inversions on it [ 70.458378][ T6003] dummy0: entered allmulticast mode [ 70.463914][ T6003] dummy0: left allmulticast mode [ 70.527868][ T6017] 9p: Bad value for 'rfdno' [ 70.875809][ T4923] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.143034][ T29] kauditd_printk_skb: 1013 callbacks suppressed [ 71.143071][ T29] audit: type=1326 audit(1767880603.570:5530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6045 comm="syz.6.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac808af749 code=0x7ffc0000 [ 71.248105][ T29] audit: type=1326 audit(1767880603.600:5531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6045 comm="syz.6.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fac808af749 code=0x7ffc0000 [ 71.271425][ T29] audit: type=1326 audit(1767880603.600:5532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6045 comm="syz.6.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac808af749 code=0x7ffc0000 [ 71.294921][ T29] audit: type=1326 audit(1767880603.600:5533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6045 comm="syz.6.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7fac808af749 code=0x7ffc0000 [ 71.318365][ T29] audit: type=1326 audit(1767880603.600:5534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6045 comm="syz.6.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac808af749 code=0x7ffc0000 [ 71.427868][ T29] audit: type=1400 audit(1767880603.820:5535): avc: denied { write } for pid=6058 comm="syz.5.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 71.470713][ T6063] SELinux: Context @ is not valid (left unmapped). [ 71.470765][ T29] audit: type=1400 audit(1767880603.900:5536): avc: denied { mac_admin } for pid=6062 comm="syz.0.624" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 71.529274][ T29] audit: type=1400 audit(1767880603.900:5537): avc: denied { relabelto } for pid=6062 comm="syz.0.624" name="cgroup.controllers" dev="tmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="@" [ 71.554074][ T29] audit: type=1400 audit(1767880603.900:5538): avc: denied { associate } for pid=6062 comm="syz.0.624" name="cgroup.controllers" dev="tmpfs" ino=759 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="@" [ 71.586361][ T29] audit: type=1326 audit(1767880604.010:5539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6062 comm="syz.0.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd897bcf749 code=0x7ffc0000 [ 71.589992][ T6067] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6067 comm=syz.6.625 [ 71.642578][ T6068] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=6068 comm=syz.6.625 [ 71.707900][ T6071] tipc: Enabling of bearer rejected, failed to enable media [ 71.790540][ T6075] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 71.862350][ T6086] loop6: detected capacity change from 0 to 512 [ 71.875325][ T6086] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 71.895030][ T6088] __nla_validate_parse: 12 callbacks suppressed [ 71.895044][ T6088] netlink: 16 bytes leftover after parsing attributes in process `syz.4.632'. [ 71.940601][ T6090] netlink: 12 bytes leftover after parsing attributes in process `syz.5.633'. [ 72.092975][ T6102] loop5: detected capacity change from 0 to 512 [ 72.103964][ T6100] loop4: detected capacity change from 0 to 512 [ 72.148644][ T6109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.165156][ T6109] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 72.166052][ T6102] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.178968][ T6109] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 72.190045][ T6102] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.255840][ T6102] ipip0: entered promiscuous mode [ 72.481865][ T4048] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.492869][ T6139] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 72.531507][ T6142] netlink: 508 bytes leftover after parsing attributes in process `syz.6.645'. [ 72.572016][ T6144] loop5: detected capacity change from 0 to 256 [ 72.600815][ T6144] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 72.654820][ T6144] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 72.690360][ T6144] netlink: 4 bytes leftover after parsing attributes in process `syz.5.646'. [ 72.729044][ T6148] loop6: detected capacity change from 0 to 2048 [ 72.754862][ T6120] syz.1.640 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 72.766156][ T6120] CPU: 0 UID: 0 PID: 6120 Comm: syz.1.640 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 72.766191][ T6120] Tainted: [W]=WARN [ 72.766256][ T6120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 72.766269][ T6120] Call Trace: [ 72.766275][ T6120] [ 72.766323][ T6120] __dump_stack+0x1d/0x30 [ 72.766354][ T6120] dump_stack_lvl+0x95/0xd0 [ 72.766466][ T6120] dump_stack+0x15/0x1b [ 72.766482][ T6120] dump_header+0x81/0x240 [ 72.766499][ T6120] oom_kill_process+0x295/0x350 [ 72.766522][ T6120] out_of_memory+0x97b/0xb80 [ 72.766581][ T6120] try_charge_memcg+0x610/0xa10 [ 72.766618][ T6120] charge_memcg+0x51/0xc0 [ 72.766645][ T6120] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 72.766710][ T6120] __read_swap_cache_async+0x17b/0x2d0 [ 72.766742][ T6120] swap_cluster_readahead+0x262/0x3c0 [ 72.766775][ T6120] swapin_readahead+0xde/0x820 [ 72.766902][ T6120] ? mod_memcg_lruvec_state+0x1a1/0x280 [ 72.766926][ T6120] ? lruvec_stat_mod_folio+0xd6/0x120 [ 72.766950][ T6120] ? __rcu_read_unlock+0x4f/0x70 [ 72.766995][ T6120] ? swap_cache_get_folio+0x277/0x280 [ 72.767024][ T6120] do_swap_page+0x2b4/0x21e0 [ 72.767115][ T6120] ? __pfx_default_wake_function+0x10/0x10 [ 72.767152][ T6120] handle_mm_fault+0x9d8/0x2c60 [ 72.767183][ T6120] do_user_addr_fault+0x630/0x1080 [ 72.767208][ T6120] exc_page_fault+0x62/0xa0 [ 72.767235][ T6120] asm_exc_page_fault+0x26/0x30 [ 72.767337][ T6120] RIP: 0033:0x7f6555dd59c8 [ 72.767353][ T6120] Code: 48 f7 f1 48 01 d8 49 39 c4 4c 0f 42 e0 83 3d fa 23 38 00 00 0f 8e 09 fe ff ff e8 23 98 fe ff 49 39 c4 72 66 66 0f 1f 44 00 00 <69> 3d c6 fc ea 00 e8 03 00 00 48 8d 1d c7 05 38 00 e8 c2 9c 12 00 [ 72.767418][ T6120] RSP: 002b:00007ffcc8c4c5a0 EFLAGS: 00010216 [ 72.767496][ T6120] RAX: 0000000000011c0e RBX: 00007f6556157da0 RCX: 0000000000011940 [ 72.767510][ T6120] RDX: 00000000000002ce RSI: 00007ffcc8c4c580 RDI: 0000000000000001 [ 72.767523][ T6120] RBP: 00007f6556157da0 R08: 000000002ad2637a R09: 7fffffffffffffff [ 72.767536][ T6120] R10: 3fffffffffffffff R11: 0000000000000293 R12: 0000000000011d73 [ 72.767550][ T6120] R13: 00007f6556156180 R14: ffffffffffffffff R15: 00007ffcc8c4c6b0 [ 72.767570][ T6120] [ 72.767577][ T6120] memory: usage 307200kB, limit 307200kB, failcnt 4091 [ 72.910202][ T6148] EXT4-fs (loop6): failed to initialize system zone (-117) [ 72.912449][ T6120] memory+swap: usage 307660kB, limit 9007199254740988kB, failcnt 0 [ 72.977124][ T6148] EXT4-fs (loop6): mount failed [ 72.978238][ T6120] kmem: usage 307116kB, limit 9007199254740988kB, failcnt 0 [ 73.015435][ T6120] Memory cgroup stats for /syz1: [ 73.015770][ T6120] cache 0 [ 73.018956][ T6148] netlink: 40 bytes leftover after parsing attributes in process `syz.6.647'. [ 73.020807][ T6120] rss 8192 [ 73.035636][ T6120] shmem 0 [ 73.038626][ T6120] mapped_file 0 [ 73.042136][ T6120] dirty 0 [ 73.045067][ T6120] writeback 12288 [ 73.048748][ T6120] workingset_refault_anon 90 [ 73.050397][ T6148] netlink: 4 bytes leftover after parsing attributes in process `syz.6.647'. [ 73.053355][ T6120] workingset_refault_file 523 [ 73.066805][ T6120] swap 479232 [ 73.070113][ T6120] swapcached 28672 [ 73.073817][ T6120] pgpgin 85901 [ 73.077171][ T6120] pgpgout 85894 [ 73.080662][ T6120] pgfault 71154 [ 73.084118][ T6120] pgmajfault 41 [ 73.087580][ T6120] inactive_anon 24576 [ 73.091576][ T6120] active_anon 0 [ 73.095022][ T6120] inactive_file 0 [ 73.098641][ T6120] active_file 0 [ 73.102135][ T6120] unevictable 0 [ 73.105581][ T6120] hierarchical_memory_limit 314572800 [ 73.110968][ T6120] hierarchical_memsw_limit 9223372036854771712 [ 73.117141][ T6120] total_cache 0 [ 73.120621][ T6120] total_rss 8192 [ 73.124158][ T6120] total_shmem 0 [ 73.127600][ T6120] total_mapped_file 0 [ 73.131591][ T6120] total_dirty 0 [ 73.135039][ T6120] total_writeback 12288 [ 73.139175][ T6120] total_workingset_refault_anon 90 [ 73.144370][ T6120] total_workingset_refault_file 523 [ 73.149614][ T6120] total_swap 479232 [ 73.153453][ T6120] total_swapcached 28672 [ 73.157683][ T6120] total_pgpgin 85901 [ 73.161587][ T6120] total_pgpgout 85894 [ 73.165635][ T6120] total_pgfault 71154 [ 73.169626][ T6120] total_pgmajfault 41 [ 73.173635][ T6120] total_inactive_anon 24576 [ 73.178135][ T6120] total_active_anon 0 [ 73.182171][ T6120] total_inactive_file 0 [ 73.186308][ T6120] total_active_file 0 [ 73.190315][ T6120] total_unevictable 0 [ 73.194279][ T6120] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.640,pid=6120,uid=0 [ 73.208850][ T6120] Memory cgroup out of memory: Killed process 6120 (syz.1.640) total-vm:98336kB, anon-rss:1136kB, file-rss:26280kB, shmem-rss:128kB, UID:0 pgtables:156kB oom_score_adj:1000 [ 73.456443][ T6172] netlink: 4 bytes leftover after parsing attributes in process `syz.0.654'. [ 73.484196][ T6189] netlink: 12 bytes leftover after parsing attributes in process `syz.6.658'. [ 73.554892][ T6186] ipip1: entered promiscuous mode [ 73.863493][ T6210] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 73.870034][ T6210] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 73.877672][ T6210] vhci_hcd vhci_hcd.0: Device attached [ 74.136653][ T6211] vhci_hcd: connection closed [ 74.136847][ T4158] vhci_hcd vhci_hcd.4: stop threads [ 74.146886][ T4158] vhci_hcd vhci_hcd.4: release socket [ 74.152293][ T4158] vhci_hcd vhci_hcd.4: disconnect device [ 74.169520][ T1039] usb 9-1: new low-speed USB device number 2 using vhci_hcd [ 74.183348][ T1039] usb 9-1: enqueue for inactive port 0 [ 74.188944][ T1039] usb 9-1: enqueue for inactive port 0 [ 74.194674][ T1039] usb 9-1: enqueue for inactive port 0 [ 74.200513][ T6222] netlink: 4 bytes leftover after parsing attributes in process `syz.4.665'. [ 74.241020][ T6222] netlink: 4 bytes leftover after parsing attributes in process `syz.4.665'. [ 74.329215][ T6236] loop4: detected capacity change from 0 to 2048 [ 74.336573][ T6236] EXT4-fs (loop4): invalid inodes per group: 134217760 [ 74.336573][ T6236] [ 74.337800][ T1039] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 74.483902][ T6253] loop4: detected capacity change from 0 to 1024 [ 74.534084][ T6253] EXT4-fs: Ignoring removed nobh option [ 74.540205][ T6253] EXT4-fs: inline encryption not supported [ 74.605178][ T6257] $Hÿ: renamed from bond0 (while UP) [ 74.614394][ T6257] $Hÿ: entered promiscuous mode [ 74.619953][ T6257] bond_slave_0: entered promiscuous mode [ 74.625906][ T6257] bond_slave_1: entered promiscuous mode [ 74.637100][ T6253] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.793926][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.087308][ T6286] x_tables: duplicate underflow at hook 1 [ 75.434066][ T6313] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6313 comm=syz.0.682 [ 75.956461][ T6344] loop6: detected capacity change from 0 to 512 [ 76.013900][ T6344] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.055113][ T6344] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.087351][ T6344] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.146009][ T6360] rdma_op ffff88811b9cc580 conn xmit_rdma 0000000000000000 [ 76.739994][ T29] kauditd_printk_skb: 169 callbacks suppressed [ 76.740009][ T29] audit: type=1400 audit(1767880609.170:5709): avc: denied { unlink } for pid=4923 comm="syz-executor" name="file0" dev="tmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 76.879990][ T29] audit: type=1400 audit(1767880609.290:5710): avc: denied { create } for pid=6398 comm="syz.6.692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 76.899464][ T29] audit: type=1400 audit(1767880609.290:5711): avc: denied { setopt } for pid=6398 comm="syz.6.692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 76.910099][ T6400] __nla_validate_parse: 5 callbacks suppressed [ 76.910114][ T6400] netlink: 4 bytes leftover after parsing attributes in process `syz.0.691'. [ 76.981976][ T6403] netlink: 4 bytes leftover after parsing attributes in process `syz.0.691'. [ 76.991803][ T6412] netlink: 'syz.6.693': attribute type 1 has an invalid length. [ 77.025092][ T6412] bond1: entered promiscuous mode [ 77.030611][ T6412] 8021q: adding VLAN 0 to HW filter on device bond1 [ 77.041924][ T6410] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 77.106996][ T29] audit: type=1400 audit(1767880609.520:5712): avc: denied { read } for pid=6419 comm="syz.6.694" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 77.130494][ T29] audit: type=1400 audit(1767880609.520:5713): avc: denied { open } for pid=6419 comm="syz.6.694" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 77.154178][ T29] audit: type=1400 audit(1767880609.520:5714): avc: denied { ioctl } for pid=6419 comm="syz.6.694" path="/dev/usbmon0" dev="devtmpfs" ino=141 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 77.179464][ T29] audit: type=1400 audit(1767880609.530:5715): avc: denied { bind } for pid=6421 comm="syz.0.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 77.199864][ T29] audit: type=1400 audit(1767880609.530:5716): avc: denied { setopt } for pid=6421 comm="syz.0.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 77.231317][ T6424] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.293772][ T6424] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.342398][ T6424] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.395915][ T6440] loop6: detected capacity change from 0 to 1024 [ 77.415976][ T6440] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 77.427335][ T6440] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 77.455985][ T6424] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.469292][ T6440] JBD2: no valid journal superblock found [ 77.475344][ T6440] EXT4-fs (loop6): Could not load journal inode [ 77.513747][ T6440] loop6: detected capacity change from 0 to 1024 [ 77.529301][ T6440] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 77.540387][ T6440] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 77.602041][ T6440] JBD2: no valid journal superblock found [ 77.608045][ T6440] EXT4-fs (loop6): Could not load journal inode [ 77.631269][ T4160] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.645388][ T4160] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.654193][ T4160] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.662741][ T4160] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.679645][ T6440] loop6: detected capacity change from 0 to 1024 [ 77.693110][ T6440] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 77.704239][ T6440] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 77.717474][ T6440] JBD2: no valid journal superblock found [ 77.723378][ T6440] EXT4-fs (loop6): Could not load journal inode [ 77.770149][ T6440] loop6: detected capacity change from 0 to 1024 [ 77.786845][ T6440] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 77.797846][ T6440] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 77.819610][ T6440] JBD2: no valid journal superblock found [ 77.825549][ T6440] EXT4-fs (loop6): Could not load journal inode [ 77.918734][ T6440] loop6: detected capacity change from 0 to 1024 [ 77.958271][ T6440] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 77.969298][ T6440] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 78.021013][ T6440] JBD2: no valid journal superblock found [ 78.026823][ T6440] EXT4-fs (loop6): Could not load journal inode [ 78.054507][ T29] audit: type=1326 audit(1767880610.480:5717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6481 comm="syz.4.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f703f4ff749 code=0x7ffc0000 [ 78.094074][ T6440] loop6: detected capacity change from 0 to 1024 [ 78.127556][ T6440] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 78.131163][ T29] audit: type=1326 audit(1767880610.510:5718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6481 comm="syz.4.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f703f4ff749 code=0x7ffc0000 [ 78.138481][ T6440] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 78.202048][ T6440] JBD2: no valid journal superblock found [ 78.207986][ T6440] EXT4-fs (loop6): Could not load journal inode [ 78.222199][ T6440] loop6: detected capacity change from 0 to 1024 [ 78.231864][ T6440] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 78.242923][ T6440] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 78.293560][ T6440] JBD2: no valid journal superblock found [ 78.299487][ T6440] EXT4-fs (loop6): Could not load journal inode [ 78.369065][ T6506] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 78.378446][ T6440] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 78.389387][ T6440] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 78.401593][ T6506] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #13: comm syz.4.706: iget: bad i_size value: 12154757448730 [ 78.414972][ T6506] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.706: couldn't read orphan inode 13 (err -117) [ 78.428039][ T6440] JBD2: no valid journal superblock found [ 78.430526][ T6506] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.434012][ T6440] EXT4-fs (loop6): Could not load journal inode [ 78.522243][ T6440] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 78.533495][ T6440] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 78.546002][ T6507] EXT4-fs warning (device loop4): ext4_lookup:1797: Inconsistent encryption contexts: 2/12 [ 78.569305][ T6506] EXT4-fs warning (device loop4): ext4_lookup:1797: Inconsistent encryption contexts: 2/12 [ 78.579832][ T6440] JBD2: no valid journal superblock found [ 78.585710][ T6440] EXT4-fs (loop6): Could not load journal inode [ 78.621134][ T6517] tipc: Started in network mode [ 78.626114][ T6517] tipc: Node identity ac14140f, cluster identity 4711 [ 78.633190][ T6517] tipc: New replicast peer: 255.255.255.255 [ 78.639514][ T6517] tipc: Enabled bearer , priority 10 [ 78.728197][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.765087][ T6440] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 78.776300][ T6440] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 78.792947][ T6440] JBD2: no valid journal superblock found [ 78.798846][ T6440] EXT4-fs (loop6): Could not load journal inode [ 78.986351][ T6440] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 78.997278][ T6440] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 79.034431][ T6440] JBD2: no valid journal superblock found [ 79.040452][ T6440] EXT4-fs (loop6): Could not load journal inode [ 79.080427][ T6440] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 79.091380][ T6440] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 79.102725][ T6440] JBD2: no valid journal superblock found [ 79.108617][ T6440] EXT4-fs (loop6): Could not load journal inode [ 79.144979][ T6440] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 79.155921][ T6440] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 79.176426][ T6440] JBD2: no valid journal superblock found [ 79.182559][ T6440] EXT4-fs (loop6): Could not load journal inode [ 79.214847][ T6440] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 79.225833][ T6440] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 79.238895][ T6440] JBD2: no valid journal superblock found [ 79.244877][ T6440] EXT4-fs (loop6): Could not load journal inode [ 79.275043][ T6440] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 79.286055][ T6440] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 79.298072][ T6440] JBD2: no valid journal superblock found [ 79.304014][ T6440] EXT4-fs (loop6): Could not load journal inode [ 79.324493][ T6440] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 79.335541][ T6440] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 79.347111][ T6440] JBD2: no valid journal superblock found [ 79.352947][ T6440] EXT4-fs (loop6): Could not load journal inode [ 79.382639][ T6440] set_capacity_and_notify: 10 callbacks suppressed [ 79.382661][ T6440] loop6: detected capacity change from 0 to 1024 [ 79.398685][ T6440] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 79.409855][ T6440] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 79.424829][ T6440] JBD2: no valid journal superblock found [ 79.430844][ T6440] EXT4-fs (loop6): Could not load journal inode [ 79.449162][ T6440] loop6: detected capacity change from 0 to 1024 [ 79.473300][ T6440] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 79.484536][ T6440] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 79.497333][ T6440] JBD2: no valid journal superblock found [ 79.503235][ T6440] EXT4-fs (loop6): Could not load journal inode [ 79.533055][ T6440] loop6: detected capacity change from 0 to 1024 [ 79.547026][ T6440] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 79.557989][ T6440] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 79.569040][ T6440] JBD2: no valid journal superblock found [ 79.574917][ T6440] EXT4-fs (loop6): Could not load journal inode [ 79.627067][ T6440] loop6: detected capacity change from 0 to 1024 [ 79.641426][ T6440] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 79.652529][ T6440] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 79.669824][ T6440] JBD2: no valid journal superblock found [ 79.675784][ T6440] EXT4-fs (loop6): Could not load journal inode [ 79.740727][ T6440] loop6: detected capacity change from 0 to 1024 [ 79.758214][ T10] tipc: Node number set to 2886997007 [ 79.765494][ T6440] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 79.776540][ T6440] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 79.810484][ T6440] JBD2: no valid journal superblock found [ 79.816289][ T6440] EXT4-fs (loop6): Could not load journal inode [ 79.858734][ T6440] loop6: detected capacity change from 0 to 1024 [ 79.863823][ T6557] netlink: 'syz.5.720': attribute type 21 has an invalid length. [ 79.888451][ T6440] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 79.899585][ T6440] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 79.906072][ T6557] netlink: 132 bytes leftover after parsing attributes in process `syz.5.720'. [ 79.918155][ T6557] netlink: 20 bytes leftover after parsing attributes in process `syz.5.720'. [ 79.940448][ T6440] JBD2: no valid journal superblock found [ 79.946353][ T6440] EXT4-fs (loop6): Could not load journal inode [ 80.033023][ T6440] loop6: detected capacity change from 0 to 1024 [ 80.062798][ T6570] bridge_slave_0: entered promiscuous mode [ 80.068799][ T6570] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 80.075320][ T6440] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 80.096033][ T6440] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 80.120013][ T6440] JBD2: no valid journal superblock found [ 80.125926][ T6440] EXT4-fs (loop6): Could not load journal inode [ 80.188310][ T3402] kernel read not supported for file /390/coredump_filter (pid: 3402 comm: kworker/0:3) [ 80.236903][ T6560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.721'. [ 80.261068][ T6440] loop6: detected capacity change from 0 to 1024 [ 80.291305][ T6440] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 80.302376][ T6440] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 80.315282][ T6440] JBD2: no valid journal superblock found [ 80.321252][ T6440] EXT4-fs (loop6): Could not load journal inode [ 80.346806][ T6440] loop6: detected capacity change from 0 to 1024 [ 80.386942][ T6584] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.416837][ T6591] netlink: 'syz.0.732': attribute type 9 has an invalid length. [ 80.460390][ T6584] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.491485][ T6597] xt_TCPMSS: Only works on TCP SYN packets [ 80.525934][ T6600] 9p: Bad value for 'wfdno' [ 80.546962][ T6584] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.603073][ T6584] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.708450][ T4142] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.728567][ T4142] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.743247][ T4142] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.751737][ T4142] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.841081][ T6615] 9pnet_fd: Insufficient options for proto=fd [ 81.738391][ T6654] netlink: 'syz.4.758': attribute type 16 has an invalid length. [ 81.746208][ T6654] netlink: 156 bytes leftover after parsing attributes in process `syz.4.758'. [ 81.746264][ T6639] loop6: detected capacity change from 0 to 128 [ 81.765946][ T6639] vfat: Unknown parameter '1844674407370955161518446744073709551615ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿþ.Ï ©¡{Òí~€?ƒuÁP¡øHöÂÁù2Ò·;ä²¹¥½R\ûîU['`…”¾ºc%’:¯]·Lÿ' [ 81.817049][ T6663] netlink: 'syz.1.760': attribute type 13 has an invalid length. [ 81.824332][ T29] kauditd_printk_skb: 348 callbacks suppressed [ 81.824346][ T29] audit: type=1326 audit(1767880614.250:6067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6665 comm="syz.0.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd897bcf749 code=0x7ffc0000 [ 81.863103][ T29] audit: type=1400 audit(1767880614.260:6068): avc: denied { bind } for pid=6662 comm="syz.1.760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 81.883270][ T29] audit: type=1400 audit(1767880614.260:6069): avc: denied { connect } for pid=6662 comm="syz.1.760" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 81.903608][ T29] audit: type=1326 audit(1767880614.280:6070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6665 comm="syz.0.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd897bcf749 code=0x7ffc0000 [ 81.927203][ T29] audit: type=1326 audit(1767880614.280:6071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6665 comm="syz.0.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd897bcf749 code=0x7ffc0000 [ 81.950743][ T29] audit: type=1326 audit(1767880614.280:6072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6665 comm="syz.0.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd897bcf749 code=0x7ffc0000 [ 81.974383][ T29] audit: type=1326 audit(1767880614.280:6073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6665 comm="syz.0.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd897bcf749 code=0x7ffc0000 [ 81.997853][ T29] audit: type=1326 audit(1767880614.280:6074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6665 comm="syz.0.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd897bcf749 code=0x7ffc0000 [ 82.021708][ T29] audit: type=1326 audit(1767880614.280:6075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6665 comm="syz.0.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd897bcf749 code=0x7ffc0000 [ 82.045241][ T29] audit: type=1326 audit(1767880614.280:6076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6665 comm="syz.0.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd897bcf749 code=0x7ffc0000 [ 82.278896][ T6695] netlink: 'syz.5.769': attribute type 4 has an invalid length. [ 82.294313][ T3006] udevd[3006]: worker [3597] terminated by signal 33 (Unknown signal 33) [ 82.322738][ T6688] netlink: 16 bytes leftover after parsing attributes in process `syz.0.768'. [ 82.325054][ T3006] udevd[3006]: worker [3597] failed while handling '/devices/virtual/block/loop5' [ 82.341599][ T6695] netlink: 'syz.5.769': attribute type 4 has an invalid length. [ 82.357693][ T3006] udevd[3006]: worker [3309] terminated by signal 33 (Unknown signal 33) [ 82.357718][ T3006] udevd[3006]: worker [3309] failed while handling '/devices/virtual/block/loop5' [ 82.464718][ T6709] netlink: 28 bytes leftover after parsing attributes in process `syz.1.772'. [ 82.473683][ T6709] netlink: 28 bytes leftover after parsing attributes in process `syz.1.772'. [ 82.480995][ T6712] netlink: 2028 bytes leftover after parsing attributes in process `syz.5.771'. [ 82.482611][ T6709] netlink: 1088 bytes leftover after parsing attributes in process `syz.1.772'. [ 82.491573][ T6712] netlink: 24 bytes leftover after parsing attributes in process `syz.5.771'. [ 82.544407][ T6718] netlink: 28 bytes leftover after parsing attributes in process `syz.0.774'. [ 82.569845][ T6725] netlink: 'syz.1.777': attribute type 10 has an invalid length. [ 82.577597][ T6725] netlink: 32 bytes leftover after parsing attributes in process `syz.1.777'. [ 82.607383][ T6728] netlink: 4 bytes leftover after parsing attributes in process `syz.6.776'. [ 82.627593][ T6725] ipvlan2: entered promiscuous mode [ 82.642164][ T6725] bridge0: port 1(ipvlan2) entered blocking state [ 82.648705][ T6725] bridge0: port 1(ipvlan2) entered disabled state [ 82.657315][ T6725] ipvlan2: entered allmulticast mode [ 82.662679][ T6725] bridge0: entered allmulticast mode [ 82.668920][ T6725] ipvlan2: left allmulticast mode [ 82.673999][ T6725] bridge0: left allmulticast mode [ 82.687123][ T6728] team1: entered promiscuous mode [ 82.692273][ T6728] team1: entered allmulticast mode [ 82.697977][ T6728] 8021q: adding VLAN 0 to HW filter on device team1 [ 82.731522][ T6739] tipc: Enabling of bearer rejected, already enabled [ 82.788315][ T6744] netlink: 'syz.1.783': attribute type 4 has an invalid length. [ 82.810627][ T6745] netlink: 'syz.1.783': attribute type 4 has an invalid length. [ 82.825217][ T6748] netlink: 12 bytes leftover after parsing attributes in process `syz.0.784'. [ 82.951766][ T6753] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 82.956476][ T6751] SELinux: Context system_u:object_r:pam_console_exec_t:s0 is not valid (left unmapped). [ 83.039643][ T6753] EXT4-fs (loop5): mount failed [ 83.448151][ T6781] xt_CT: You must specify a L4 protocol and not use inversions on it [ 83.822728][ T6781] bridge0: port 3(gretap0) entered blocking state [ 83.829188][ T6781] bridge0: port 3(gretap0) entered disabled state [ 83.890464][ T6791] bridge0: port 3(gretap0) entered disabled state [ 83.941096][ T6781] netlink: 'syz.5.792': attribute type 13 has an invalid length. [ 83.956927][ T6793] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 83.980004][ T6793] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 84.599487][ T1039] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 84.626944][ T6847] netlink: 'gtp': attribute type 3 has an invalid length. [ 84.891829][ T6879] set_capacity_and_notify: 2 callbacks suppressed [ 84.891874][ T6879] loop6: detected capacity change from 0 to 512 [ 84.912409][ T6877] loop5: detected capacity change from 0 to 512 [ 84.933598][ T3006] ================================================================== [ 84.941706][ T3006] BUG: KCSAN: data-race in d_delete / lookup_fast [ 84.948129][ T3006] [ 84.950446][ T3006] read-write to 0xffff88810056bcc0 of 4 bytes by task 5757 on cpu 0: [ 84.958501][ T3006] d_delete+0x15a/0x180 [ 84.960519][ T6877] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.962644][ T3006] d_delete_notify+0x32/0x100 [ 84.962666][ T3006] vfs_unlink+0x32c/0x440 [ 84.975512][ T6877] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.979754][ T3006] do_unlinkat+0x1cd/0x4b0 [ 84.979775][ T3006] __x64_sys_unlink+0x2e/0x40 [ 84.979792][ T3006] x64_sys_call+0x2f48/0x3000 [ 84.979813][ T3006] do_syscall_64+0xca/0x2b0 [ 84.979837][ T3006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.979853][ T3006] [ 84.979859][ T3006] read to 0xffff88810056bcc0 of 4 bytes by task 3006 on cpu 1: [ 85.028558][ T3006] lookup_fast+0xf0/0x320 [ 85.032911][ T3006] path_lookupat+0x15c/0x500 [ 85.037512][ T3006] filename_lookup+0x147/0x340 [ 85.040027][ T6879] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #3: comm syz.6.818: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 85.042280][ T3006] do_readlinkat+0x7d/0x320 [ 85.060408][ T6879] EXT4-fs error (device loop6): ext4_quota_enable:7180: comm syz.6.818: Bad quota inode: 3, type: 0 [ 85.064458][ T3006] __x64_sys_readlink+0x47/0x60 [ 85.075561][ T6879] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 85.080035][ T3006] x64_sys_call+0x2af1/0x3000 [ 85.080062][ T3006] do_syscall_64+0xca/0x2b0 [ 85.080087][ T3006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.095255][ T6879] EXT4-fs (loop6): mount failed [ 85.099297][ T3006] [ 85.099303][ T3006] value changed: 0x00300180 -> 0x00004080 [ 85.099315][ T3006] [ 85.099318][ T3006] Reported by Kernel Concurrency Sanitizer on: [ 85.099333][ T3006] CPU: 1 UID: 0 PID: 3006 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 85.141793][ T3006] Tainted: [W]=WARN [ 85.145587][ T3006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 85.155639][ T3006] ================================================================== [ 85.164193][ T5200] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 85.178304][ T4035] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 85.343857][ T4048] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.219611][ T4152] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 86.227442][ T4152] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 86.279468][ T5200] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 90.379432][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!