last executing test programs: 6m45.874557559s ago: executing program 3 (id=822): add_key$keyring(&(0x7f0000000400), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000000000000000000000181100", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10) 6m45.852002331s ago: executing program 3 (id=824): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) getpid() socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0xfe, 0x0, 0xfc, 0x0, 0x0, 0x5022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200, 0x2, 0x40, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="7df146ad9936e3415b451c7b3e62cbf7af1c2b67ae27110944f6d76720220a8670232deabc10848956dc47aefe4f45a0c1b156b684fef8bfa7dff77f050aafdff905307e51d19c1b1939271451673b6e07d64045859be44ee0e6f9a9226368d6f6097ad727d6701d2a72d2e470666283045a18ef329b0e9b6349f394b88cfe7ea98396a5ab278a66b7898f02cfd64d00"/159], 0x48) 6m44.970867279s ago: executing program 3 (id=837): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x10000002}, 0x18) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) 6m44.903199516s ago: executing program 3 (id=838): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000080)=@ethtool_sset_info={0x37, 0x8, 0xfffffffffffffffb}}) 6m44.832556663s ago: executing program 3 (id=841): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x2000000}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000280)=@base={0x18, 0x4, 0xc1, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x50) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x464, &(0x7f0000000ac0)="$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") mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x800010, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000240)='./file0\x00') r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d19f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2a434b9048ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d6356e4450d043ed20d313cd56a56d2e4cdf26f19af9a41695a58a9b6b45af1ca939b18d7b57791b99cfc6ec2a0848c29fea4eb8b82395a38e8aca5ab4bfc2ad8acf2e51b766f8ecd16194ad41ec097082f7fa32179ef99dafa6c2aa206a25ddc33e6f0a09169eeff428c71f54e1dfcfcd7cfc8f6e169f11c47d504"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000140)="b9ff03076804268cb89e14f088a847e0ffff2086dd0000000000ac141416e0885a049a179424", 0x0, 0x3000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001400030500008000ffdbdf25020751ff", @ANYRES32=r4, @ANYBLOB="080002007f00000108000c00e00000021400030076657468305f746f5f62726964676500281032494e99a8a98dc6621025dede9096db84a65a83a1bbcaa8fc10ec"], 0x3c}, 0x1, 0x0, 0x0, 0xc090}, 0x0) 6m43.356820571s ago: executing program 3 (id=859): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x10000002}, 0x18) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) 6m28.241856883s ago: executing program 32 (id=859): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x10000002}, 0x18) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) 1m34.885194774s ago: executing program 5 (id=4907): connect$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x2000000000000228, &(0x7f00000000c0)=[{0x7, 0x4, 0x0, 0x7ffc1ffb}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x7) bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getresuid(0x0, 0x0, &(0x7f00000005c0)) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e20, @rand_addr=0x64010102}, 0xffffffffffffff05) writev(r4, 0x0, 0x0) r5 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r5, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)=':00:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r7 = inotify_init1(0x0) inotify_add_watch(r7, &(0x7f0000000380)='./file0\x00', 0x34000601) 1m33.94438734s ago: executing program 5 (id=4916): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x8) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000280)={0x591002, 0x1, 0xc}, 0x18) 1m33.93842431s ago: executing program 5 (id=4917): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x5) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETA(r3, 0x5406, &(0x7f0000000300)={0x5, 0x400, 0xe2, 0x4, 0xf, "a0d221bf9a34cdcf"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x3) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)=0x3) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000400)=0x7) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESDEC=r4], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000003d80)=[{{&(0x7f0000000000)={0xa, 0x4e28, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="38020000000000002900000036000000004300000000000004013f040100c910ff010000000000000000000000000001c910fc0000000000000000000000000000000001000740000000000e07010101000000010000000200000000000000000000000000000001000000010000002000000000000000ffffffff00000000ffffffffffffff7f06aeb07c1c192077cc9e7c45705803ad5588ca8b194d23f748fe792cfa5732221f25d73b8ffe64a4ddda6efcfb7483b588194d29c7a04395d8500965a9a1d07879040c44db1d5d6f618d2ab920f0bf168ddc9acc6a51edd1230760d4ae8bf30f5f82a78e8114849ee8e37364560400000035bfa8197ef2ba99103ee5f5aae28ec5c8e2675db11530f5c466d55f2244d479dc653c854406155eada3eaeb90d39149b8d13bab75a9bd1452c8c76284b9ddfbeff41344e64f1771d78a706e1c5a6d63f1c954e24a1e73f75c26e9f09ec9b606cc3470f11c4842db651926bd2263a4a0a8fe80de8b2f9cb176e51819d5f4d10a5d1f0488d5e46953fbfd750f6137fbebe89a8d462158a87f9622355104b4f68d7a6d3ad85c373ea52a25afad37ffb743a5c361158087904b09fcc806d032bac00ee0e0251fc032446e45a3e12417ff4703526ffc45f71567857777927903799e0ba453334186009d22e38099c67b5350c7e82136bba947a18fb61d36fcba1f9efe3d79485d06252702833dc8ee417f40bb9064878fb89dd75a49135e5df148c4ad1e1d5626b44c8112d822f4c9a05e693fd5ae5595627f8684016b37a2bf6d0040030000000000002900000037000000006500000000000000fb1a63687c244e6df3aecb13d6eb957495b669cc032f6d0a11a5e16eed9937b046c9dc1a61dcf9754b767df4735c3f8c37b4d5cd15a99c5a19cc62c921ad4e90d6e3695e85000000a53600d5031b5735acafb556e22279975f958ad437c76573e544506e58455772eb11493af933099a5dc7e9e0c8b907e68e23e59d7b94bc774309e2047132758b60955301f277a9032b0bc47e660b243e9e2126733f13ab99055a0999068ada35a38d105a5efe6c7115774effe28695ecae3944413b7764eefde26ed571d857b2cb2dd1b2a4a84c1fec0799cf90f57f7a6d35e2b60cd425b9372ae4a27f453e5d7da2eacd3b98cdb10cec9152d5829c2511eb0f9600a0cd280f3d08849b6cd43d25e3dcd62f7c7dee6123a2682daf4aa9a856b31e9204c5c2b80b84dbeec05d93a64a550f1ebc326488cd620c6fe1aa266a0ce5b24be03b5037786e037cc85ed61f362e081fb694e12e54fcb9eb0f86d6d91fd159023a073278f84d6ada8f9aa25ec223d268f3291b25392c941740932bd1a82f40a8fc586db23d2f6240ce883e3c1dc1e0d07fc3aa73a9ac82a1538d129c9e66cb6a8100abe95bc4064581e8c01ce65ba3ea751db5d8c0a1173fe62b2fd2d415042a97ade4d274a466b6d997eed6bf5d7a305ead804c36b9e1c314b26676ed83412417610d3cf4d07e5b24cf3de9c790ae93850e0f8bba047b710cf340c78a80cef5f6665a647681ff5f7b6ecce8ab65e26406b6a6e0e72ff8501c545bffc00f034dc3a5b251390ae68bb61d936dc9a24e6f66c72e7911c51c716dfd4304566fb32e6c2745d232f990d0bbe0ddf9dc58398dda292c07b16da766a37c60bd9993b4f21e641036a8afa2ccdb47d7990d5a007faccb2f86664179f2e229723bce870aec3f7f4e529c92add713590ce6c0ea1a0499fb76d32636cfd18b6b39fb48f1a6d46f6ae8f45c47ee8260f9531070d170ab92739be0bdf5b76f8a9b93a5e550dfecab79d2e46085a67024b6be883c79ade2873458fda5a7f4eb62b05634356ee3b45723f4cff19c654ad441ff5b8792df7f18d841c351e195151b1b3532e742a6525c86efdb29653f35ce8e0a41c8c6d39f39531e13aeb1172893eeedd83b6afb939f8e6abc5482696aa48918000000000000002900000037"], 0x590}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000100)="0a649329b2a344470f9bc0faa8d0cf04aa19bcc4cb4b0f6cccc826140704427ced8e3a0b950b7fffb3a6d5", 0x2b}], 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000a40)="bbaff6f79abc949198cd6f4d3415443c74f1494f04cd74b8e535cb215a2d2a09b69fb69788202a6511", 0x29}], 0x1}}, {{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000b00)="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", 0x1000}, {&(0x7f0000001d80)="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", 0x281}], 0x2}}], 0x4, 0x8008800) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000200)=0xa) ioctl$GIO_CMAP(r3, 0x4b70, &(0x7f0000000380)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000048000480240001800b00010072656a65637400001400028008000140000000000500020000000000200001800700010072740000140002800800014000000009080002400000000008000b40000000000900010073797a300000000014000000110001"], 0xf8}, 0x1, 0x0, 0x0, 0x2040441}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r0) 1m31.812880417s ago: executing program 5 (id=4944): perf_event_open(&(0x7f0000001000)={0x2, 0x80, 0x50, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0xc400, 0x0, 0x8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x8, 0x8000, 0x40, 0x1, {{0x5, 0x4, 0x2, 0x9, 0x14, 0x67, 0x0, 0x2, 0x4, 0x0, @remote, @loopback}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x0, 0x0, &(0x7f0000000340)='GPL\x00', 0x27b7b573, 0x0, 0x0, 0x41100, 0x4, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x5, 0x2, 0x2e, 0x7}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000540)=[{0x2, 0x4, 0xa, 0x1030e9421c9a6cd1}, {0x1, 0x3, 0xb}, {0x1, 0x1, 0x6, 0x9}, {0x4, 0x4, 0x4, 0xa}, {0x5, 0x3, 0x1, 0x9}, {0x0, 0x3, 0x0, 0x3}, {0x2, 0x4, 0x8, 0xf9d7430014b6089}], 0x10, 0x5}, 0x94) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r5, 0x0) connect$unix(r4, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r6 = io_uring_setup(0x6c21, 0x0) r7 = syz_io_uring_setup(0x4d49, 0x0, &(0x7f0000000140), &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9, 0x0, 0x7f}, 0x18) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c757466383d302c636865636b3d7374726963742c646973636172642c757466383d312c757466383d312c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c757466383d312c00ef5c3556"], 0xfd, 0x2a8, &(0x7f0000000280)="$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") r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8994, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r6, 0x21, &(0x7f0000000200)={0x0, 0x8d88, 0x4000, 0x2, 0xf, 0x0, r7}, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r11 = open_tree(r10, &(0x7f00000005c0)='./file1\x00', 0x88101) r12 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r12, 0x0, r11, 0x0, 0x46) setsockopt$MRT_DEL_VIF(r12, 0x0, 0xcb, &(0x7f0000000040)={0x0, 0x4, 0x8, 0x5, @vifc_lcl_addr=@rand_addr=0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 1m31.319478667s ago: executing program 5 (id=4952): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0xf) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) openat(r1, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50) faccessat(r1, &(0x7f0000000000)='./file0\x00', 0x5) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYRESDEC=r1, @ANYRES32=r0], 0x98}}, 0x4004030) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000780)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x1c0002, 0x0) write$vga_arbiter(r4, &(0x7f0000000180)=ANY=[@ANYBLOB='lock m'], 0x9) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0xc}, 0xc) setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, &(0x7f00000002c0)=0xe, 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000300)=ANY=[@ANYBLOB="000000000000aaaaaaaaaabb86dd6012000800103afffe8000000000000000000000000000bbec642722037db7ff0200000000000000000000000000018600907800000000fdffffff00000000"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b1000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0x1}, 0x1104, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x340c6, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x804, 0x1, 0x3, 0x5, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 1m31.228053207s ago: executing program 5 (id=4955): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) unshare(0x2c060000) unshare(0x2c020400) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) bind$packet(r5, &(0x7f0000000200)={0x11, 0x2, r6, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, 0x14) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0x3ff}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) sendmsg$unix(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2], 0x18, 0x40008c1}, 0x24000090) prctl$PR_SET_NAME(0xf, &(0x7f0000000840)='+}[@\x00\xdf\v8\x00\x8d)\xde\xdfcN5w\x92\xe7x\xd4\xb0-yA4\xa4\xa8e\x8e)\xd6\xbf\'\x8eC\x13\x00\x00\xf5\x83\xed\xd9\vQ\x19Z\xaa\xcf\xb9e\x10\x17h\xd8R\x02\x9fsH\xe7\xa2\xe9\xac\xe9\x83\xe6zgq\x8e\x0e\x86\xcd\xbd\t\x18)|\x19\x05D\xbaZ\x13\xb56\xa7\xde\xec\xbc\xab\x19\xb5\x8d\xae\b\xd3>\xb7\xcc\x8e\xd91R\x83\xbc\xbca\x11\x1b\n\xef&<\x8eLF\xa7F\xc7\xb8\\\n\x1b7\xb6\x81\xf5\v\x12J\xef@{\xa7\x06\x00\x00\x00\x00\xa4\xeb\xa9BJ&y\xbf$\x10\x1dS\xbc9\x96\x98bNi\xbd~\x16\xda\xdeD\x11\x83\xb3\xf4}\x9c\x98\xdfeG\x94[=e\x84\xaa]\x92l\xe4\x85\x87B\x10B\xb1 @\xf7\xc8\xe7\xff\xb1\xb7\xae\"XZ#\xa3\xd2\vBG\xd2\x85\'\x8e$\x8c\x0f\xc4\xf4\xd6\xe1\xb9Y\t\x8c\xcc_\xec\xedP\x1e\'\xdc\x85#\x021&\xa1B\x8a\x8c[\xc3\x8c\x8d\xf4\xa9p7$\x0f\x1f\xd9+\x9cWL\xeb\xe6+\x88j\x1c\xd8\xe75\xc54\xa4\x87l\xd6\xa3\xb20\x9c\x95E\x1aj:A\x9a\x9bK\x10\x80\x8d\xc3H4\xaa\xcd\x00\xec\xb6\xbb\xd4F.\xa9q\xa7t\xc2\xd6\xa1\xcdw\xa80L_c\xea\x01[\xa5y\x06L\xfcCz[r') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', 0xffffffffffffffff, 0x0, 0x8ce}, 0x18) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 1m31.207078358s ago: executing program 33 (id=4955): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) unshare(0x2c060000) unshare(0x2c020400) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) bind$packet(r5, &(0x7f0000000200)={0x11, 0x2, r6, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, 0x14) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0x3ff}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) sendmsg$unix(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2], 0x18, 0x40008c1}, 0x24000090) prctl$PR_SET_NAME(0xf, &(0x7f0000000840)='+}[@\x00\xdf\v8\x00\x8d)\xde\xdfcN5w\x92\xe7x\xd4\xb0-yA4\xa4\xa8e\x8e)\xd6\xbf\'\x8eC\x13\x00\x00\xf5\x83\xed\xd9\vQ\x19Z\xaa\xcf\xb9e\x10\x17h\xd8R\x02\x9fsH\xe7\xa2\xe9\xac\xe9\x83\xe6zgq\x8e\x0e\x86\xcd\xbd\t\x18)|\x19\x05D\xbaZ\x13\xb56\xa7\xde\xec\xbc\xab\x19\xb5\x8d\xae\b\xd3>\xb7\xcc\x8e\xd91R\x83\xbc\xbca\x11\x1b\n\xef&<\x8eLF\xa7F\xc7\xb8\\\n\x1b7\xb6\x81\xf5\v\x12J\xef@{\xa7\x06\x00\x00\x00\x00\xa4\xeb\xa9BJ&y\xbf$\x10\x1dS\xbc9\x96\x98bNi\xbd~\x16\xda\xdeD\x11\x83\xb3\xf4}\x9c\x98\xdfeG\x94[=e\x84\xaa]\x92l\xe4\x85\x87B\x10B\xb1 @\xf7\xc8\xe7\xff\xb1\xb7\xae\"XZ#\xa3\xd2\vBG\xd2\x85\'\x8e$\x8c\x0f\xc4\xf4\xd6\xe1\xb9Y\t\x8c\xcc_\xec\xedP\x1e\'\xdc\x85#\x021&\xa1B\x8a\x8c[\xc3\x8c\x8d\xf4\xa9p7$\x0f\x1f\xd9+\x9cWL\xeb\xe6+\x88j\x1c\xd8\xe75\xc54\xa4\x87l\xd6\xa3\xb20\x9c\x95E\x1aj:A\x9a\x9bK\x10\x80\x8d\xc3H4\xaa\xcd\x00\xec\xb6\xbb\xd4F.\xa9q\xa7t\xc2\xd6\xa1\xcdw\xa80L_c\xea\x01[\xa5y\x06L\xfcCz[r') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', 0xffffffffffffffff, 0x0, 0x8ce}, 0x18) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 53.676112497s ago: executing program 1 (id=5444): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @desc2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x1) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x4, 0x3, 0x3}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@fallback=r3, r3, 0x2f}, 0x20) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 53.658818438s ago: executing program 1 (id=5445): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040057}, 0x240008c4) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c00000007060104000000000000c0000000000a0500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004055}, 0x48000) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x94) sendfile(r3, r3, 0x0, 0x100000000) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r5, 0x0, 0x31, 0x0, 0x100000000) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0x4) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f00000008c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000880)={&(0x7f0000000640)={0x178, r9, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x84, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x48}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffff01}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe3c}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff0}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5a02}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffe}]}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xe0}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2f}]}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xecec}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x208}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x400}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff8e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_MEDIA={0x4}]}, 0x178}, 0x1, 0x0, 0x0, 0x850}, 0x8090) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000001000000280001801400040000000000000002000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000900)={0x1, 0x3}) socket$nl_route(0x10, 0x3, 0x0) 53.560008978s ago: executing program 1 (id=5447): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_WAITACTIVE(r0, 0x5607) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0700000004000000800000000100000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="006a939fa2fbb631df08e21f000000f900"/29], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000001cc0)=ANY=[@ANYBLOB, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_procfs(0x0, 0x0) pread64(r2, 0x0, 0x0, 0x4009) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r7}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)=r8}, 0x20) unshare(0x64000600) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r9, &(0x7f0000000140)='2', 0xfdef, 0xfecc) ioctl$EXT4_IOC_MOVE_EXT(r9, 0xc028660f, &(0x7f0000000040)={0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000580)=ANY=[@ANYRES64=r5, @ANYRESHEX, @ANYRESOCT=r3, @ANYRESDEC, @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) 3.954245457s ago: executing program 2 (id=5904): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg$unix(r2, &(0x7f0000000900)=[{{&(0x7f0000000440)=@abs, 0x6e, &(0x7f0000000800), 0x0, &(0x7f0000000840)}}], 0x1, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r6, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x54}, 0x7}, 0x1c) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r7) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8], 0x28}}, 0x0) 2.781980706s ago: executing program 7 (id=5906): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) r2 = socket(0x2, 0x3, 0x6) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x4dd8, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf80, 0x3}, 0x1c) syz_emit_ethernet(0x6a, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @mcast1}}}}}}}, 0x0) sendmsg$inet6(r0, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e3d, 0x100, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0xffffffff}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c0000002b0000000000000718"], 0x30}, 0x4000010) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=@newnexthop={0x90, 0x68, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @LWT_BPF_XMIT={0xc, 0x3, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8, 0x1, r3}}}, @NHA_RES_GROUP={0x24, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x6}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x9}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x3}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x4}]}, @NHA_FDB={0x4}, @NHA_RES_GROUP={0x2c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x8}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x81}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x9}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x1ff}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_BLACKHOLE={0x4}, @NHA_GROUP_TYPE={0x6}]}, 0x90}, 0x1, 0x0, 0x0, 0x24040040}, 0x804) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0xfffffdcc, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f0000000700)={'gretap0\x00', 0x0, 0x8, 0x8, 0x8, 0xffffffff, {{0x34, 0x4, 0x1, 0x22, 0xd0, 0x65, 0x0, 0x4, 0x4, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0xa}, {[@timestamp_prespec={0x44, 0x14, 0x2b, 0x3, 0x8, [{@loopback, 0x1}, {@multicast1, 0x8e9}]}, @timestamp_addr={0x44, 0x4c, 0x25, 0x1, 0x0, [{@broadcast, 0x8}, {@rand_addr=0x64010101, 0x3}, {@broadcast, 0xfa69}, {@rand_addr=0x64010102, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@broadcast, 0x10000}, {@private=0xa010100, 0xb2c9}, {@remote, 0xe78f}, {@multicast1, 0x2}]}, @rr={0x7, 0x7, 0x31, [@loopback]}, @timestamp={0x44, 0x20, 0x23, 0x0, 0xa, [0xfad, 0x3, 0x10, 0x1ff, 0x8, 0x400, 0xb453]}, @rr={0x7, 0x27, 0x2d, [@loopback, @dev={0xac, 0x14, 0x14, 0x38}, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @remote, @rand_addr=0x64010102]}, @generic={0x83, 0xc, "4dc1187193500fd5607b"}, @noop]}}}}}) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000004c0), 0x8) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="2100000000000000000000000000100000040000", @ANYRES32, @ANYBLOB="fdffffff03"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYRESDEC=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@alu={0x4, 0x0, 0x5, 0x9, 0x2, 0x0, 0x4}]}, &(0x7f0000000040)='GPL\x00', 0xc, 0xc, &(0x7f00000001c0)=""/12, 0x41100, 0x15, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x7, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x2, 0x0, 0x1, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000540)='mem_disconnect\x00', r7, 0x0, 0x5}, 0x0) r8 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1}) io_uring_register$IORING_UNREGISTER_BUFFERS(r8, 0x1, 0x20, 0x0) syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000180)='./file3\x00', 0x1004081, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYBLOB="30d7e88b7e1a89248cbe96fa60e3aa658b848c34b60d221b47faa425408774ccb71ea1fa398e581c2dfb0c563ae9e0179d98b1dcce10430d6aeea68db5b0e19e3a18c41ddd8964c127983aaa9808f00958eb84e5f6ad7cf6da5d1c91a1ca244531d9d1e03d0cdf08801cfa3144c8c973a4af2adb11b537a30414e7268b844618a1a6468378f196dc2c94b1d5880655a657aaf29227ec5691ab941dac2bb42722601cdc3fd713d2029386f3ec77d7cac4921e2c06865201ca5a3d76f218c6a72ab5af528b604869e9dbab560430e94d8ef41ad7015d7847a16dc02b6307f3029200d82f197a5ad42b08733b48c48b7cf18e52"], 0x10, 0x7f4, &(0x7f0000001580)="$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") open$dir(&(0x7f0000000080)='./file1\x00', 0x200, 0x40) 2.693461315s ago: executing program 2 (id=5908): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000008500000050"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000340)=@chain={'key_or_keyring:', r1}) keyctl$KEYCTL_MOVE(0x1e, r1, 0xffffffffffffffff, r2, 0x0) 2.64818545s ago: executing program 2 (id=5909): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x2, &(0x7f0000000480)) r0 = gettid() move_pages(r0, 0x6, &(0x7f0000000000)=[&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil], 0x0, &(0x7f0000000080)=[0x0, 0x0], 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492846, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='kfree\x00'}, 0x18) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc000060000000800020005000000140006"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102032900fefd000e40000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) fcntl$setstatus(r1, 0x4, 0x42000) 2.608067194s ago: executing program 7 (id=5911): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040057}, 0x240008c4) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c00000007060104000000000000c0000000000a0500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004055}, 0x48000) syz_read_part_table(0x59d, &(0x7f0000000000)="$eJzs0r1Lu1cUB/CbgKSFSkQEBzsIBpdGhTjokAxWYprFiFiR0llw0EFwcJCU6OzLP6D4BuIidnYUI4hCnCSjOBcUl0wprU+hrV3aYkp/fD5LuPece08u3yfwvxYPPzWbzVgIoZn4+6e/Pc1PFHunxqZnQoiF70MI+S+/+LUSizp+u/U8WpeidTGRqe3fjL+cdtz23VdTh/GofhEP4YcQwuLjUfLfvo1P31nuKrm+sVzYXM0tPBTWnobnB/I9W/mlnZGDbHm2OzsXfVgX8dbMT9VGj++apefd9sG2aq2RuY760rGPmc9/68/573VV6pXGZP/JylC6s35Z3o5yf5U/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwwc5yV8n1jeXC5mpu4aGw9jQ8P5Dv2cov7YwcZMuz3dm5+FvfRbw181O10eO7Zul5t32wrVprZK6jvnTs3dGvf/yYv0QLfRX+mP9eV6VeaUz2n6wMpTvrl+XtKPfX9/kDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyl/ESxd2pseiaEWPgshPDN/Xd9v+w3E2/1WNR3Hv2Wov1iIlPbvxl/Oe247buvpg6nEiEkfnfv4uNR8vNWPoR/5OcAAAD//8gGhpo=") r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x94) sendfile(r3, r3, 0x0, 0x100000000) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r5, 0x0, 0x31, 0x0, 0x100000000) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0x4) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f00000008c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000880)={&(0x7f0000000640)={0x140, r9, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x48}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xe0}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2f}]}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xecec}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x208}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x400}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff8e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_MEDIA={0x4}]}, 0x140}, 0x1, 0x0, 0x0, 0x850}, 0x8090) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000001000000280001801400040000000000000002000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000900)={0x1, 0x3}) socket$nl_route(0x10, 0x3, 0x0) 2.399991355s ago: executing program 4 (id=5918): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110a9"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x2, &(0x7f0000000540)=ANY=[@ANYBLOB="180000007f00007c3db2b57fadef30477a1c035a6f7267376e50de3d9479920730da0feddc04469ab68f5e0ef9ae7360a5fc42e16bf2a2a3b0537b52a36e0c9ac6db3897e7367c0f0214443518bb9b91c880697733f06c735c428e37de1fb4086102ba527ffce009570e7b5c4404b9bab304cd81c381d6c02971a60a28fcff79353d0815122244b56511e40bd368f63ab3d2249aabe6c84ac0ee97fc2093f703e046216cb118fb2ce503abe3a984de"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xd, &(0x7f0000000100)=""/13, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x1}, 0x94) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r7, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='mm_collapse_huge_page_swapin\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r8, 0x0, 0x1, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000014c0)=ANY=[@ANYRES32=r9, @ANYRESHEX=r9, @ANYBLOB="30000000eb4b1e9991d601000000", @ANYRES32, @ANYRES8=r8, @ANYRES32, @ANYBLOB, @ANYRES64=r11], 0x20) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000003c0)={0x2, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)={@cgroup=r12, r2, 0x38, 0x2020, r3, @void, @void, @value=r13, @void, r11}, 0x20) r14 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0) r15 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x4, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffa}, [@generic={0x0, 0x3, 0x3, 0x7, 0xf96b}]}, &(0x7f0000000640)='syzkaller\x00', 0xfffffbff, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, 0x0, r10, 0x8, &(0x7f0000000780)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[r4, r14]}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0)={@cgroup=r14, r15, 0x22, 0x1, r14, @void, @value=r1, @void, @void, r11}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7fffffffffffffff}, 0x18) r16 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r16, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000000)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0xa606, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x4, 0x0, 0x81, 0x206, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x5, 0x5, 0x8, 0x2000009, 0x9, 0x10, 0x9, 0x3, 0xffffff00, 0x38, 0x9, 0x4, 0x8, 0x8, 0x1, 0x958, 0x1fe, 0x4, 0x6, 0x7, 0x4080, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x5, 0x1, 0x0, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x7, 0xd67, 0x7, 0x4, 0x25, 0x9dc5, 0x4162, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x7, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x9, 0x40001c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x2, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x401, 0x7fff, 0x5, 0x5, 0x0, 0xfffffff7, 0x4, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x2, 0x7, 0x2, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x0, 0x8000, 0xa, 0xc, 0xca000000, 0x2, 0xfffffffa, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x6, 0x4, 0x80000000, 0x5, 0x801, 0xb848, 0x6, 0x6, 0xffffffff, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x9, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000002, 0xb, 0x7, 0x5, 0x2, 0x4]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x7, 0x4, 0x1, {0x7, 0x0, 0x3, 0x7, 0x7, 0x80000001}, {0x4, 0x2, 0x2, 0xa, 0x1ff, 0x1c0000}, 0xb, 0xbc, 0xdf72c67}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x488}}, 0x0) 2.385027817s ago: executing program 0 (id=5919): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg$unix(r2, &(0x7f0000000900)=[{{&(0x7f0000000440)=@abs, 0x6e, &(0x7f0000000800), 0x0, &(0x7f0000000840)}}], 0x1, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r6, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x54}, 0x7}, 0x1c) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r7) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB], 0x28}}, 0x0) 2.272060338s ago: executing program 4 (id=5920): mkdir(&(0x7f0000000580)='./file0\x00', 0x92) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x13, &(0x7f0000000380)=ANY=[@ANYRES8=0x0, @ANYRESDEC=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000540)='sched_switch\x00', r2}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x8000f28, 0x0) splice(r5, 0x0, r4, 0x0, 0x7f, 0xe) write(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) lseek(r7, 0x2004, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)={0x60, r8, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x9}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@float={0x1, 0x300, 0x0, 0x10, 0x2}]}}, 0x0, 0x26}, 0x28) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.261165529s ago: executing program 7 (id=5921): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @desc2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x1) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x4, 0x3, 0x3}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@fallback=r3, r3, 0x2f}, 0x20) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 2.239065321s ago: executing program 7 (id=5922): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) r2 = socket(0x2, 0x3, 0x6) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x4dd8, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf80, 0x3}, 0x1c) syz_emit_ethernet(0x6a, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @mcast1}}}}}}}, 0x0) sendmsg$inet6(r0, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e3d, 0x100, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0xffffffff}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c0000002b0000000000000718"], 0x30}, 0x4000010) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=@newnexthop={0x90, 0x68, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @LWT_BPF_XMIT={0xc, 0x3, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8, 0x1, r3}}}, @NHA_RES_GROUP={0x24, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x6}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x9}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x3}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x4}]}, @NHA_FDB={0x4}, @NHA_RES_GROUP={0x2c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x8}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x81}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x9}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x1ff}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_BLACKHOLE={0x4}, @NHA_GROUP_TYPE={0x6}]}, 0x90}, 0x1, 0x0, 0x0, 0x24040040}, 0x804) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0xfffffdcc, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f0000000700)={'gretap0\x00', 0x0, 0x8, 0x8, 0x8, 0xffffffff, {{0x34, 0x4, 0x1, 0x22, 0xd0, 0x65, 0x0, 0x4, 0x4, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0xa}, {[@timestamp_prespec={0x44, 0x14, 0x2b, 0x3, 0x8, [{@loopback, 0x1}, {@multicast1, 0x8e9}]}, @timestamp_addr={0x44, 0x4c, 0x25, 0x1, 0x0, [{@broadcast, 0x8}, {@rand_addr=0x64010101, 0x3}, {@broadcast, 0xfa69}, {@rand_addr=0x64010102, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@broadcast, 0x10000}, {@private=0xa010100, 0xb2c9}, {@remote, 0xe78f}, {@multicast1, 0x2}]}, @rr={0x7, 0x7, 0x31, [@loopback]}, @timestamp={0x44, 0x20, 0x23, 0x0, 0xa, [0xfad, 0x3, 0x10, 0x1ff, 0x8, 0x400, 0xb453]}, @rr={0x7, 0x27, 0x2d, [@loopback, @dev={0xac, 0x14, 0x14, 0x38}, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @remote, @rand_addr=0x64010102]}, @generic={0x83, 0xc, "4dc1187193500fd5607b"}, @noop]}}}}}) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000004c0), 0x8) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="2100000000000000000000000000100000040000", @ANYRES32, @ANYBLOB="fdffffff03"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYRESDEC=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@alu={0x4, 0x0, 0x5, 0x9, 0x2, 0x0, 0x4}]}, &(0x7f0000000040)='GPL\x00', 0xc, 0xc, &(0x7f00000001c0)=""/12, 0x41100, 0x15, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x7, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x2, 0x0, 0x1, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000540)='mem_disconnect\x00', r7, 0x0, 0x5}, 0x0) r8 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1}) io_uring_register$IORING_UNREGISTER_BUFFERS(r8, 0x1, 0x20, 0x0) syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000180)='./file3\x00', 0x1004081, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYBLOB="30d7e88b7e1a89248cbe96fa60e3aa658b848c34b60d221b47faa425408774ccb71ea1fa398e581c2dfb0c563ae9e0179d98b1dcce10430d6aeea68db5b0e19e3a18c41ddd8964c127983aaa9808f00958eb84e5f6ad7cf6da5d1c91a1ca244531d9d1e03d0cdf08801cfa3144c8c973a4af2adb11b537a30414e7268b844618a1a6468378f196dc2c94b1d5880655a657aaf29227ec5691ab941dac2bb42722601cdc3fd713d2029386f3ec77d7cac4921e2c06865201ca5a3d76f218c6a72ab5af528b604869e9dbab560430e94d8ef41ad7015d7847a16dc02b6307f3029200d82f197a5ad42b08733b48c48b7cf18e52"], 0x10, 0x7f4, &(0x7f0000001580)="$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") open$dir(&(0x7f0000000080)='./file1\x00', 0x200, 0x40) 1.249710813s ago: executing program 6 (id=5923): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000300)={0x5, 0x400, 0xe2, 0x4, 0xf, "a0d221bf9a34cdcf"}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000003d80)=[{{&(0x7f0000000000)={0xa, 0x4e28, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000100)="0a649329b2a344470f9bc0faa8d0cf04aa19bcc4cb4b0f6cccc826140704427ced8e3a0b950b7fffb3a6d5", 0x2b}], 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000a40)="bbaff6f79abc949198cd6f4d3415443c74f1494f04cd74b8e535", 0x1a}], 0x1}}, {{0x0, 0x0, &(0x7f0000001c00)=[{0x0}, {&(0x7f0000001d80)="89d678ce056c6ec3a758a18badbd3f1e8e69623f3a521c407ec0d5f1a2755b4249a56d0b131c3bb9f38c99db3a276c94a27e6f85360ab92b31216fad2398a44e7cd39359af752369a27c1852725ddbf74a2b5dec2e27c4dcefd2ddc9b5a41af61293026e8ef680188f6ad68f8f85264053b003a1a119ff6bca14fbb9238a3d699738efaef34f6cf94a487157402c5c4a27dcdf687365710b68b4d89cb38359f3e57aee5d8c4bd49a421acc3eb0f92fc9dd28df931d97a80f4f0dbe59b0778f2cc02fe8d0ce1a96b578b4546abc5122ef4f94f79816abfa2e0555043ccf0b1e4ac1febe6a6a7e0f19ffc02c1d925f9236382928a5ea08be32cb8ca2571b6c94c5dc893541472b70d102c1a36219f4fb9f0690284b7d4cf8f99ab014688db7c7b0d1cfe978b9275a8269870ba255e17282fa697100b6cf1756a521e22b7411836b6a20d6e74b689d31e0f34c061d42fd4730ca843e86a09945d45a55ac0b5f7d003afdc2c6654a59dc8820d86c7dbee17f35142c6c20a1ac6afe27a4b862373e62609908ecb8f752a9359c09af8700a366c5838b03832b184feaee01c8f7fb55eae5ffd05e33b66d8547c48f258da49186f2b8f36ec8d1191f70637c194e2ba5576e98d78bdf617ae2bb8253318b869459d4abc16160fc35d55bfc7520c021aa66f424522215e7a11f36df3433d321b8578ad5e5340d594321f9e40de502539a910c6f7483fdf7194d59765b987c2a938683aa05c29d1c851d1ac03b2c261c1e027cee876d0c192272eb5504714bccf86d8eca4448dc905c3d99e4fc40297f56c90e9e845e40f9573899e308f7bda4137c4088e0ad0bc1583104094f5820dbe4861ea8988aaaf564419d75e602694a7e0b6a9d3dfd19818bd79d5d117be2d9002b24", 0x281}], 0x2}}], 0x4, 0x8008800) 1.245175973s ago: executing program 2 (id=5924): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x14, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) unshare(0x60060200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000c40)={'filter\x00', 0x104, 0x4, 0x3c8, 0x110, 0x110, 0x110, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@empty, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac}, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'netdevsim0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010101, 0x8, 0x1}}}, {{@arp={@loopback, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00', {}, {}, 0x0, 0x20}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x80ca, 0x8}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 1.229011014s ago: executing program 7 (id=5925): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={0x0, r1, 0x0, 0xfffffffffffffff4}, 0x18) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x8) fchdir(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000280)={0x591002, 0x1, 0xc}, 0x18) 1.192647248s ago: executing program 6 (id=5926): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000085000000500000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000340)=@chain={'key_or_keyring:', r1}) keyctl$KEYCTL_MOVE(0x1e, r1, 0xffffffffffffffff, r2, 0x0) 1.191832538s ago: executing program 7 (id=5927): socket$kcm(0x2b, 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3109d5850001050500000000000000000a01"], 0x14}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000300)={0x5, 0x400, 0xe2, 0x4, 0xf, "a0d221bf9a34cdcf"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000400)=0x7) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r4, &(0x7f0000003d80)=[{{&(0x7f0000000000)={0xa, 0x4e28, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000100)="0a649329b2a344470f9bc0faa8d0cf04aa19bcc4cb4b0f6cccc826140704427ced8e3a0b950b7fffb3a6d5", 0x2b}], 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000a40)="bbaff6f79abc949198cd6f4d3415443c74f1494f04cd74b8e535cb215a2d2a09b69fb69788202a6511", 0x29}], 0x1}}, {{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000b00)="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", 0x1000}, {&(0x7f0000001d80)="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", 0x281}], 0x2}}], 0x4, 0x8008800) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000200)=0xa) ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f0000000380)) 1.144157903s ago: executing program 6 (id=5928): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r0, 0x0, 0x44, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c0000000000000c548dc7914cb11ad63bf3707164aac031971c4be105eb953f86fbc6b204e076aa7a493e796123bbbd8e3b7e62d8fd097cf21d6d431a069ebc0aefd5fce80cc99fb38c771fa46e2c32a95fe99", 0x0, 0x86, 0x0, 0xffffffffffffff80, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x15) 1.105055447s ago: executing program 0 (id=5929): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_emit_ethernet(0x5e, &(0x7f00000003c0)={@random="e33110495bfd", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x28, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast1, @private1}}}}}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x78f, &(0x7f00000007c0)="$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") r3 = openat(r2, &(0x7f0000000400)='./file1\x00', 0x14b142, 0x160) getpid() sched_setaffinity(0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000004c0)={{0x2, 0x4e23, @broadcast}, {0x6, @local}, 0x48, {0x2, 0x4e20, @remote}, 'veth1_to_hsr\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r7}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)=r8}, 0x20) unshare(0x64000600) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r9, &(0x7f0000000140)='2', 0xfdef, 0xfecc) ioctl$EXT4_IOC_MOVE_EXT(r9, 0xc028660f, &(0x7f0000000040)={0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000580)=ANY=[@ANYRES64=r5, @ANYRESHEX, @ANYRESOCT=r3, @ANYRESDEC, @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) 1.089775999s ago: executing program 6 (id=5930): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) r2 = socket(0x2, 0x3, 0x6) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x4dd8, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf80, 0x3}, 0x1c) syz_emit_ethernet(0x6a, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @mcast1}}}}}}}, 0x0) sendmsg$inet6(r0, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e3d, 0x100, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0xffffffff}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c0000002b0000000000"], 0x30}, 0x4000010) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=@newnexthop={0x90, 0x68, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @LWT_BPF_XMIT={0xc, 0x3, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8, 0x1, r3}}}, @NHA_RES_GROUP={0x24, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x6}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x9}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x3}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x4}]}, @NHA_FDB={0x4}, @NHA_RES_GROUP={0x2c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x8}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x81}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x9}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x1ff}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_BLACKHOLE={0x4}, @NHA_GROUP_TYPE={0x6}]}, 0x90}, 0x1, 0x0, 0x0, 0x24040040}, 0x804) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0xfffffdcc, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f0000000700)={'gretap0\x00', 0x0, 0x8, 0x8, 0x8, 0xffffffff, {{0x32, 0x4, 0x1, 0x22, 0xc8, 0x65, 0x0, 0x4, 0x4, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0xa}, {[@timestamp_prespec={0x44, 0x14, 0x2b, 0x3, 0x8, [{@loopback, 0x1}, {@multicast1, 0x8e9}]}, @timestamp_addr={0x44, 0x44, 0x25, 0x1, 0x0, [{@broadcast, 0x8}, {@rand_addr=0x64010101, 0x3}, {@broadcast, 0xfa69}, {@rand_addr=0x64010102, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@private=0xa010100, 0xb2c9}, {@remote, 0xe78f}, {@multicast1, 0x2}]}, @rr={0x7, 0x7, 0x31, [@loopback]}, @timestamp={0x44, 0x20, 0x23, 0x0, 0xa, [0xfad, 0x3, 0x10, 0x1ff, 0x8, 0x400, 0xb453]}, @rr={0x7, 0x27, 0x2d, [@loopback, @dev={0xac, 0x14, 0x14, 0x38}, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @remote, @rand_addr=0x64010102]}, @generic={0x83, 0xc, "4dc1187193500fd5607b"}, @noop]}}}}}) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000004c0), 0x8) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6, 0x0, 0x8001}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="2100000000000000000000000000100000040000", @ANYRES32, @ANYBLOB="fdffffff03"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYRESDEC=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@alu={0x4, 0x0, 0x5, 0x9, 0x2, 0x0, 0x4}]}, &(0x7f0000000040)='GPL\x00', 0xc, 0xc, &(0x7f00000001c0)=""/12, 0x41100, 0x15, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x7, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x2, 0x0, 0x1, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000540)='mem_disconnect\x00', r8, 0x0, 0x5}, 0x0) r9 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1}) io_uring_register$IORING_UNREGISTER_BUFFERS(r9, 0x1, 0x20, 0x0) syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000180)='./file3\x00', 0x1004081, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYBLOB="30d7e88b7e1a89248cbe96fa60e3aa658b848c34b60d221b47faa425408774ccb71ea1fa398e581c2dfb0c563ae9e0179d98b1dcce10430d6aeea68db5b0e19e3a18c41ddd8964c127983aaa9808f00958eb84e5f6ad7cf6da5d1c91a1ca244531d9d1e03d0cdf08801cfa3144c8c973a4af2adb11b537a30414e7268b844618a1a6468378f196dc2c94b1d5880655a657aaf29227ec5691ab941dac2bb42722601cdc3fd713d2029386f3ec77d7cac4921e2c06865201ca5a3d76f218c6a72ab5af528b604869e9dbab560430e94d8ef41ad7015d7847a16dc02b6307f3029200d82f197a5ad42b08733b48c48b7cf18e52"], 0x10, 0x7f4, &(0x7f0000001580)="$eJzs3U9oHOfZAPBnFMl2FD5/Id9HPmMcZ2znA5s6ymqVKBU5pJvVSJ5ktSt2V8WmlMTEcjCWk5AQ0pjS1JekLS2lpx7TXEMuubUUWuih7anQHHrpoRDIpSUtLZSWUnDZ2V1r9Wcl/5HlNP39RPadfeeZd953drLPznpnJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACASKqzpdJkErW8vnQ6Ha4622wsbDG/395P1xRbrDci6fwX+/bFgW7Vgf9dnX1/5+FoHOo+OxT7OsW+uHzP/fc+8T+jI/3lt+jQzToyfNbY4JMk4uudTl08u7Ky/Mpt6Mgu+taPexP7rnuRv1/tPM5n9bzVyBcq81matxrpzPR06ZFTc610Lq9lrTOtdraQVptZpd1opserJ9LJmZmpNJs401iqz89Walm/8vGHy6XSdPr0xGJWabYa9UeenmhVT+W1Wl6fL2LKpdejE/N4Z0d8Jm+n7ayykKbnL6wsT23X1U7Q5JqavWt2nEMP3fvxax/95cJyZ4cc1kjS2zHLk5Pl8uT0YzOPPV4qjZZL5bUVpXXiWkSMRHQibstOy511zyZ1o709ZsOMiKv/vTNv3nCLRnr5P2qRRz2W4nSkkcZI8bj6NxbVmI1mNGKh8/w3Y+vmb8j////IH3+11XoH838/yx9YnX0wivx/uPvs8LD8v6EXO/A3OqzV+vvd3gzWvRpvxOW4GGdjJVZiOV65mTXuWd/qbfwb2dn25iOLeuTRikbksRCVoibt1aQxE9MxHaV4Nk7FXLQijbnIoxZZtOJMtKIdWbFHVaMZWVSiHY1oRhrHoxonIo3JmImZmIo0spiIM9GIpajHfMxGpWjlfFwotvvUun7d/7XnfvTCrz9+pzN9LWhyi4EknQ9znaA/bxG0Id3fQP7vRIz09u5dyUnskn03+Kru0Ds33LqrRf4fvdPdAAAAAG6jpPj2PYmIsXigmJrLa9mX7nS3AAAAgB1U/K75UKcY60w9EEnn+L+0SeSHu943AAAAYGckxTl2SUSMx4Pdqf7pUpt9CQAAAAD8Gyr+/f9wpxiPeLOocPwPAAAAnzHfGHaN/Y/29K6x21rcm/zkT9FsjiVXFk8/lFyqdOIql+7qLtcrvnitxfbcwWR/r5GimB69fE8SEaPV7FDSv/rlP/d2y0+Kx4OrFyAcdq3/ZJsOxNYdKJ7Ft+NIN+bIuW55rj+nu5bxubyWTVQbtScmk96XI+3XXrzwlSiG/836wv4kzl9YWZ54/qWVc0VfrnRauXKpd3n4pL9URPeEii36crW3BeKBzUc8VpyI0VvveHe9pcHx964mO7L1+JPBdb4VR7sxR8e75fja8e/rrHNy4onJqFT2j7Sz0+3Xrg6MvteLydWR7+2PNrmBV+GtONaNOXb8WLfYpBflNb14cWMvyoPb//q2xXX34p0jb57+688bSTa1XS+mbrEXAHfK+eKqP6tZ6O4iC/3jalcnoa3Lu3f3l7yRd7nzq58y+ssP5LrR2JDd05vJ7m/F8W7M8e7nidGDm+SV0ibv6C9fePkXvXf0R9/7/g++fPiXH6zL6zfQi/fiRDemV8R9PxuSYztj/s66rPpuZ4l3h663VSsnr++dGku6Nx+Kyw9fuHT2heUXll8sl6emS4+WSo+VY6z4qNArhvRU5gH4z7bdPXY++Oq10GF34Uke3eao+r5rPymYiOfjpViJc3GyONsgIh7cvNXxgZ8hnNzmqHV84A4vJ7c5tlyNLa+P3XssiSGxUwNb7P++VxR/u00vCADsgqPb5OEk7u3Of/2/ekusi7grSU5uc9y9Npef6N44t390HMNz+aDf98rP3/YtAgCffVnzk2S8/XbSbOaLz07OzExW2qeytNmoPpM289n5LM3r7axZPVWpz2fpYrPRblT7Xx3PZq20tbS42Gi207lGM11stPLTxZ3f096t31vZQqXezqutxVpWaWVptVFvV6rtdDZvVdPFpadqeetU1iwWbi1m1Xwur1baeaOethpLzWo2kaatLBsIzGezejufy7OxNK+ni818odK8EhG1pYUsnc1a1Wa+2G50G+yvK6/PNZoLRbMTG4f/h93e3gDwafDqG5cvnl1ZWX7l5iZ+ez3Bd3qMAMBasjQAAAAAAAAAAAAAAHz6bTxdr1N7QycCjsVNnz746t64lbMPP3sTn3u/+7LsRIO30s7da17TPb2d5c5vnxueeO7JJy+u1iSjg5v3qTcPnPpdFv3RbdHO5v+nbHaq69v7I/b88Lvdmi8MCU5Gd3ikH0bETSx+NdkiZvffiwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgO/8KAAD//wifUTs=") open$dir(&(0x7f0000000080)='./file1\x00', 0x200, 0x40) 850.396033ms ago: executing program 6 (id=5931): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110a9"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x2, &(0x7f0000000540)=ANY=[@ANYBLOB="180000007f00007c3db2b57fadef30477a1c035a6f7267376e50de3d9479920730da0feddc04469ab68f5e0ef9ae7360a5fc42e16bf2a2a3b0537b52a36e0c9ac6db3897e7367c0f0214443518bb9b91c880697733f06c735c428e37de1fb4086102ba527ffce009570e7b5c4404b9bab304cd81c381d6c02971a60a28fcff79353d0815122244b56511e40bd368f63ab3d2249aabe6c84ac0ee97fc2093f703e046216cb118fb2ce503abe3a984de"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xd, &(0x7f0000000100)=""/13, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x1}, 0x94) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r7, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='mm_collapse_huge_page_swapin\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r8, 0x0, 0x1, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000014c0)=ANY=[@ANYRES32=r9, @ANYRESHEX=r9, @ANYBLOB="30000000eb4b1e9991d601000000", @ANYRES32, @ANYRES8=r8, @ANYRES32, @ANYBLOB, @ANYRES64=r11], 0x20) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000003c0)={0x2, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)={@cgroup=r12, r2, 0x38, 0x2020, r3, @void, @void, @value=r13, @void, r11}, 0x20) r14 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0) r15 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x4, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffa}, [@generic={0x0, 0x3, 0x3, 0x7, 0xf96b}]}, &(0x7f0000000640)='syzkaller\x00', 0xfffffbff, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, 0x0, r10, 0x8, &(0x7f0000000780)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[r4, r14]}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0)={@cgroup=r14, r15, 0x22, 0x1, r14, @void, @value=r1, @void, @void, r11}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7fffffffffffffff}, 0x18) r16 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r16, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000000)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0xa606, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x4, 0x0, 0x81, 0x206, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x5, 0x5, 0x8, 0x2000009, 0x9, 0x10, 0x9, 0x3, 0xffffff00, 0x38, 0x9, 0x4, 0x8, 0x8, 0x1, 0x958, 0x1fe, 0x4, 0x6, 0x7, 0x4080, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x5, 0x1, 0x0, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x7, 0xd67, 0x7, 0x4, 0x25, 0x9dc5, 0x4162, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x7, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x9, 0x40001c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x2, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x401, 0x7fff, 0x5, 0x5, 0x0, 0xfffffff7, 0x4, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x2, 0x7, 0x2, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x0, 0x8000, 0xa, 0xc, 0xca000000, 0x2, 0xfffffffa, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x6, 0x4, 0x80000000, 0x5, 0x801, 0xb848, 0x6, 0x6, 0xffffffff, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x9, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000002, 0xb, 0x7, 0x5, 0x2, 0x4]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x7, 0x4, 0x1, {0x7, 0x0, 0x3, 0x7, 0x7, 0x80000001}, {0x4, 0x2, 0x2, 0xa, 0x1ff, 0x1c0000}, 0xb, 0xbc, 0xdf72c67}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x488}}, 0x0) 827.700496ms ago: executing program 2 (id=5932): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040057}, 0x240008c4) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c00000007060104000000000000c0000000000a0500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004055}, 0x48000) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x94) sendfile(r3, r3, 0x0, 0x100000000) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r5, 0x0, 0x31, 0x0, 0x100000000) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0x4) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f00000008c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000880)={&(0x7f0000000640)={0x140, r9, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x48}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xe0}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2f}]}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xecec}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x208}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x400}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff8e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_MEDIA={0x4}]}, 0x140}, 0x1, 0x0, 0x0, 0x850}, 0x8090) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000001000000280001801400040000000000000002000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000900)={0x1, 0x3}) socket$nl_route(0x10, 0x3, 0x0) 786.87229ms ago: executing program 4 (id=5933): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) r2 = socket(0x2, 0x3, 0x6) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x4dd8, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf80, 0x3}, 0x1c) syz_emit_ethernet(0x6a, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @mcast1}}}}}}}, 0x0) sendmsg$inet6(r0, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e3d, 0x100, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0xffffffff}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c0000002b0000000000000718"], 0x30}, 0x4000010) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=@newnexthop={0x90, 0x68, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @LWT_BPF_XMIT={0xc, 0x3, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8, 0x1, r4}}}, @NHA_RES_GROUP={0x24, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x6}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x9}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x3}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x4}]}, @NHA_FDB={0x4}, @NHA_RES_GROUP={0x2c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x8}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x81}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x9}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x1ff}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_BLACKHOLE={0x4}, @NHA_GROUP_TYPE={0x6}]}, 0x90}, 0x1, 0x0, 0x0, 0x24040040}, 0x804) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0xfffffdcc, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f0000000700)={'gretap0\x00', 0x0, 0x8, 0x8, 0x8, 0xffffffff, {{0x34, 0x4, 0x1, 0x22, 0xd0, 0x65, 0x0, 0x4, 0x4, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0xa}, {[@timestamp_prespec={0x44, 0x14, 0x2b, 0x3, 0x8, [{@loopback, 0x1}, {@multicast1, 0x8e9}]}, @timestamp_addr={0x44, 0x4c, 0x25, 0x1, 0x0, [{@broadcast, 0x8}, {@rand_addr=0x64010101, 0x3}, {@broadcast, 0xfa69}, {@rand_addr=0x64010102, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@broadcast, 0x10000}, {@private=0xa010100, 0xb2c9}, {@remote, 0xe78f}, {@multicast1, 0x2}]}, @rr={0x7, 0x7, 0x31, [@loopback]}, @timestamp={0x44, 0x20, 0x23, 0x0, 0xa, [0xfad, 0x3, 0x10, 0x1ff, 0x8, 0x400, 0xb453]}, @rr={0x7, 0x27, 0x2d, [@loopback, @dev={0xac, 0x14, 0x14, 0x38}, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @remote, @rand_addr=0x64010102]}, @generic={0x83, 0xc, "4dc1187193500fd5607b"}, @noop]}}}}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000004c0), 0x8) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="2100000000000000000000000000100000040000", @ANYRES32, @ANYBLOB="fdffffff03"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYRESDEC=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@alu={0x4, 0x0, 0x5, 0x9, 0x2, 0x0, 0x4}]}, &(0x7f0000000040)='GPL\x00', 0xc, 0xc, &(0x7f00000001c0)=""/12, 0x41100, 0x15, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x7, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x2, 0x0, 0x1, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000540)='mem_disconnect\x00', r8, 0x0, 0x5}, 0x0) r9 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1}) io_uring_register$IORING_UNREGISTER_BUFFERS(r9, 0x1, 0x20, 0x0) syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000180)='./file3\x00', 0x1004081, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYBLOB="30d7e88b7e1a89248cbe96fa60e3aa658b848c34b60d221b47faa425408774ccb71ea1fa398e581c2dfb0c563ae9e0179d98b1dcce10430d6aeea68db5b0e19e3a18c41ddd8964c127983aaa9808f00958eb84e5f6ad7cf6da5d1c91a1ca244531d9d1e03d0cdf08801cfa3144c8c973a4af2adb11b537a30414e7268b844618a1a6468378f196dc2c94b1d5880655a657aaf29227ec5691ab941dac2bb42722601cdc3fd713d2029386f3ec77d7cac4921e2c06865201ca5a3d76f218c6a72ab5af528b604869e9dbab560430e94d8ef41ad7015d7847a16dc02b6307f3029200d82f197a5ad42b08733b48c48b7cf18e52"], 0x10, 0x7f4, &(0x7f0000001580)="$eJzs3U9oHOfZAPBnFMl2FD5/Id9HPmMcZ2znA5s6ymqVKBU5pJvVSJ5ktSt2V8WmlMTEcjCWk5AQ0pjS1JekLS2lpx7TXEMuubUUWuih7anQHHrpoRDIpSUtLZSWUnDZ2V1r9Wcl/5HlNP39RPadfeeZd953drLPznpnJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACASKqzpdJkErW8vnQ6Ha4622wsbDG/395P1xRbrDci6fwX+/bFgW7Vgf9dnX1/5+FoHOo+OxT7OsW+uHzP/fc+8T+jI/3lt+jQzToyfNbY4JMk4uudTl08u7Ky/Mpt6Mgu+taPexP7rnuRv1/tPM5n9bzVyBcq81matxrpzPR06ZFTc610Lq9lrTOtdraQVptZpd1opserJ9LJmZmpNJs401iqz89Walm/8vGHy6XSdPr0xGJWabYa9UeenmhVT+W1Wl6fL2LKpdejE/N4Z0d8Jm+n7ayykKbnL6wsT23X1U7Q5JqavWt2nEMP3fvxax/95cJyZ4cc1kjS2zHLk5Pl8uT0YzOPPV4qjZZL5bUVpXXiWkSMRHQibstOy511zyZ1o709ZsOMiKv/vTNv3nCLRnr5P2qRRz2W4nSkkcZI8bj6NxbVmI1mNGKh8/w3Y+vmb8j////IH3+11XoH838/yx9YnX0wivx/uPvs8LD8v6EXO/A3OqzV+vvd3gzWvRpvxOW4GGdjJVZiOV65mTXuWd/qbfwb2dn25iOLeuTRikbksRCVoibt1aQxE9MxHaV4Nk7FXLQijbnIoxZZtOJMtKIdWbFHVaMZWVSiHY1oRhrHoxonIo3JmImZmIo0spiIM9GIpajHfMxGpWjlfFwotvvUun7d/7XnfvTCrz9+pzN9LWhyi4EknQ9znaA/bxG0Id3fQP7vRIz09u5dyUnskn03+Kru0Ds33LqrRf4fvdPdAAAAAG6jpPj2PYmIsXigmJrLa9mX7nS3AAAAgB1U/K75UKcY60w9EEnn+L+0SeSHu943AAAAYGckxTl2SUSMx4Pdqf7pUpt9CQAAAAD8Gyr+/f9wpxiPeLOocPwPAAAAnzHfGHaN/Y/29K6x21rcm/zkT9FsjiVXFk8/lFyqdOIql+7qLtcrvnitxfbcwWR/r5GimB69fE8SEaPV7FDSv/rlP/d2y0+Kx4OrFyAcdq3/ZJsOxNYdKJ7Ft+NIN+bIuW55rj+nu5bxubyWTVQbtScmk96XI+3XXrzwlSiG/836wv4kzl9YWZ54/qWVc0VfrnRauXKpd3n4pL9URPeEii36crW3BeKBzUc8VpyI0VvveHe9pcHx964mO7L1+JPBdb4VR7sxR8e75fja8e/rrHNy4onJqFT2j7Sz0+3Xrg6MvteLydWR7+2PNrmBV+GtONaNOXb8WLfYpBflNb14cWMvyoPb//q2xXX34p0jb57+688bSTa1XS+mbrEXAHfK+eKqP6tZ6O4iC/3jalcnoa3Lu3f3l7yRd7nzq58y+ssP5LrR2JDd05vJ7m/F8W7M8e7nidGDm+SV0ibv6C9fePkXvXf0R9/7/g++fPiXH6zL6zfQi/fiRDemV8R9PxuSYztj/s66rPpuZ4l3h663VSsnr++dGku6Nx+Kyw9fuHT2heUXll8sl6emS4+WSo+VY6z4qNArhvRU5gH4z7bdPXY++Oq10GF34Uke3eao+r5rPymYiOfjpViJc3GyONsgIh7cvNXxgZ8hnNzmqHV84A4vJ7c5tlyNLa+P3XssiSGxUwNb7P++VxR/u00vCADsgqPb5OEk7u3Of/2/ekusi7grSU5uc9y9Npef6N44t390HMNz+aDf98rP3/YtAgCffVnzk2S8/XbSbOaLz07OzExW2qeytNmoPpM289n5LM3r7axZPVWpz2fpYrPRblT7Xx3PZq20tbS42Gi207lGM11stPLTxZ3f096t31vZQqXezqutxVpWaWVptVFvV6rtdDZvVdPFpadqeetU1iwWbi1m1Xwur1baeaOethpLzWo2kaatLBsIzGezejufy7OxNK+ni818odK8EhG1pYUsnc1a1Wa+2G50G+yvK6/PNZoLRbMTG4f/h93e3gDwafDqG5cvnl1ZWX7l5iZ+ez3Bd3qMAMBasjQAAAAAAAAAAAAAAHz6bTxdr1N7QycCjsVNnz746t64lbMPP3sTn3u/+7LsRIO30s7da17TPb2d5c5vnxueeO7JJy+u1iSjg5v3qTcPnPpdFv3RbdHO5v+nbHaq69v7I/b88Lvdmi8MCU5Gd3ikH0bETSx+NdkiZvffiwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgO/8KAAD//wifUTs=") open$dir(&(0x7f0000000080)='./file1\x00', 0x200, 0x40) 723.997816ms ago: executing program 6 (id=5934): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_emit_ethernet(0x5e, &(0x7f00000003c0)={@random="e33110495bfd", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x28, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast1, @private1}}}}}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', 0x14b142, 0x160) getpid() sched_setaffinity(0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000004c0)={{0x2, 0x4e23, @broadcast}, {0x6, @local}, 0x48, {0x2, 0x4e20, @remote}, 'veth1_to_hsr\x00'}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) unshare(0x64000600) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000580)=ANY=[@ANYRES64=r4, @ANYRESHEX, @ANYRESOCT=r2, @ANYRESDEC, @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) 699.082659ms ago: executing program 4 (id=5935): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x2, &(0x7f0000000480)) r0 = gettid() move_pages(r0, 0x6, &(0x7f0000000000)=[&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil], 0x0, &(0x7f0000000080)=[0x0, 0x0], 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492846, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='kfree\x00'}, 0x18) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc000060000000800020005000000140006"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102032900fefd000e40000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) fcntl$setstatus(r1, 0x4, 0x42000) 689.817139ms ago: executing program 2 (id=5936): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) getpid() socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={r3, 0x20, &(0x7f0000000300)={&(0x7f0000000400)=""/185, 0xb9, 0x0, 0x0}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r4, 0x0, 0x3}, 0x18) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r5, 0x5608) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r6 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0xe) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'bond0\x00'}) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000240)={0x6, r7, 'id0\x00'}) sendmsg$NFT_BATCH(r8, 0x0, 0x40050) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="7df146ad9936e3415b451c7b3e62cbf7af1c2b67ae27110944f6d76720220a8670232deabc10848956dc47aefe4f45a0c1b156b684fef8bfa7dff77f050aafdff905307e51d19c1b19392714"], 0x48) 123.359007ms ago: executing program 0 (id=5937): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000300)={0x5, 0x400, 0xe2, 0x4, 0xf, "a0d221bf9a34cdcf"}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000003d80)=[{{&(0x7f0000000000)={0xa, 0x4e28, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000100)="0a649329b2a344470f9bc0faa8d0cf04aa19bcc4cb4b0f6cccc826140704427ced8e3a0b950b7fffb3a6d5", 0x2b}], 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000a40)="bbaff6f79abc949198cd6f4d3415443c74f1494f04cd74b8e535", 0x1a}], 0x1}}, {{0x0, 0x0, &(0x7f0000001c00)=[{0x0}, {&(0x7f0000001d80)="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", 0x281}], 0x2}}], 0x4, 0x8008800) 59.046214ms ago: executing program 0 (id=5938): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={0x0, r1, 0x0, 0xfffffffffffffff4}, 0x18) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x8) fchdir(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000280)={0x591002, 0x1, 0xc}, 0x18) 58.484514ms ago: executing program 0 (id=5939): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000085000000500000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000340)=@chain={'key_or_keyring:', r1}) keyctl$KEYCTL_MOVE(0x1e, r1, 0xffffffffffffffff, r2, 0x0) 0s ago: executing program 0 (id=5940): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg$unix(r2, &(0x7f0000000900)=[{{&(0x7f0000000440)=@abs, 0x6e, &(0x7f0000000800), 0x0, &(0x7f0000000840)}}], 0x1, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r6, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x54}, 0x7}, 0x1c) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r7) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB], 0x28}}, 0x0) kernel console output (not intermixed with test programs): 31][T18255] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.525093][T18255] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.539502][T18250] lo speed is unknown, defaulting to 1000 [ 403.546490][T18250] lo speed is unknown, defaulting to 1000 [ 403.587458][T18255] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.618872][T18250] chnl_net:caif_netlink_parms(): no params data found [ 403.648268][T18255] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.676906][T18250] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.684173][T18250] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.691524][T18250] bridge_slave_0: entered allmulticast mode [ 403.698173][T18250] bridge_slave_0: entered promiscuous mode [ 403.708620][T18250] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.715816][T18250] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.723044][T18250] bridge_slave_1: entered allmulticast mode [ 403.729670][T18250] bridge_slave_1: entered promiscuous mode [ 403.786070][T17705] bond0 (unregistering): Released all slaves [ 403.795371][T18250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.805878][T18250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 403.825528][T18250] team0: Port device team_slave_0 added [ 403.832331][T18250] team0: Port device team_slave_1 added [ 403.848994][T18250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 403.856035][T18250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.882153][T18250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.896853][T17705] hsr_slave_0: left promiscuous mode [ 403.902685][T17705] hsr_slave_1: left promiscuous mode [ 403.966213][T18250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.973213][T18250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.999301][T18250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.010209][T18269] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4960'. [ 404.035616][T18250] hsr_slave_0: entered promiscuous mode [ 404.041815][T18250] hsr_slave_1: entered promiscuous mode [ 404.047761][T18250] debugfs: 'hsr0' already exists in 'hsr' [ 404.053672][T18250] Cannot create hsr debugfs directory [ 404.137755][T18250] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 404.147752][T18250] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 404.156898][T18250] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 404.167291][T18250] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 404.197560][T18250] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.204689][T18250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 404.212068][T18250] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.219146][T18250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.250082][T18250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.274083][T17708] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.299685][T17708] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.319804][T18250] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.348672][T17706] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.355991][T17706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.378676][T17705] IPVS: stop unused estimator thread 0... [ 404.379007][T17706] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.391584][T17706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 404.414922][T18250] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 404.425387][T18250] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 404.520655][T18250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 404.711349][T18250] veth0_vlan: entered promiscuous mode [ 404.720609][T18250] veth1_vlan: entered promiscuous mode [ 404.749195][T18250] veth0_macvtap: entered promiscuous mode [ 404.758338][T18250] veth1_macvtap: entered promiscuous mode [ 404.771204][T18250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 404.782635][T17708] Bluetooth: hci1: Frame reassembly failed (-84) [ 404.792221][T18250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 404.804828][T17708] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.814138][T17708] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.823009][T17708] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.845036][T17708] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.906882][T18316] lo speed is unknown, defaulting to 1000 [ 404.913028][T18316] lo speed is unknown, defaulting to 1000 [ 405.358893][T18326] netlink: 'syz.2.4972': attribute type 10 has an invalid length. [ 405.371231][T18326] team0: Port device dummy0 added [ 405.373878][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 405.382327][ T3561] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 405.386876][T18326] netlink: 'syz.2.4972': attribute type 10 has an invalid length. [ 405.397489][T18326] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 405.410546][T18326] team0: Failed to send options change via netlink (err -105) [ 405.418419][T18326] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 405.427905][T18326] team0: Port device dummy0 removed [ 405.435273][T18326] dummy0: entered promiscuous mode [ 405.440604][T18326] dummy0: entered allmulticast mode [ 405.447723][T18326] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 405.464891][T18328] FAULT_INJECTION: forcing a failure. [ 405.464891][T18328] name failslab, interval 1, probability 0, space 0, times 0 [ 405.477771][T18328] CPU: 0 UID: 0 PID: 18328 Comm: syz.0.4973 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 405.477816][T18328] Tainted: [W]=WARN [ 405.477825][T18328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 405.477842][T18328] Call Trace: [ 405.477851][T18328] [ 405.477937][T18328] __dump_stack+0x1d/0x30 [ 405.478113][T18328] dump_stack_lvl+0xe8/0x140 [ 405.478135][T18328] dump_stack+0x15/0x1b [ 405.478154][T18328] should_fail_ex+0x265/0x280 [ 405.478197][T18328] ? percpu_ref_init+0x9c/0x250 [ 405.478217][T18328] should_failslab+0x8c/0xb0 [ 405.478269][T18328] ? __pfx_css_release+0x10/0x10 [ 405.478340][T18328] __kmalloc_cache_noprof+0x4c/0x4a0 [ 405.478376][T18328] ? __pfx_css_release+0x10/0x10 [ 405.478395][T18328] percpu_ref_init+0x9c/0x250 [ 405.478417][T18328] cgroup_mkdir+0x19a/0xcc0 [ 405.478535][T18328] ? may_create+0x26e/0x2b0 [ 405.478571][T18328] ? __pfx_cgroup_mkdir+0x10/0x10 [ 405.478648][T18328] kernfs_iop_mkdir+0x11e/0x1c0 [ 405.478685][T18328] vfs_mkdir+0x213/0x340 [ 405.478711][T18328] do_mkdirat+0x132/0x3f0 [ 405.478740][T18328] __x64_sys_mkdirat+0x4c/0x60 [ 405.478777][T18328] x64_sys_call+0x2b7/0x3000 [ 405.478802][T18328] do_syscall_64+0xd2/0x200 [ 405.478824][T18328] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 405.478911][T18328] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 405.478947][T18328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.479100][T18328] RIP: 0033:0x7fed6efcf6c9 [ 405.479121][T18328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 405.479140][T18328] RSP: 002b:00007fed6da2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 405.479160][T18328] RAX: ffffffffffffffda RBX: 00007fed6f225fa0 RCX: 00007fed6efcf6c9 [ 405.479173][T18328] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 405.479186][T18328] RBP: 00007fed6da2f090 R08: 0000000000000000 R09: 0000000000000000 [ 405.479199][T18328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 405.479279][T18328] R13: 00007fed6f226038 R14: 00007fed6f225fa0 R15: 00007ffee8e7a188 [ 405.479332][T18328] [ 405.709821][T17707] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.724258][T17708] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.743104][T17708] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.753830][T17708] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.835065][T18340] loop6: detected capacity change from 0 to 2048 [ 405.845897][T18347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4976'. [ 405.876690][T18340] Alternate GPT is invalid, using primary GPT. [ 405.883097][T18340] loop6: p2 p3 p7 [ 406.600135][T18361] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4982'. [ 406.634894][ T29] kauditd_printk_skb: 675 callbacks suppressed [ 406.634921][ T29] audit: type=1326 audit(1763042419.724:42121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18359 comm="syz.1.4982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe066a2f6c9 code=0x7ffc0000 [ 406.684071][ T29] audit: type=1326 audit(1763042419.724:42122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18359 comm="syz.1.4982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fe066a2f6c9 code=0x7ffc0000 [ 406.722700][ T29] audit: type=1400 audit(1763042419.774:42123): avc: denied { create } for pid=18362 comm="syz.0.4983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 406.743602][ T29] audit: type=1326 audit(1763042419.774:42124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18359 comm="syz.1.4982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe066a2f6c9 code=0x7ffc0000 [ 406.767248][ T29] audit: type=1326 audit(1763042419.774:42125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18359 comm="syz.1.4982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe066a2f6c9 code=0x7ffc0000 [ 406.790978][ T29] audit: type=1400 audit(1763042419.794:42126): avc: denied { bind } for pid=18362 comm="syz.0.4983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 406.811062][ T29] audit: type=1400 audit(1763042419.794:42127): avc: denied { read write } for pid=18359 comm="syz.1.4982" name="vcs3" dev="devtmpfs" ino=1546 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 406.834388][ T29] audit: type=1400 audit(1763042419.794:42128): avc: denied { open } for pid=18359 comm="syz.1.4982" path="/dev/vcs3" dev="devtmpfs" ino=1546 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 406.857649][ T29] audit: type=1326 audit(1763042419.804:42129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18365 comm="syz.1.4982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe066a61f85 code=0x7ffc0000 [ 406.863389][ T4678] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 406.887777][ T3561] Bluetooth: hci1: command 0x1003 tx timeout [ 406.891063][ T29] audit: type=1400 audit(1763042419.804:42130): avc: denied { write } for pid=18362 comm="syz.0.4983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 407.072949][T18378] lo speed is unknown, defaulting to 1000 [ 407.090435][T18378] lo speed is unknown, defaulting to 1000 [ 407.094125][T18379] bridge: RTM_NEWNEIGH with invalid ether address [ 407.128833][T18380] netlink: 1040 bytes leftover after parsing attributes in process `syz.4.4990'. [ 407.141624][T18382] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4991'. [ 407.197516][T18382] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 407.255907][T18382] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 407.266220][T18382] bond0 (unregistering): Released all slaves [ 407.287905][T18384] lo speed is unknown, defaulting to 1000 [ 407.294229][T18384] lo speed is unknown, defaulting to 1000 [ 407.604992][T18397] lo speed is unknown, defaulting to 1000 [ 407.622044][T18397] lo speed is unknown, defaulting to 1000 [ 407.731563][T18403] loop6: detected capacity change from 0 to 764 [ 407.749036][T18403] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 407.764918][T18403] Symlink component flag not implemented [ 407.779606][T18403] Symlink component flag not implemented (7) [ 408.405191][T17701] Bluetooth: hci0: Frame reassembly failed (-84) [ 408.430028][ T4556] IPVS: starting estimator thread 0... [ 408.523949][T18428] IPVS: using max 1824 ests per chain, 91200 per kthread [ 408.544797][T18432] lo speed is unknown, defaulting to 1000 [ 408.559376][T18432] lo speed is unknown, defaulting to 1000 [ 408.844423][T18444] netlink: 'syz.4.5013': attribute type 10 has an invalid length. [ 408.868706][T18444] team0: Port device dummy0 added [ 409.074431][T18452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5012'. [ 409.083319][T18452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5012'. [ 409.802815][T18479] lo speed is unknown, defaulting to 1000 [ 409.814946][T18479] lo speed is unknown, defaulting to 1000 [ 409.918079][T18484] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5024'. [ 409.939964][T18484] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5024'. [ 410.413722][ T3561] Bluetooth: hci0: command 0x1003 tx timeout [ 410.419877][ T4678] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 410.487614][T18511] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5032'. [ 410.725050][T18528] loop6: detected capacity change from 0 to 2048 [ 410.828327][T18528] Alternate GPT is invalid, using primary GPT. [ 410.834842][T18528] loop6: p2 p3 p7 [ 410.894446][T18517] Set syz1 is full, maxelem 65536 reached [ 411.036591][T18535] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 411.082702][T18540] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5044'. [ 411.091775][T18540] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5044'. [ 411.105863][T18540] vlan2: entered allmulticast mode [ 411.140771][T18547] ALSA: seq fatal error: cannot create timer (-22) [ 411.723790][ T29] kauditd_printk_skb: 214 callbacks suppressed [ 411.723807][ T29] audit: type=1400 audit(1763042424.764:42345): avc: denied { firmware_load } for pid=18551 comm="syz.1.5046" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 412.131136][ T29] audit: type=1400 audit(1763042425.214:42346): avc: denied { mounton } for pid=18565 comm="syz.4.5051" path="/400/file1" dev="tmpfs" ino=2214 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 412.192376][ T29] audit: type=1400 audit(1763042425.274:42347): avc: denied { read write } for pid=18565 comm="syz.4.5051" name="cgroup.procs" dev="cgroup" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:getty_etc_t:s0" [ 412.219838][ T29] audit: type=1400 audit(1763042425.274:42348): avc: denied { open } for pid=18565 comm="syz.4.5051" path="/syzcgroup/cpu/syz4/cgroup.procs" dev="cgroup" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:getty_etc_t:s0" [ 412.278501][ T29] audit: type=1326 audit(1763042425.364:42349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18523 comm="syz.2.5037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895518f6c9 code=0x7ffc0000 [ 412.302239][ T29] audit: type=1326 audit(1763042425.364:42350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18523 comm="syz.2.5037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895518f6c9 code=0x7ffc0000 [ 412.332624][ T29] audit: type=1326 audit(1763042425.414:42351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18523 comm="syz.2.5037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f895518f6c9 code=0x7ffc0000 [ 412.356240][ T29] audit: type=1326 audit(1763042425.414:42352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18523 comm="syz.2.5037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895518f6c9 code=0x7ffc0000 [ 412.379940][ T29] audit: type=1326 audit(1763042425.414:42353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18523 comm="syz.2.5037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895518f6c9 code=0x7ffc0000 [ 412.519334][ T29] audit: type=1326 audit(1763042425.604:42354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18572 comm="syz.1.5053" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe066a2f6c9 code=0x0 [ 412.623956][T18582] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5055'. [ 413.136917][ T4678] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 413.143155][ T3561] Bluetooth: hci0: command 0x1003 tx timeout [ 413.797551][T18623] xt_hashlimit: max too large, truncated to 1048576 [ 413.831627][T18622] lo speed is unknown, defaulting to 1000 [ 413.837973][T18622] lo speed is unknown, defaulting to 1000 [ 414.021023][T18635] ip6t_srh: unknown srh match flags 4000 [ 414.152080][T18645] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.159373][T18645] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.206028][T18645] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 414.217264][T18645] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 414.258680][T18645] vlan2: left allmulticast mode [ 414.264658][T17705] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.274774][T17705] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.283804][T17705] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.329922][T17705] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.444436][T18652] can0: slcan on ptm1. [ 414.513790][T18652] can0 (unregistered): slcan off ptm1. [ 414.519546][T18652] Falling back ldisc for ptm1. [ 414.657269][T18670] FAULT_INJECTION: forcing a failure. [ 414.657269][T18670] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 414.670746][T18670] CPU: 0 UID: 0 PID: 18670 Comm: syz.6.5091 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 414.670789][T18670] Tainted: [W]=WARN [ 414.670798][T18670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 414.670814][T18670] Call Trace: [ 414.670822][T18670] [ 414.670831][T18670] __dump_stack+0x1d/0x30 [ 414.670913][T18670] dump_stack_lvl+0xe8/0x140 [ 414.670938][T18670] dump_stack+0x15/0x1b [ 414.671014][T18670] should_fail_ex+0x265/0x280 [ 414.671041][T18670] should_fail+0xb/0x20 [ 414.671063][T18670] should_fail_usercopy+0x1a/0x20 [ 414.671087][T18670] _copy_from_user+0x1c/0xb0 [ 414.671148][T18670] kstrtouint_from_user+0x69/0xf0 [ 414.671190][T18670] ? 0xffffffff81000000 [ 414.671205][T18670] ? selinux_file_permission+0x1e4/0x320 [ 414.671282][T18670] proc_fail_nth_write+0x50/0x160 [ 414.671321][T18670] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 414.671433][T18670] vfs_write+0x269/0x960 [ 414.671465][T18670] ? vfs_read+0x4e6/0x770 [ 414.671504][T18670] ? __rcu_read_unlock+0x4f/0x70 [ 414.671538][T18670] ? __fget_files+0x184/0x1c0 [ 414.671577][T18670] ksys_write+0xda/0x1a0 [ 414.671605][T18670] __x64_sys_write+0x40/0x50 [ 414.671768][T18670] x64_sys_call+0x2802/0x3000 [ 414.671799][T18670] do_syscall_64+0xd2/0x200 [ 414.671825][T18670] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 414.671865][T18670] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 414.671909][T18670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.671976][T18670] RIP: 0033:0x7f7f99c1e17f [ 414.671996][T18670] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 414.672021][T18670] RSP: 002b:00007f7f9867f030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 414.672043][T18670] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7f99c1e17f [ 414.672074][T18670] RDX: 0000000000000001 RSI: 00007f7f9867f0a0 RDI: 0000000000000006 [ 414.672088][T18670] RBP: 00007f7f9867f090 R08: 0000000000000000 R09: 0000000000000000 [ 414.672103][T18670] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 414.672120][T18670] R13: 00007f7f99e76038 R14: 00007f7f99e75fa0 R15: 00007fffc2bbe788 [ 414.672147][T18670] [ 414.939499][T18672] veth2: entered promiscuous mode [ 414.944646][T18672] veth2: entered allmulticast mode [ 415.009486][T18679] netlink: 244 bytes leftover after parsing attributes in process `syz.0.5093'. [ 415.048148][T18681] siw: device registration error -23 [ 415.096564][T18694] xt_hashlimit: max too large, truncated to 1048576 [ 415.521380][T18733] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5117'. [ 415.584984][T18736] loop6: detected capacity change from 0 to 764 [ 415.585315][T18740] program gtp is using a deprecated SCSI ioctl, please convert it to SG_IO [ 415.600562][T18736] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 415.609504][T18736] Symlink component flag not implemented [ 415.615477][T18736] Symlink component flag not implemented (7) [ 416.159436][T18763] FAULT_INJECTION: forcing a failure. [ 416.159436][T18763] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 416.172589][T18763] CPU: 1 UID: 0 PID: 18763 Comm: syz.2.5129 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 416.172631][T18763] Tainted: [W]=WARN [ 416.172641][T18763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 416.172690][T18763] Call Trace: [ 416.172700][T18763] [ 416.172711][T18763] __dump_stack+0x1d/0x30 [ 416.172814][T18763] dump_stack_lvl+0xe8/0x140 [ 416.172836][T18763] dump_stack+0x15/0x1b [ 416.172861][T18763] should_fail_ex+0x265/0x280 [ 416.172888][T18763] should_fail+0xb/0x20 [ 416.172917][T18763] should_fail_usercopy+0x1a/0x20 [ 416.173024][T18763] strncpy_from_user+0x25/0x230 [ 416.173055][T18763] ? strncpy_from_user+0x177/0x230 [ 416.173097][T18763] strncpy_from_user_nofault+0x68/0xf0 [ 416.173128][T18763] bpf_probe_read_user_str+0x2a/0x70 [ 416.173201][T18763] bpf_prog_c762caf419d1c004+0x3e/0x44 [ 416.173224][T18763] bpf_trace_run4+0x117/0x1d0 [ 416.173259][T18763] __traceiter_sched_switch+0x3f/0x60 [ 416.173375][T18763] __schedule+0xa17/0xb30 [ 416.173413][T18763] __cond_resched+0x4e/0x90 [ 416.173440][T18763] netlink_autobind+0x7f/0x150 [ 416.173472][T18763] netlink_sendmsg+0x35b/0x6b0 [ 416.173502][T18763] ? __pfx_netlink_sendmsg+0x10/0x10 [ 416.173530][T18763] __sock_sendmsg+0x145/0x180 [ 416.173577][T18763] ____sys_sendmsg+0x31e/0x4e0 [ 416.173617][T18763] ___sys_sendmsg+0x17b/0x1d0 [ 416.173785][T18763] __x64_sys_sendmsg+0xd4/0x160 [ 416.173811][T18763] x64_sys_call+0x191e/0x3000 [ 416.173837][T18763] do_syscall_64+0xd2/0x200 [ 416.173872][T18763] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 416.173904][T18763] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 416.173949][T18763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.174040][T18763] RIP: 0033:0x7f895518f6c9 [ 416.174057][T18763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 416.174077][T18763] RSP: 002b:00007f8953bef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 416.174098][T18763] RAX: ffffffffffffffda RBX: 00007f89553e5fa0 RCX: 00007f895518f6c9 [ 416.174113][T18763] RDX: 0000000004008040 RSI: 0000200000000340 RDI: 0000000000000006 [ 416.174197][T18763] RBP: 00007f8953bef090 R08: 0000000000000000 R09: 0000000000000000 [ 416.174211][T18763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 416.174224][T18763] R13: 00007f89553e6038 R14: 00007f89553e5fa0 R15: 00007ffc32ebb478 [ 416.174246][T18763] [ 416.624901][T18781] lo speed is unknown, defaulting to 1000 [ 416.641327][T18781] lo speed is unknown, defaulting to 1000 [ 416.817704][ T29] kauditd_printk_skb: 412 callbacks suppressed [ 416.817724][ T29] audit: type=1326 audit(1763042429.904:42767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18794 comm="syz.4.5142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7706c7f6c9 code=0x7ffc0000 [ 416.894495][T18797] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5143'. [ 416.913649][ T29] audit: type=1326 audit(1763042429.904:42768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18794 comm="syz.4.5142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7706c7f6c9 code=0x7ffc0000 [ 416.937365][ T29] audit: type=1326 audit(1763042429.904:42769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18794 comm="syz.4.5142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7706c7f6c9 code=0x7ffc0000 [ 416.961053][ T29] audit: type=1326 audit(1763042429.904:42770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18794 comm="syz.4.5142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7706c7f6c9 code=0x7ffc0000 [ 416.985084][ T29] audit: type=1326 audit(1763042429.904:42771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18794 comm="syz.4.5142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7706c7f6c9 code=0x7ffc0000 [ 417.008842][ T29] audit: type=1326 audit(1763042429.904:42772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18794 comm="syz.4.5142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7706c7f6c9 code=0x7ffc0000 [ 417.032820][ T29] audit: type=1326 audit(1763042429.904:42773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18794 comm="syz.4.5142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7706c7f6c9 code=0x7ffc0000 [ 417.056491][ T29] audit: type=1326 audit(1763042429.904:42774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18794 comm="syz.4.5142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7706c7df10 code=0x7ffc0000 [ 417.080548][ T29] audit: type=1326 audit(1763042429.904:42775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18794 comm="syz.4.5142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7706c7df10 code=0x7ffc0000 [ 417.104303][ T29] audit: type=1326 audit(1763042429.904:42776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18794 comm="syz.4.5142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7706c7f6c9 code=0x7ffc0000 [ 417.840730][T18828] loop6: detected capacity change from 0 to 2048 [ 417.943472][T18836] lo speed is unknown, defaulting to 1000 [ 417.952090][T18828] Alternate GPT is invalid, using primary GPT. [ 417.958518][T18828] loop6: p2 p3 p7 [ 417.965788][T18836] lo speed is unknown, defaulting to 1000 [ 418.079758][T18840] Bluetooth: hci0: Frame reassembly failed (-90) [ 418.124745][T17701] Bluetooth: hci0: Frame reassembly failed (-84) [ 418.528464][T18846] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5161'. [ 418.537413][T18846] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5161'. [ 419.470475][T18851] xt_CT: No such helper "snmp_trap" [ 419.487150][T18854] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5163'. [ 419.671695][T18865] tap0: tun_chr_ioctl cmd 2147767507 [ 419.712109][T18870] siw: device registration error -23 [ 420.093689][ T4678] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 420.128172][T18877] FAULT_INJECTION: forcing a failure. [ 420.128172][T18877] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 420.141340][T18877] CPU: 1 UID: 0 PID: 18877 Comm: syz.4.5169 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 420.141453][T18877] Tainted: [W]=WARN [ 420.141460][T18877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 420.141473][T18877] Call Trace: [ 420.141481][T18877] [ 420.141489][T18877] __dump_stack+0x1d/0x30 [ 420.141588][T18877] dump_stack_lvl+0xe8/0x140 [ 420.141611][T18877] dump_stack+0x15/0x1b [ 420.141713][T18877] should_fail_ex+0x265/0x280 [ 420.141741][T18877] should_fail+0xb/0x20 [ 420.141764][T18877] should_fail_usercopy+0x1a/0x20 [ 420.141794][T18877] _copy_to_user+0x20/0xa0 [ 420.141820][T18877] simple_read_from_buffer+0xb5/0x130 [ 420.141898][T18877] proc_fail_nth_read+0x10e/0x150 [ 420.141941][T18877] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 420.142024][T18877] vfs_read+0x1a8/0x770 [ 420.142057][T18877] ? __rcu_read_unlock+0x4f/0x70 [ 420.142089][T18877] ? __fget_files+0x184/0x1c0 [ 420.142127][T18877] ? ksys_read+0x9d/0x1a0 [ 420.142200][T18877] ksys_read+0xda/0x1a0 [ 420.142236][T18877] __x64_sys_read+0x40/0x50 [ 420.142285][T18877] x64_sys_call+0x27c0/0x3000 [ 420.142317][T18877] do_syscall_64+0xd2/0x200 [ 420.142340][T18877] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 420.142413][T18877] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 420.142455][T18877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.142480][T18877] RIP: 0033:0x7f7706c7e0dc [ 420.142564][T18877] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 420.142590][T18877] RSP: 002b:00007f77056df030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 420.142616][T18877] RAX: ffffffffffffffda RBX: 00007f7706ed5fa0 RCX: 00007f7706c7e0dc [ 420.142656][T18877] RDX: 000000000000000f RSI: 00007f77056df0a0 RDI: 0000000000000004 [ 420.142715][T18877] RBP: 00007f77056df090 R08: 0000000000000000 R09: 0000000000000000 [ 420.142732][T18877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.142750][T18877] R13: 00007f7706ed6038 R14: 00007f7706ed5fa0 R15: 00007ffcd5f50268 [ 420.142777][T18877] [ 420.408110][T18883] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5172'. [ 420.417496][T18883] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5172'. [ 420.440041][T18883] netlink: 'syz.0.5172': attribute type 13 has an invalid length. [ 420.447962][T18883] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5172'. [ 420.473246][T18883] : renamed from syz_tun (while UP) [ 420.481191][T18883] : refused to change device tx_queue_len [ 420.487259][T18883] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 420.544420][T18890] lo speed is unknown, defaulting to 1000 [ 420.550567][T18890] lo speed is unknown, defaulting to 1000 [ 420.572625][T18894] netlink: 'syz.2.5177': attribute type 13 has an invalid length. [ 420.586066][T18894] gretap0: refused to change device tx_queue_len [ 420.593175][T18894] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 420.612100][T18892] netlink: 'syz.0.5176': attribute type 10 has an invalid length. [ 420.625395][T18892] netlink: 'syz.0.5176': attribute type 10 has an invalid length. [ 420.728467][T18898] lo speed is unknown, defaulting to 1000 [ 420.734928][T18898] lo speed is unknown, defaulting to 1000 [ 420.765169][T18902] lo speed is unknown, defaulting to 1000 [ 420.781255][T18902] lo speed is unknown, defaulting to 1000 [ 420.803210][T18907] pim6reg: entered allmulticast mode [ 421.013595][T18925] loop6: detected capacity change from 0 to 164 [ 421.031163][T18925] ISOFS: unable to read i-node block [ 421.053532][T18925] isofs_fill_super: get root inode failed [ 421.858493][ T29] kauditd_printk_skb: 561 callbacks suppressed [ 421.858512][ T29] audit: type=1400 audit(1763042434.944:43338): avc: denied { create } for pid=18962 comm="syz.0.5199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 421.870195][T18965] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5200'. [ 421.886086][ T29] audit: type=1400 audit(1763042434.974:43339): avc: denied { bind } for pid=18962 comm="syz.0.5199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 421.920030][T18970] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 421.932716][ T29] audit: type=1400 audit(1763042435.004:43340): avc: denied { write } for pid=18962 comm="syz.0.5199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 421.952491][ T29] audit: type=1400 audit(1763042435.004:43341): avc: denied { create } for pid=18962 comm="syz.0.5199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 421.973041][ T29] audit: type=1400 audit(1763042435.014:43342): avc: denied { create } for pid=18969 comm="syz.4.5201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 421.982910][T18973] loop6: detected capacity change from 0 to 2048 [ 421.993073][ T29] audit: type=1400 audit(1763042435.014:43343): avc: denied { setopt } for pid=18969 comm="syz.4.5201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 422.020244][ T29] audit: type=1400 audit(1763042435.104:43344): avc: denied { write } for pid=18972 comm="syz.0.5203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 422.097026][T18973] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 422.124799][ T29] audit: type=1400 audit(1763042435.204:43345): avc: denied { write } for pid=18983 comm="syz.2.5206" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 422.144142][ T29] audit: type=1400 audit(1763042435.204:43346): avc: denied { bind } for pid=18983 comm="syz.2.5206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 422.183059][ T29] audit: type=1400 audit(1763042435.214:43347): avc: denied { mount } for pid=18971 comm="syz.6.5202" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 422.206907][T18992] xt_hashlimit: max too large, truncated to 1048576 [ 422.442399][T19005] lo speed is unknown, defaulting to 1000 [ 422.448954][T19005] lo speed is unknown, defaulting to 1000 [ 422.597638][T19007] lo speed is unknown, defaulting to 1000 [ 422.604242][T19007] lo speed is unknown, defaulting to 1000 [ 422.903242][T18250] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.936885][T19011] netlink: 'syz.6.5215': attribute type 2 has an invalid length. [ 423.735007][T19045] lo speed is unknown, defaulting to 1000 [ 423.741305][T19045] lo speed is unknown, defaulting to 1000 [ 423.994512][T19063] siw: device registration error -23 [ 424.072128][T19068] netlink: 'syz.2.5237': attribute type 21 has an invalid length. [ 424.082909][T19068] netlink: 144 bytes leftover after parsing attributes in process `syz.2.5237'. [ 424.167871][T19080] lo speed is unknown, defaulting to 1000 [ 424.174261][T19080] lo speed is unknown, defaulting to 1000 [ 424.670091][T17700] Bluetooth: hci0: Frame reassembly failed (-84) [ 425.431762][T19135] siw: device registration error -23 [ 425.809421][T19146] lo speed is unknown, defaulting to 1000 [ 425.849071][T19146] lo speed is unknown, defaulting to 1000 [ 426.450930][T17700] Bluetooth: hci1: Frame reassembly failed (-90) [ 426.461705][T19155] Bluetooth: hci1: Frame reassembly failed (-84) [ 426.743766][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 426.749965][ T4678] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 426.837259][T19181] dummy0: entered promiscuous mode [ 426.842854][T19181] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5275'. [ 426.852656][T19181] dummy0 (unregistering): left promiscuous mode [ 426.877965][ T29] kauditd_printk_skb: 268 callbacks suppressed [ 426.878012][ T29] audit: type=1400 audit(1763042439.964:43616): avc: denied { ioctl } for pid=19176 comm="syz.0.5274" path="/syzcgroup/cpu/syz0/cgroup.procs" dev="cgroup" ino=200 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 426.914846][ T29] audit: type=1326 audit(1763042440.004:43617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19180 comm="syz.6.5275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f99c1f6c9 code=0x7ffc0000 [ 426.938726][ T29] audit: type=1326 audit(1763042440.004:43618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19180 comm="syz.6.5275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f7f99c1f6c9 code=0x7ffc0000 [ 426.962394][ T29] audit: type=1326 audit(1763042440.004:43619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19180 comm="syz.6.5275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f99c1f6c9 code=0x7ffc0000 [ 426.996199][T19187] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5273'. [ 427.005139][T19187] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5273'. [ 427.367524][ T29] audit: type=1326 audit(1763042440.044:43620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19184 comm="syz.6.5276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f99c1f6c9 code=0x7ffc0000 [ 427.391233][ T29] audit: type=1326 audit(1763042440.044:43621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19184 comm="syz.6.5276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f99c1f6c9 code=0x7ffc0000 [ 427.414954][ T29] audit: type=1326 audit(1763042440.044:43622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19184 comm="syz.6.5276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f99c1f6c9 code=0x7ffc0000 [ 427.438974][ T29] audit: type=1326 audit(1763042440.044:43623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19184 comm="syz.6.5276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f99c1f6c9 code=0x7ffc0000 [ 427.463526][ T29] audit: type=1326 audit(1763042440.044:43624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19184 comm="syz.6.5276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f99c1f6c9 code=0x7ffc0000 [ 427.487306][ T29] audit: type=1326 audit(1763042440.044:43625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19184 comm="syz.6.5276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f99c1f6c9 code=0x7ffc0000 [ 427.759198][T19197] lo speed is unknown, defaulting to 1000 [ 427.849913][T19197] lo speed is unknown, defaulting to 1000 [ 428.493664][ T4678] Bluetooth: hci1: command 0x1003 tx timeout [ 428.493727][ T3561] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 428.532333][T19234] loop6: detected capacity change from 0 to 764 [ 428.593785][T19234] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 428.653219][ C1] sd 0:0:1:0: [sda] tag#3642 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 428.663678][ C1] sd 0:0:1:0: [sda] tag#3642 CDB: Read(6) 08 00 00 00 63 c2 [ 428.665799][T19231] Symlink component flag not implemented [ 428.727826][T19231] Symlink component flag not implemented (7) [ 428.918753][T19260] netlink: 19 bytes leftover after parsing attributes in process `syz.1.5299'. [ 429.375232][T19267] xt_hashlimit: max too large, truncated to 1048576 [ 429.396744][T19266] lo speed is unknown, defaulting to 1000 [ 429.402948][T19266] lo speed is unknown, defaulting to 1000 [ 429.509877][T19279] siw: device registration error -23 [ 429.725699][T19287] netlink: 'syz.2.5309': attribute type 1 has an invalid length. [ 429.746515][T19287] 8021q: adding VLAN 0 to HW filter on device bond1 [ 429.792614][T19291] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5309'. [ 430.006752][T19291] bond1 (unregistering): Released all slaves [ 430.047936][T19294] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5311'. [ 430.080924][T19298] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5312'. [ 430.090848][T19298] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5312'. [ 430.149382][T19300] netlink: 'syz.2.5313': attribute type 10 has an invalid length. [ 430.175470][T19300] bond0: (slave dummy0): Releasing backup interface [ 430.183317][T19300] dummy0: left promiscuous mode [ 430.191810][T19300] dummy0: left allmulticast mode [ 430.199953][T19302] netlink: 'syz.2.5313': attribute type 10 has an invalid length. [ 430.208709][T19300] team0: Port device dummy0 added [ 430.241466][T19302] team0: Port device dummy0 removed [ 430.255114][T19302] dummy0: entered promiscuous mode [ 430.264975][T19302] dummy0: entered allmulticast mode [ 430.271292][T19302] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 430.460898][T19311] netlink: 'syz.0.5317': attribute type 21 has an invalid length. [ 430.468923][T19311] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5317'. [ 430.483276][T19311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5317'. [ 430.510330][T19320] lo speed is unknown, defaulting to 1000 [ 430.517123][T19320] lo speed is unknown, defaulting to 1000 [ 430.595599][T19321] siw: device registration error -23 [ 430.735305][T19323] loop6: detected capacity change from 0 to 164 [ 430.832270][T19323] ISOFS: unable to read i-node block [ 430.906444][T19323] isofs_fill_super: get root inode failed [ 431.027250][T17705] Bluetooth: hci0: Frame reassembly failed (-84) [ 431.216098][T19334] lo speed is unknown, defaulting to 1000 [ 431.257098][T19334] lo speed is unknown, defaulting to 1000 [ 431.402197][T19347] siw: device registration error -23 [ 431.938139][T19374] lo speed is unknown, defaulting to 1000 [ 431.944345][T19374] lo speed is unknown, defaulting to 1000 [ 432.857838][ T29] kauditd_printk_skb: 352 callbacks suppressed [ 432.857857][ T29] audit: type=1400 audit(1763042445.944:43978): avc: denied { mounton } for pid=19382 comm="syz.0.5341" path="/563/file0" dev="tmpfs" ino=3022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 433.063689][ T4678] Bluetooth: hci0: command 0x1003 tx timeout [ 433.073848][ T3561] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 433.167540][T19398] lo speed is unknown, defaulting to 1000 [ 433.224263][T19398] lo speed is unknown, defaulting to 1000 [ 433.312576][ T29] audit: type=1326 audit(1763042446.394:43979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19403 comm="syz.2.5348" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f895518f6c9 code=0x0 [ 433.897916][T19427] lo speed is unknown, defaulting to 1000 [ 433.904039][T19427] lo speed is unknown, defaulting to 1000 [ 434.797546][ T29] audit: type=1400 audit(1763042447.884:43980): avc: denied { read } for pid=19431 comm="syz.0.5356" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 434.822209][ T29] audit: type=1400 audit(1763042447.884:43981): avc: denied { open } for pid=19431 comm="syz.0.5356" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 434.853013][T19438] FAULT_INJECTION: forcing a failure. [ 434.853013][T19438] name failslab, interval 1, probability 0, space 0, times 0 [ 434.865825][T19438] CPU: 1 UID: 0 PID: 19438 Comm: syz.2.5357 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 434.865862][T19438] Tainted: [W]=WARN [ 434.865869][T19438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 434.865883][T19438] Call Trace: [ 434.865908][T19438] [ 434.865916][T19438] __dump_stack+0x1d/0x30 [ 434.865963][T19438] dump_stack_lvl+0xe8/0x140 [ 434.865985][T19438] dump_stack+0x15/0x1b [ 434.866004][T19438] should_fail_ex+0x265/0x280 [ 434.866025][T19438] should_failslab+0x8c/0xb0 [ 434.866056][T19438] kmem_cache_alloc_lru_noprof+0x55/0x490 [ 434.866104][T19438] ? __d_alloc+0x3d/0x340 [ 434.866136][T19438] ? obj_cgroup_charge_account+0x122/0x1a0 [ 434.866162][T19438] __d_alloc+0x3d/0x340 [ 434.866195][T19438] ? should_failslab+0x8c/0xb0 [ 434.866303][T19438] d_alloc_pseudo+0x1e/0x80 [ 434.866337][T19438] alloc_file_pseudo+0x71/0x160 [ 434.866357][T19438] ? security_inode_alloc+0x69/0x100 [ 434.866383][T19438] sock_alloc_file+0x9c/0x1e0 [ 434.866451][T19438] do_accept+0x1e4/0x3a0 [ 434.866544][T19438] __sys_accept4+0xbf/0x140 [ 434.866576][T19438] __x64_sys_accept4+0x51/0x60 [ 434.866678][T19438] x64_sys_call+0x2ee2/0x3000 [ 434.866788][T19438] do_syscall_64+0xd2/0x200 [ 434.866810][T19438] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 434.866873][T19438] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 434.866909][T19438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.866979][T19438] RIP: 0033:0x7f895518f6c9 [ 434.867011][T19438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 434.867031][T19438] RSP: 002b:00007f8953bce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 434.867051][T19438] RAX: ffffffffffffffda RBX: 00007f89553e6090 RCX: 00007f895518f6c9 [ 434.867065][T19438] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 434.867154][T19438] RBP: 00007f8953bce090 R08: 0000000000000000 R09: 0000000000000000 [ 434.867168][T19438] R10: 0400000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 434.867182][T19438] R13: 00007f89553e6128 R14: 00007f89553e6090 R15: 00007ffc32ebb478 [ 434.867203][T19438] [ 434.870396][ T29] audit: type=1400 audit(1763042447.954:43982): avc: denied { kexec_image_load } for pid=19431 comm="syz.0.5356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 434.944206][T19435] netlink: 'syz.2.5357': attribute type 1 has an invalid length. [ 434.988579][ T29] audit: type=1400 audit(1763042447.954:43983): avc: denied { ioctl } for pid=19431 comm="syz.0.5356" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 435.046755][T19438] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5357'. [ 435.120421][T19435] 8021q: adding VLAN 0 to HW filter on device bond1 [ 435.251553][T19438] bond1 (unregistering): Released all slaves [ 435.294546][T19441] lo speed is unknown, defaulting to 1000 [ 435.316395][T19456] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5361'. [ 435.323959][ T29] audit: type=1400 audit(1763042448.404:43984): avc: denied { read } for pid=19446 comm="syz.1.5361" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 435.349201][ T29] audit: type=1400 audit(1763042448.404:43985): avc: denied { open } for pid=19446 comm="syz.1.5361" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 435.376888][T19441] lo speed is unknown, defaulting to 1000 [ 435.462443][ T29] audit: type=1400 audit(1763042448.544:43986): avc: denied { block_suspend } for pid=19446 comm="syz.1.5361" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 435.520335][ T29] audit: type=1326 audit(1763042448.604:43987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19466 comm="syz.4.5367" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7706c7f6c9 code=0x0 [ 435.603132][T19474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.612078][T19474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.625797][T19474] can0: slcan on ttyS3. [ 435.684115][T19474] can0 (unregistered): slcan off ttyS3. [ 436.237775][T19497] siw: device registration error -23 [ 436.467102][T19511] lo speed is unknown, defaulting to 1000 [ 436.473550][T19511] lo speed is unknown, defaulting to 1000 [ 437.191457][T19534] siw: device registration error -23 [ 438.004635][T19575] lo speed is unknown, defaulting to 1000 [ 438.010981][T19575] lo speed is unknown, defaulting to 1000 [ 438.286533][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 438.286551][ T29] audit: type=1400 audit(1763042451.374:44011): avc: denied { mount } for pid=19574 comm="syz.4.5403" name="/" dev="rpc_pipefs" ino=66465 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 438.412804][T19580] xt_hashlimit: max too large, truncated to 1048576 [ 438.533736][ T29] audit: type=1326 audit(1763042451.614:44012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19585 comm="syz.0.5408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6efcf6c9 code=0x7ffc0000 [ 438.557615][ T29] audit: type=1326 audit(1763042451.614:44013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19585 comm="syz.0.5408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed6efcf6c9 code=0x7ffc0000 [ 438.581292][ T29] audit: type=1326 audit(1763042451.614:44014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19585 comm="syz.0.5408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6efcf6c9 code=0x7ffc0000 [ 438.605060][ T29] audit: type=1326 audit(1763042451.614:44015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19585 comm="syz.0.5408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed6efcf6c9 code=0x7ffc0000 [ 438.628748][ T29] audit: type=1326 audit(1763042451.614:44016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19585 comm="syz.0.5408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6efcf6c9 code=0x7ffc0000 [ 438.652559][ T29] audit: type=1326 audit(1763042451.614:44017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19585 comm="syz.0.5408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fed6efcdf10 code=0x7ffc0000 [ 438.676320][ T29] audit: type=1326 audit(1763042451.614:44018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19585 comm="syz.0.5408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fed6efcdf10 code=0x7ffc0000 [ 438.699949][ T29] audit: type=1326 audit(1763042451.614:44019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19585 comm="syz.0.5408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6efcf6c9 code=0x7ffc0000 [ 438.723636][ T29] audit: type=1326 audit(1763042451.614:44020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19585 comm="syz.0.5408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7fed6efcf6c9 code=0x7ffc0000 [ 438.927893][T19596] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5412'. [ 438.940043][T19597] siw: device registration error -23 [ 438.993983][T19603] netlink: 'syz.6.5417': attribute type 3 has an invalid length. [ 439.480073][T19620] lo speed is unknown, defaulting to 1000 [ 439.487003][T19620] lo speed is unknown, defaulting to 1000 [ 439.626320][T19624] lo speed is unknown, defaulting to 1000 [ 439.632729][T19624] lo speed is unknown, defaulting to 1000 [ 440.021825][T19628] loop6: detected capacity change from 0 to 764 [ 440.087582][T19628] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 440.097913][T19628] Symlink component flag not implemented [ 440.103738][T19628] Symlink component flag not implemented (7) [ 440.248672][T19643] xt_hashlimit: max too large, truncated to 1048576 [ 440.518134][T19652] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5435'. [ 440.527377][T19652] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5435'. [ 440.747756][T19656] siw: device registration error -23 [ 441.053836][ T3561] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 441.095553][T19686] siw: device registration error -23 [ 441.142444][T19683] netlink: 176 bytes leftover after parsing attributes in process `syz.1.5448'. [ 441.146214][T19693] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 441.152026][T19694] netlink: 176 bytes leftover after parsing attributes in process `syz.1.5448'. [ 441.170819][T19683] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5448'. [ 441.199187][T19683] bridge_slave_1: left allmulticast mode [ 441.204936][T19683] bridge_slave_1: left promiscuous mode [ 441.210739][T19683] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.221389][T19683] bridge_slave_0: left allmulticast mode [ 441.227312][T19683] bridge_slave_0: left promiscuous mode [ 441.233030][T19683] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.372964][T19705] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5458'. [ 441.399900][T19705] FAULT_INJECTION: forcing a failure. [ 441.399900][T19705] name failslab, interval 1, probability 0, space 0, times 0 [ 441.412704][T19705] CPU: 0 UID: 0 PID: 19705 Comm: syz.2.5458 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 441.412738][T19705] Tainted: [W]=WARN [ 441.412809][T19705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 441.412827][T19705] Call Trace: [ 441.412836][T19705] [ 441.412846][T19705] __dump_stack+0x1d/0x30 [ 441.412870][T19705] dump_stack_lvl+0xe8/0x140 [ 441.412891][T19705] dump_stack+0x15/0x1b [ 441.412909][T19705] should_fail_ex+0x265/0x280 [ 441.413002][T19705] should_failslab+0x8c/0xb0 [ 441.413035][T19705] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 441.413135][T19705] ? __alloc_skb+0x101/0x320 [ 441.413177][T19705] __alloc_skb+0x101/0x320 [ 441.413249][T19705] netlink_ack+0xfd/0x500 [ 441.413288][T19705] ? netlink_rcv_skb+0x76/0x220 [ 441.413331][T19705] netlink_rcv_skb+0x192/0x220 [ 441.413369][T19705] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 441.413474][T19705] rtnetlink_rcv+0x1c/0x30 [ 441.413501][T19705] netlink_unicast+0x5c0/0x690 [ 441.413535][T19705] netlink_sendmsg+0x58b/0x6b0 [ 441.413557][T19705] ? __pfx_netlink_sendmsg+0x10/0x10 [ 441.413614][T19705] __sock_sendmsg+0x145/0x180 [ 441.413641][T19705] __sys_sendto+0x268/0x330 [ 441.413696][T19705] __x64_sys_sendto+0x76/0x90 [ 441.413746][T19705] x64_sys_call+0x2d14/0x3000 [ 441.413772][T19705] do_syscall_64+0xd2/0x200 [ 441.413858][T19705] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 441.413900][T19705] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 441.413947][T19705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.413974][T19705] RIP: 0033:0x7f895518f6c9 [ 441.413991][T19705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 441.414084][T19705] RSP: 002b:00007f8953bef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 441.414106][T19705] RAX: ffffffffffffffda RBX: 00007f89553e5fa0 RCX: 00007f895518f6c9 [ 441.414123][T19705] RDX: 0000000000000078 RSI: 0000200000000000 RDI: 0000000000000003 [ 441.414138][T19705] RBP: 00007f8953bef090 R08: 0000000000000000 R09: 0000000000000000 [ 441.414153][T19705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 441.414168][T19705] R13: 00007f89553e6038 R14: 00007f89553e5fa0 R15: 00007ffc32ebb478 [ 441.414189][T19705] [ 441.732419][T19716] xt_hashlimit: max too large, truncated to 1048576 [ 441.756286][T17705] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.771121][T19717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5461'. [ 441.815456][T17705] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.886878][T17705] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.929206][T17705] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.956721][T19719] lo speed is unknown, defaulting to 1000 [ 441.966995][T19719] lo speed is unknown, defaulting to 1000 [ 442.038323][T19729] loop6: detected capacity change from 0 to 764 [ 442.053136][T19729] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 442.082293][T19729] Symlink component flag not implemented [ 442.088195][T19729] Symlink component flag not implemented (7) [ 442.215365][T17705] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 442.225703][T17705] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 442.246058][T17705] bond0 (unregistering): Released all slaves [ 442.256385][T17705] bond1 (unregistering): Released all slaves [ 442.313821][T17705] tipc: Left network mode [ 442.322501][T17705] hsr_slave_0: left promiscuous mode [ 442.330536][T17705] hsr_slave_1: left promiscuous mode [ 442.336580][T17705] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 442.344040][T17705] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 442.351819][T17705] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 442.359306][T17705] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 442.369940][T17705] veth1_macvtap: left promiscuous mode [ 442.375595][T17705] veth0_macvtap: left promiscuous mode [ 442.381344][T17705] veth1_vlan: left promiscuous mode [ 442.388043][T17705] veth0_vlan: left promiscuous mode [ 442.465613][T17705] team0 (unregistering): Port device team_slave_1 removed [ 442.475309][T17705] team0 (unregistering): Port device team_slave_0 removed [ 442.514750][T19719] chnl_net:caif_netlink_parms(): no params data found [ 442.558554][T19719] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.565713][T19719] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.572991][T19719] bridge_slave_0: entered allmulticast mode [ 442.579837][T19719] bridge_slave_0: entered promiscuous mode [ 442.586995][T19719] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.594233][T19719] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.601618][T19719] bridge_slave_1: entered allmulticast mode [ 442.613453][T19719] bridge_slave_1: entered promiscuous mode [ 442.640181][T19719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 442.651202][T19719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 442.673647][T19719] team0: Port device team_slave_0 added [ 442.681366][T19719] team0: Port device team_slave_1 added [ 442.703051][T19719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.710198][T19719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.736159][T19719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 442.747661][T19719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 442.754693][T19719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.781077][T19719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.809645][T19719] hsr_slave_0: entered promiscuous mode [ 442.815853][T19719] hsr_slave_1: entered promiscuous mode [ 442.821999][T19719] debugfs: 'hsr0' already exists in 'hsr' [ 442.827788][T19719] Cannot create hsr debugfs directory [ 442.841869][T17705] IPVS: stop unused estimator thread 0... [ 442.937609][T19719] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 442.947017][T19719] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 442.956596][T19719] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 442.965852][T19719] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 443.018953][T19719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 443.033962][T19719] 8021q: adding VLAN 0 to HW filter on device team0 [ 443.043361][T17704] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.050473][T17704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.068296][T17704] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.075459][T17704] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.118119][T19719] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 443.128606][T19719] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 443.204478][T19772] loop6: detected capacity change from 0 to 764 [ 443.218736][T19719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 443.231796][T19772] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 443.245596][T19772] Symlink component flag not implemented [ 443.251484][T19772] Symlink component flag not implemented (7) [ 443.403218][T19719] veth0_vlan: entered promiscuous mode [ 443.416314][T19719] veth1_vlan: entered promiscuous mode [ 443.423552][T19797] xt_hashlimit: max too large, truncated to 1048576 [ 443.444268][T19719] veth0_macvtap: entered promiscuous mode [ 443.453100][T19719] veth1_macvtap: entered promiscuous mode [ 443.466763][T19719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 443.479381][T19719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 443.489520][T19801] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5481'. [ 443.490955][T17706] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.515445][T17706] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.532712][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 443.532729][ T29] audit: type=1400 audit(1763042456.614:44057): avc: denied { mounton } for pid=19719 comm="syz-executor" path="/root/syzkaller.mLB8vV/syz-tmp" dev="sda1" ino=2061 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 443.564082][T17706] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.568386][ T29] audit: type=1400 audit(1763042456.654:44058): avc: denied { mount } for pid=19719 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 443.575099][T17706] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.595280][ T29] audit: type=1400 audit(1763042456.654:44059): avc: denied { mount } for pid=19719 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 443.595324][ T29] audit: type=1400 audit(1763042456.654:44060): avc: denied { mounton } for pid=19719 comm="syz-executor" path="/root/syzkaller.mLB8vV/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 443.595417][ T29] audit: type=1400 audit(1763042456.654:44061): avc: denied { mounton } for pid=19719 comm="syz-executor" path="/root/syzkaller.mLB8vV/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=68171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 443.684308][ T29] audit: type=1400 audit(1763042456.774:44062): avc: denied { mounton } for pid=19719 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 443.716596][ T29] audit: type=1400 audit(1763042456.774:44063): avc: denied { mount } for pid=19719 comm="syz-executor" name="/" dev="gadgetfs" ino=3518 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 443.963906][ T29] audit: type=1400 audit(1763042457.054:44064): avc: denied { create } for pid=19818 comm="syz.0.5488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 444.043250][T19824] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5487'. [ 444.052196][T19824] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5487'. [ 444.372003][ T29] audit: type=1326 audit(1763042457.454:44065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19831 comm="syz.0.5492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6efcf6c9 code=0x7ffc0000 [ 444.598028][ T29] audit: type=1326 audit(1763042457.484:44066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19831 comm="syz.0.5492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6efcf6c9 code=0x7ffc0000 [ 444.760466][T19843] Bluetooth: hci0: Frame reassembly failed (-84) [ 444.794385][T19843] Bluetooth: hci0: Frame reassembly failed (-84) [ 444.834323][T17706] Bluetooth: hci0: Frame reassembly failed (-84) [ 444.837158][T19846] loop6: detected capacity change from 0 to 512 [ 444.866592][T19846] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c018, mo2=0002] [ 444.882138][T19846] EXT4-fs (loop6): orphan cleanup on readonly fs [ 444.910168][T19846] EXT4-fs warning (device loop6): ext4_enable_quotas:7180: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 444.939084][T19862] lo speed is unknown, defaulting to 1000 [ 444.944092][T19846] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 444.945815][T19862] lo speed is unknown, defaulting to 1000 [ 444.958258][T19846] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #13: comm syz.6.5499: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 444.998210][T19864] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19864 comm=syz.4.5506 [ 445.011101][T19846] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.5499: couldn't read orphan inode 13 (err -117) [ 445.026081][T19846] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 445.058372][T19846] bond1: entered promiscuous mode [ 445.063485][T19846] bond1: entered allmulticast mode [ 445.069094][T19846] 8021q: adding VLAN 0 to HW filter on device bond1 [ 445.089298][T19846] bond1 (unregistering): Released all slaves [ 445.225904][T18250] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.571060][T19890] __nla_validate_parse: 1 callbacks suppressed [ 445.571074][T19890] netlink: 256 bytes leftover after parsing attributes in process `syz.6.5513'. [ 445.592136][T19890] loop6: detected capacity change from 0 to 256 [ 445.682158][T19894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5510'. [ 445.691157][T19894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5510'. [ 445.804802][T19890] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 446.692794][T19902] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5514'. [ 446.701762][T19902] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5514'. [ 446.813984][ T4678] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 446.814021][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 446.878354][T19916] loop6: detected capacity change from 0 to 164 [ 446.982918][T19916] ISOFS: unable to read i-node block [ 446.988429][T19916] isofs_fill_super: get root inode failed [ 447.168770][T19936] loop7: detected capacity change from 0 to 1024 [ 447.205024][T19937] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5525'. [ 447.216623][T19936] EXT4-fs: inline encryption not supported [ 447.236858][T19936] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 447.367106][T19719] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.623654][T19947] lo speed is unknown, defaulting to 1000 [ 447.629924][T19947] lo speed is unknown, defaulting to 1000 [ 448.341295][T19964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5529'. [ 448.350249][T19964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5529'. [ 448.521546][T19968] loop6: detected capacity change from 0 to 764 [ 448.549754][T19968] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 448.600358][T19967] Symlink component flag not implemented [ 448.634204][T19967] Symlink component flag not implemented (7) [ 448.658432][T19973] lo speed is unknown, defaulting to 1000 [ 448.666043][T19973] lo speed is unknown, defaulting to 1000 [ 448.725887][T19960] lo speed is unknown, defaulting to 1000 [ 448.743297][T19960] lo speed is unknown, defaulting to 1000 [ 448.766503][T17705] Bluetooth: hci0: Frame reassembly failed (-90) [ 448.773008][T19980] Bluetooth: hci0: Frame reassembly failed (-84) [ 448.786677][T19980] Bluetooth: hci0: Frame reassembly failed (-84) [ 448.813681][ T3561] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 448.821767][T19960] chnl_net:caif_netlink_parms(): no params data found [ 448.895826][T19960] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.902945][T19960] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.910912][T19960] bridge_slave_0: entered allmulticast mode [ 448.917534][T19960] bridge_slave_0: entered promiscuous mode [ 448.924657][T19960] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.931804][T19960] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.939083][T19960] bridge_slave_1: entered allmulticast mode [ 448.946786][T19988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5538'. [ 448.946842][T19960] bridge_slave_1: entered promiscuous mode [ 448.979656][T19960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 448.991023][T19960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 449.000374][ T29] kauditd_printk_skb: 493 callbacks suppressed [ 449.000389][ T29] audit: type=1326 audit(1763042462.074:44560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19991 comm="syz.7.5540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7527df6c9 code=0x7ffc0000 [ 449.030605][ T29] audit: type=1326 audit(1763042462.074:44561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19991 comm="syz.7.5540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7527df6c9 code=0x7ffc0000 [ 449.054949][ T29] audit: type=1326 audit(1763042462.074:44562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19991 comm="syz.7.5540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb7527df6c9 code=0x7ffc0000 [ 449.056191][T19994] FAULT_INJECTION: forcing a failure. [ 449.056191][T19994] name failslab, interval 1, probability 0, space 0, times 0 [ 449.079084][ T29] audit: type=1326 audit(1763042462.074:44563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19991 comm="syz.7.5540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7527df6c9 code=0x7ffc0000 [ 449.079125][ T29] audit: type=1326 audit(1763042462.074:44564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19991 comm="syz.7.5540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7527df6c9 code=0x7ffc0000 [ 449.079237][ T29] audit: type=1326 audit(1763042462.074:44565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19991 comm="syz.7.5540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb7527df6c9 code=0x7ffc0000 [ 449.079273][ T29] audit: type=1326 audit(1763042462.074:44566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19991 comm="syz.7.5540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7527df6c9 code=0x7ffc0000 [ 449.079308][ T29] audit: type=1326 audit(1763042462.074:44567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19991 comm="syz.7.5540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7527df6c9 code=0x7ffc0000 [ 449.079340][ T29] audit: type=1326 audit(1763042462.074:44568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19991 comm="syz.7.5540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb7527ddf10 code=0x7ffc0000 [ 449.079375][ T29] audit: type=1326 audit(1763042462.074:44569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19991 comm="syz.7.5540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb7527ddf10 code=0x7ffc0000 [ 449.259554][T19994] CPU: 1 UID: 0 PID: 19994 Comm: syz.7.5541 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 449.259585][T19994] Tainted: [W]=WARN [ 449.259591][T19994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 449.259603][T19994] Call Trace: [ 449.259612][T19994] [ 449.259652][T19994] __dump_stack+0x1d/0x30 [ 449.259673][T19994] dump_stack_lvl+0xe8/0x140 [ 449.259694][T19994] dump_stack+0x15/0x1b [ 449.259719][T19994] should_fail_ex+0x265/0x280 [ 449.259824][T19994] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 449.259858][T19994] should_failslab+0x8c/0xb0 [ 449.259963][T19994] kmem_cache_alloc_lru_noprof+0x55/0x490 [ 449.259991][T19994] ? shmem_alloc_inode+0x34/0x50 [ 449.260087][T19994] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 449.260107][T19994] shmem_alloc_inode+0x34/0x50 [ 449.260129][T19994] alloc_inode+0x40/0x170 [ 449.260162][T19994] new_inode+0x1d/0xe0 [ 449.260241][T19994] shmem_get_inode+0x244/0x750 [ 449.260285][T19994] __shmem_file_setup+0x113/0x210 [ 449.260303][T19994] shmem_file_setup+0x3b/0x50 [ 449.260320][T19994] __se_sys_memfd_create+0x2c3/0x590 [ 449.260412][T19994] __x64_sys_memfd_create+0x31/0x40 [ 449.260435][T19994] x64_sys_call+0x2ac2/0x3000 [ 449.260456][T19994] do_syscall_64+0xd2/0x200 [ 449.260476][T19994] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 449.260567][T19994] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 449.260674][T19994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.260694][T19994] RIP: 0033:0x7fb7527df6c9 [ 449.260708][T19994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 449.260726][T19994] RSP: 002b:00007fb751246e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 449.260746][T19994] RAX: ffffffffffffffda RBX: 0000000000000445 RCX: 00007fb7527df6c9 [ 449.260784][T19994] RDX: 00007fb751246ef0 RSI: 0000000000000000 RDI: 00007fb752862960 [ 449.260802][T19994] RBP: 0000200000001dc0 R08: 00007fb751246bb7 R09: 00007fb751246e40 [ 449.260820][T19994] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000140 [ 449.260837][T19994] R13: 00007fb751246ef0 R14: 00007fb751246eb0 R15: 0000200000000340 [ 449.260881][T19994] [ 449.493025][T19960] team0: Port device team_slave_0 added [ 449.500169][T19960] team0: Port device team_slave_1 added [ 449.527295][T19960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 449.534411][T19960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 449.560386][T19960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 449.572226][T19960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 449.579374][T19960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 449.605470][T19960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 449.626932][T20001] loop7: detected capacity change from 0 to 164 [ 449.643019][T19960] hsr_slave_0: entered promiscuous mode [ 449.649613][T19960] hsr_slave_1: entered promiscuous mode [ 449.655853][T19960] debugfs: 'hsr0' already exists in 'hsr' [ 449.661647][T19960] Cannot create hsr debugfs directory [ 449.661916][T20001] ISOFS: unable to read i-node block [ 449.679296][T20001] isofs_fill_super: get root inode failed [ 449.795372][T19960] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.865756][T19960] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.955271][T19960] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.026257][T19960] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.103504][T19960] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 450.112932][T19960] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 450.123839][T19960] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 450.136396][T19960] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 450.180069][T17704] Bluetooth: hci1: Frame reassembly failed (-84) [ 450.206837][T20022] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.256336][T19960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 450.268164][T20022] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.302204][T17706] Bluetooth: hci2: Frame reassembly failed (-84) [ 450.312783][ T4557] IPVS: starting estimator thread 0... [ 450.321557][T19960] 8021q: adding VLAN 0 to HW filter on device team0 [ 450.330951][T17706] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.338125][T17706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 450.350446][T17698] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.357534][T17698] bridge0: port 2(bridge_slave_1) entered forwarding state [ 450.382105][T20022] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.403736][T20028] IPVS: using max 2352 ests per chain, 117600 per kthread [ 450.409641][T19960] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 450.421603][T19960] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 450.436978][T20022] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.482178][T17704] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.500744][T17704] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.511876][T17704] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.520386][T17704] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.530844][T19960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 450.598496][T19960] veth0_vlan: entered promiscuous mode [ 450.606766][T19960] veth1_vlan: entered promiscuous mode [ 450.622692][T19960] veth0_macvtap: entered promiscuous mode [ 450.630137][T19960] veth1_macvtap: entered promiscuous mode [ 450.641309][T19960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 450.653462][T19960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 450.665206][T17704] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.674411][T17704] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.683220][T17704] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.694691][T17704] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.762305][T20043] lo speed is unknown, defaulting to 1000 [ 450.768619][T20043] lo speed is unknown, defaulting to 1000 [ 450.813652][T13134] Bluetooth: hci0: command 0x1003 tx timeout [ 450.813850][ T4678] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 450.837916][T17699] Bluetooth: hci0: Frame reassembly failed (-84) [ 451.907777][T20066] loop6: detected capacity change from 0 to 764 [ 451.915349][T20066] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 451.924302][T20066] Symlink component flag not implemented [ 451.930103][T20066] Symlink component flag not implemented (7) [ 452.211254][T20068] siw: device registration error -23 [ 452.256739][T13134] Bluetooth: hci1: command 0x1003 tx timeout [ 452.262790][ T3561] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 452.329101][T20081] lo speed is unknown, defaulting to 1000 [ 452.335074][ T3561] Bluetooth: hci2: command 0x1003 tx timeout [ 452.341227][ T44] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 452.348346][T20081] lo speed is unknown, defaulting to 1000 [ 453.396239][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 453.404314][T20093] lo speed is unknown, defaulting to 1000 [ 453.410535][T20093] lo speed is unknown, defaulting to 1000 [ 453.473674][ T4678] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 453.857656][T20105] can0: slcan on ptm0. [ 453.936202][T20105] can0 (unregistered): slcan off ptm0. [ 453.955954][T20107] siw: device registration error -23 [ 453.964888][T20105] Falling back ldisc for ptm0. [ 454.022779][T17704] Bluetooth: hci0: Frame reassembly failed (-84) [ 454.042514][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 454.042558][ T29] audit: type=1400 audit(1763042467.124:44636): avc: denied { rmdir } for pid=18250 comm="syz-executor" name="file0" dev="tmpfs" ino=539 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 454.092205][ T4559] IPVS: starting estimator thread 0... [ 454.123953][ T29] audit: type=1326 audit(1763042467.214:44637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20111 comm="syz.7.5573" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb7527df6c9 code=0x0 [ 454.158278][T20123] lo speed is unknown, defaulting to 1000 [ 454.166031][T20123] lo speed is unknown, defaulting to 1000 [ 454.183723][T20120] IPVS: using max 2400 ests per chain, 120000 per kthread [ 454.278072][T17706] hsr_slave_0: left promiscuous mode [ 454.284768][T17706] hsr_slave_1: left promiscuous mode [ 454.290765][T17706] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 454.298548][T17706] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 454.306773][T17706] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 454.314243][T17706] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 454.324802][T17706] veth1_macvtap: left promiscuous mode [ 454.332344][T17706] veth0_macvtap: left promiscuous mode [ 454.338132][T17706] veth1_vlan: left promiscuous mode [ 454.343746][T17706] veth0_vlan: left promiscuous mode [ 454.484399][ T4559] lo speed is unknown, defaulting to 1000 [ 454.490231][ T4559] syz0: Port: 1 Link DOWN [ 454.616712][T20143] lo speed is unknown, defaulting to 1000 [ 454.674173][T20145] lo speed is unknown, defaulting to 1000 [ 454.920443][T20149] siw: device registration error -23 [ 455.139974][T20158] lo speed is unknown, defaulting to 1000 [ 455.173519][T20160] lo speed is unknown, defaulting to 1000 [ 455.278212][T17706] IPVS: stop unused estimator thread 0... [ 455.307772][T20168] lo speed is unknown, defaulting to 1000 [ 455.544621][ T29] audit: type=1326 audit(1763042468.634:44638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20174 comm="syz.0.5594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18f988f6c9 code=0x7ffc0000 [ 455.568348][ T29] audit: type=1326 audit(1763042468.634:44639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20174 comm="syz.0.5594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18f988f6c9 code=0x7ffc0000 [ 455.593952][ T29] audit: type=1326 audit(1763042468.674:44640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20174 comm="syz.0.5594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f18f988f6c9 code=0x7ffc0000 [ 455.618202][ T29] audit: type=1326 audit(1763042468.684:44641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20174 comm="syz.0.5594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18f988f6c9 code=0x7ffc0000 [ 455.642229][ T29] audit: type=1326 audit(1763042468.684:44642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20174 comm="syz.0.5594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18f988f6c9 code=0x7ffc0000 [ 455.679261][ T29] audit: type=1326 audit(1763042468.734:44643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20174 comm="syz.0.5594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f18f988f6c9 code=0x7ffc0000 [ 455.703078][ T29] audit: type=1326 audit(1763042468.734:44644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20174 comm="syz.0.5594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18f988f6c9 code=0x7ffc0000 [ 455.726915][ T29] audit: type=1326 audit(1763042468.734:44645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20174 comm="syz.0.5594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18f988f6c9 code=0x7ffc0000 [ 455.838338][T20191] lo speed is unknown, defaulting to 1000 [ 455.999763][T17704] Bluetooth: hci1: Frame reassembly failed (-90) [ 456.094257][ T3561] Bluetooth: hci0: command 0x1003 tx timeout [ 456.094633][ T4678] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 456.152752][T20204] lo speed is unknown, defaulting to 1000 [ 456.334438][T20218] loop6: detected capacity change from 0 to 764 [ 456.351549][T20218] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 456.361900][T20218] Symlink component flag not implemented [ 456.371231][T20218] Symlink component flag not implemented (7) [ 456.586919][T20216] Set syz1 is full, maxelem 65536 reached [ 456.636889][T17706] Bluetooth: hci0: Frame reassembly failed (-84) [ 456.674063][T20240] lo speed is unknown, defaulting to 1000 [ 456.882071][T17705] Bluetooth: hci2: Frame reassembly failed (-84) [ 456.888952][T20247] Bluetooth: hci2: Frame reassembly failed (-84) [ 456.896842][T20247] Bluetooth: hci2: Frame reassembly failed (-84) [ 457.773819][T20255] lo speed is unknown, defaulting to 1000 [ 457.781371][T20254] lo speed is unknown, defaulting to 1000 [ 458.014111][ T44] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 458.014253][T13134] Bluetooth: hci1: command 0x1003 tx timeout [ 458.045477][T20261] siw: device registration error -23 [ 458.143524][T20271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5628'. [ 458.183098][T20273] loop7: detected capacity change from 0 to 2048 [ 458.275613][T20273] Alternate GPT is invalid, using primary GPT. [ 458.281978][T20273] loop7: p2 p3 p7 [ 458.298006][T20263] Set syz1 is full, maxelem 65536 reached [ 458.653921][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 458.659998][ T4678] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 458.685147][T17699] Bluetooth: hci0: Frame reassembly failed (-84) [ 458.893672][ T44] Bluetooth: hci2: command 0x1003 tx timeout [ 458.899795][ T3561] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 459.196609][T20299] siw: device registration error -23 [ 459.265243][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 459.265263][ T29] audit: type=1326 audit(1763042472.354:44656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20302 comm="syz.7.5643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7527df6c9 code=0x7ffc0000 [ 459.296660][ T29] audit: type=1326 audit(1763042472.354:44657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20302 comm="syz.7.5643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7527df6c9 code=0x7ffc0000 [ 459.320623][ T29] audit: type=1326 audit(1763042472.354:44658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20302 comm="syz.7.5643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb7527df6c9 code=0x7ffc0000 [ 459.344931][ T29] audit: type=1326 audit(1763042472.354:44659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20302 comm="syz.7.5643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7527df6c9 code=0x7ffc0000 [ 459.368873][ T29] audit: type=1326 audit(1763042472.354:44660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20302 comm="syz.7.5643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb7527df6c9 code=0x7ffc0000 [ 459.393270][ T29] audit: type=1326 audit(1763042472.354:44661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20302 comm="syz.7.5643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7527df6c9 code=0x7ffc0000 [ 459.417167][ T29] audit: type=1326 audit(1763042472.354:44662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20302 comm="syz.7.5643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7527df6c9 code=0x7ffc0000 [ 459.441269][ T29] audit: type=1326 audit(1763042472.354:44663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20302 comm="syz.7.5643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb7527ddf10 code=0x7ffc0000 [ 459.465138][ T29] audit: type=1326 audit(1763042472.354:44664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20302 comm="syz.7.5643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb7527ddf10 code=0x7ffc0000 [ 459.468703][T20308] mmap: syz.7.5646 (20308): VmData 29208576 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data. [ 459.489364][ T29] audit: type=1326 audit(1763042472.354:44665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20302 comm="syz.7.5643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7527df6c9 code=0x7ffc0000 [ 459.545596][T17705] Bluetooth: hci1: Frame reassembly failed (-84) [ 459.784716][T17698] Bluetooth: hci2: Frame reassembly failed (-84) [ 459.791803][T20317] Bluetooth: hci2: Frame reassembly failed (-84) [ 459.799868][T20317] Bluetooth: hci2: Frame reassembly failed (-84) [ 459.825905][T20318] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5648'. [ 460.733713][T13134] Bluetooth: hci0: command 0x1003 tx timeout [ 460.735657][ T4678] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 461.301926][T20352] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5661'. [ 461.647779][ T3561] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 461.853793][ T44] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 461.935845][T20377] FAULT_INJECTION: forcing a failure. [ 461.935845][T20377] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 461.936394][T20375] sch_fq: defrate 0 ignored. [ 461.948967][T20377] CPU: 1 UID: 0 PID: 20377 Comm: syz.6.5671 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 461.949040][T20377] Tainted: [W]=WARN [ 461.949078][T20377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 461.949098][T20377] Call Trace: [ 461.949183][T20377] [ 461.949194][T20377] __dump_stack+0x1d/0x30 [ 461.949228][T20377] dump_stack_lvl+0xe8/0x140 [ 461.949258][T20377] dump_stack+0x15/0x1b [ 461.949294][T20377] should_fail_ex+0x265/0x280 [ 461.949323][T20377] should_fail+0xb/0x20 [ 461.949428][T20377] should_fail_usercopy+0x1a/0x20 [ 461.949458][T20377] _copy_from_user+0x1c/0xb0 [ 461.949548][T20377] bpf_test_init+0xb9/0x140 [ 461.949596][T20377] bpf_prog_test_run_xdp+0x305/0x970 [ 461.949641][T20377] ? _kstrtol+0x51/0x90 [ 461.949691][T20377] ? __rcu_read_unlock+0x4f/0x70 [ 461.949733][T20377] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 461.949829][T20377] bpf_prog_test_run+0x22a/0x390 [ 461.949864][T20377] __sys_bpf+0x4c0/0x7c0 [ 461.949902][T20377] __x64_sys_bpf+0x41/0x50 [ 461.949979][T20377] x64_sys_call+0x2aee/0x3000 [ 461.950072][T20377] do_syscall_64+0xd2/0x200 [ 461.950102][T20377] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 461.950202][T20377] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 461.950282][T20377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.950313][T20377] RIP: 0033:0x7f7f99c1f6c9 [ 461.950400][T20377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 461.950426][T20377] RSP: 002b:00007f7f9867f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 461.950455][T20377] RAX: ffffffffffffffda RBX: 00007f7f99e75fa0 RCX: 00007f7f99c1f6c9 [ 461.950474][T20377] RDX: 0000000000000050 RSI: 0000200000000f00 RDI: 000000000000000a [ 461.950563][T20377] RBP: 00007f7f9867f090 R08: 0000000000000000 R09: 0000000000000000 [ 461.950581][T20377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 461.950598][T20377] R13: 00007f7f99e76038 R14: 00007f7f99e75fa0 R15: 00007fffc2bbe788 [ 461.950626][T20377] [ 462.033850][T17700] Bluetooth: hci0: Frame reassembly failed (-84) [ 462.170773][T20391] siw: device registration error -23 [ 462.171382][T20385] netlink: 256 bytes leftover after parsing attributes in process `syz.7.5675'. [ 462.196750][T20385] loop7: detected capacity change from 0 to 256 [ 462.206027][T20385] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 462.348025][T20409] loop7: detected capacity change from 0 to 764 [ 462.355301][T20409] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 462.364891][T20409] Symlink component flag not implemented [ 462.370666][T20409] Symlink component flag not implemented (7) [ 462.385830][T20400] loop6: detected capacity change from 0 to 2048 [ 462.427016][T20400] Alternate GPT is invalid, using primary GPT. [ 462.433567][T20400] loop6: p2 p3 p7 [ 462.482906][T20414] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5686'. [ 462.574823][T20421] siw: device registration error -23 [ 462.660769][T17698] Bluetooth: hci1: Frame reassembly failed (-84) [ 462.677597][T20429] Bluetooth: hci1: Frame reassembly failed (-90) [ 463.084121][T20438] lo speed is unknown, defaulting to 1000 [ 463.408359][T20450] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5700'. [ 463.527140][T20457] lo speed is unknown, defaulting to 1000 [ 463.935959][T20467] loop6: detected capacity change from 0 to 2048 [ 463.965753][T20467] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 464.023187][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 464.066213][T20472] lo speed is unknown, defaulting to 1000 [ 464.258516][T20476] lo speed is unknown, defaulting to 1000 [ 464.357761][T20476] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 464.372592][T20476] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 464.385000][T20476] EXT4-fs (loop6): This should not happen!! Data will be lost [ 464.385000][T20476] [ 464.394727][T20476] EXT4-fs (loop6): Total free blocks count 0 [ 464.400762][T20476] EXT4-fs (loop6): Free/Dirty block details [ 464.406737][T20476] EXT4-fs (loop6): free_blocks=2415919504 [ 464.412461][T20476] EXT4-fs (loop6): dirty_blocks=64 [ 464.417845][T20476] EXT4-fs (loop6): Block reservation details [ 464.424211][T20476] EXT4-fs (loop6): i_reserved_data_blocks=4 [ 464.643013][T20481] lo speed is unknown, defaulting to 1000 [ 464.733753][ T44] Bluetooth: hci1: command 0x1003 tx timeout [ 464.739875][ T4678] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 464.762719][T20476] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 464.786748][T17706] Bluetooth: hci0: Frame reassembly failed (-84) [ 464.896261][ T29] kauditd_printk_skb: 363 callbacks suppressed [ 464.896280][ T29] audit: type=1326 audit(1763042477.984:45029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20489 comm="syz.0.5711" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f18f988f6c9 code=0x0 [ 465.584291][ T29] audit: type=1400 audit(1763042478.524:45030): avc: denied { ioctl } for pid=20507 comm="syz.7.5717" path="socket:[71557]" dev="sockfs" ino=71557 ioctlcmd=0x9402 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 466.041966][T20516] lo speed is unknown, defaulting to 1000 [ 466.288434][T17705] Bluetooth: hci1: Frame reassembly failed (-84) [ 466.312169][ T29] audit: type=1326 audit(1763042479.394:45031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20514 comm="syz.7.5719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7527df6c9 code=0x50000 [ 466.335698][ T29] audit: type=1326 audit(1763042479.394:45032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20514 comm="syz.7.5719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7527df6c9 code=0x50000 [ 466.360074][ T29] audit: type=1326 audit(1763042479.394:45033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20514 comm="syz.7.5719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7527df6c9 code=0x50000 [ 466.383479][ T29] audit: type=1326 audit(1763042479.394:45034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20514 comm="syz.7.5719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7527df6c9 code=0x50000 [ 466.407028][ T29] audit: type=1326 audit(1763042479.394:45035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20514 comm="syz.7.5719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7527df6c9 code=0x50000 [ 466.407082][ T29] audit: type=1326 audit(1763042479.394:45036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20514 comm="syz.7.5719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7527df6c9 code=0x50000 [ 466.407111][ T29] audit: type=1326 audit(1763042479.394:45037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20514 comm="syz.7.5719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7527df6c9 code=0x50000 [ 466.407252][ T29] audit: type=1326 audit(1763042479.394:45038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20514 comm="syz.7.5719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7527df6c9 code=0x50000 [ 466.487522][T20523] Bluetooth: hci1: Frame reassembly failed (-90) [ 466.494292][T20521] lo speed is unknown, defaulting to 1000 [ 466.688083][T20532] loop7: detected capacity change from 0 to 2048 [ 466.704912][T20532] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 466.813634][ T3561] Bluetooth: hci0: command 0x1003 tx timeout [ 466.817188][ T4678] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 466.884032][T20548] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5730'. [ 466.986895][T20555] lo speed is unknown, defaulting to 1000 [ 467.023410][T20560] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 467.071248][T20560] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 467.083918][T20560] EXT4-fs (loop7): This should not happen!! Data will be lost [ 467.083918][T20560] [ 467.093782][T20560] EXT4-fs (loop7): Total free blocks count 0 [ 467.099992][T20560] EXT4-fs (loop7): Free/Dirty block details [ 467.106229][T20560] EXT4-fs (loop7): free_blocks=2415919504 [ 467.112222][T20560] EXT4-fs (loop7): dirty_blocks=64 [ 467.117616][T20560] EXT4-fs (loop7): Block reservation details [ 467.123867][T20560] EXT4-fs (loop7): i_reserved_data_blocks=4 [ 467.508479][T20530] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 467.842910][T20577] lo speed is unknown, defaulting to 1000 [ 468.059761][T20582] loop6: detected capacity change from 0 to 764 [ 468.067056][T20582] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 468.075802][T20582] Symlink component flag not implemented [ 468.081606][T20582] Symlink component flag not implemented (7) [ 468.202231][T20590] netlink: 256 bytes leftover after parsing attributes in process `syz.7.5742'. [ 468.208265][T20592] lo speed is unknown, defaulting to 1000 [ 468.265166][T20590] loop7: detected capacity change from 0 to 256 [ 468.286406][T20590] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 468.333697][ T44] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 468.386271][T20607] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5748'. [ 468.833215][T20616] loop7: detected capacity change from 0 to 2048 [ 468.855685][T20616] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 469.116753][T20624] lo speed is unknown, defaulting to 1000 [ 469.144787][T20625] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 469.175289][T20625] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 469.187766][T20625] EXT4-fs (loop7): This should not happen!! Data will be lost [ 469.187766][T20625] [ 469.197507][T20625] EXT4-fs (loop7): Total free blocks count 0 [ 469.203508][T20625] EXT4-fs (loop7): Free/Dirty block details [ 469.209949][T20625] EXT4-fs (loop7): free_blocks=2415919504 [ 469.215772][T20625] EXT4-fs (loop7): dirty_blocks=64 [ 469.220983][T20625] EXT4-fs (loop7): Block reservation details [ 469.227057][T20625] EXT4-fs (loop7): i_reserved_data_blocks=4 [ 469.327387][T20632] lo speed is unknown, defaulting to 1000 [ 469.649652][T17706] Bluetooth: hci1: Frame reassembly failed (-84) [ 469.665850][T20615] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 469.685442][T20645] Bluetooth: hci1: Frame reassembly failed (-90) [ 470.093015][T20653] lo speed is unknown, defaulting to 1000 [ 470.263676][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 470.273772][ T4678] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 470.290562][T20655] siw: device registration error -23 [ 470.470312][T17698] Bluetooth: hci0: Frame reassembly failed (-84) [ 470.478738][T20657] Bluetooth: hci0: Frame reassembly failed (-84) [ 470.492803][T20657] Bluetooth: hci0: Frame reassembly failed (-84) [ 470.579257][T20667] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5767'. [ 470.686359][T20677] loop7: detected capacity change from 0 to 2048 [ 470.705455][T20677] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 470.756178][T17698] Bluetooth: hci2: Frame reassembly failed (-84) [ 471.012631][T20686] lo speed is unknown, defaulting to 1000 [ 471.043639][T20689] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 471.058671][T20689] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 471.071097][T20689] EXT4-fs (loop7): This should not happen!! Data will be lost [ 471.071097][T20689] [ 471.080809][T20689] EXT4-fs (loop7): Total free blocks count 0 [ 471.086839][T20689] EXT4-fs (loop7): Free/Dirty block details [ 471.092735][T20689] EXT4-fs (loop7): free_blocks=2415919504 [ 471.098535][T20689] EXT4-fs (loop7): dirty_blocks=64 [ 471.103690][T20689] EXT4-fs (loop7): Block reservation details [ 471.109730][T20689] EXT4-fs (loop7): i_reserved_data_blocks=4 [ 471.516264][T20676] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 471.693631][ T3561] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 471.694934][T13134] Bluetooth: hci1: command 0x1003 tx timeout [ 471.730071][ T29] kauditd_printk_skb: 1005 callbacks suppressed [ 471.730090][ T29] audit: type=1326 audit(1763042484.814:46044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20691 comm="syz.4.5774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7706c7f6c9 code=0x50000 [ 471.760850][ T29] audit: type=1326 audit(1763042484.844:46045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20691 comm="syz.4.5774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7706c7f6c9 code=0x50000 [ 471.784544][ T29] audit: type=1326 audit(1763042484.844:46046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20691 comm="syz.4.5774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7706c7f6c9 code=0x50000 [ 471.808414][ T29] audit: type=1326 audit(1763042484.844:46047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20691 comm="syz.4.5774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7706c7f6c9 code=0x50000 [ 471.832332][ T29] audit: type=1326 audit(1763042484.844:46048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20691 comm="syz.4.5774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7706c7f6c9 code=0x50000 [ 471.855829][ T29] audit: type=1326 audit(1763042484.844:46049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20691 comm="syz.4.5774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7706c7f6c9 code=0x50000 [ 471.879350][ T29] audit: type=1326 audit(1763042484.844:46050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20691 comm="syz.4.5774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7706c7f6c9 code=0x50000 [ 471.902715][ T29] audit: type=1326 audit(1763042484.844:46051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20691 comm="syz.4.5774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7706c7f6c9 code=0x50000 [ 471.926101][ T29] audit: type=1326 audit(1763042484.844:46052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20691 comm="syz.4.5774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7706c7f6c9 code=0x50000 [ 471.949450][ T29] audit: type=1326 audit(1763042484.844:46053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20691 comm="syz.4.5774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7706c7f6c9 code=0x50000 [ 472.309941][T20708] netlink: 256 bytes leftover after parsing attributes in process `syz.7.5779'. [ 472.341943][T20708] loop7: detected capacity change from 0 to 256 [ 472.359607][T20708] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 472.418026][T20714] netlink: 256 bytes leftover after parsing attributes in process `syz.7.5781'. [ 472.438192][T20716] siw: device registration error -23 [ 472.445477][T20714] loop7: detected capacity change from 0 to 256 [ 472.466863][T20714] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 472.493920][ T3561] Bluetooth: hci0: command 0x1003 tx timeout [ 472.509500][ T4678] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 472.536422][T17705] Bluetooth: hci0: Frame reassembly failed (-84) [ 472.546290][T20724] Bluetooth: hci0: Frame reassembly failed (-90) [ 472.795957][T20732] lo speed is unknown, defaulting to 1000 [ 472.824485][ T3561] Bluetooth: hci2: command 0x1003 tx timeout [ 472.893675][ T44] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 473.158849][T20743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.167815][T20743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.183437][T20743] can0: slcan on ttyS3. [ 473.223767][T20743] can0 (unregistered): slcan off ttyS3. [ 473.370626][T20747] loop7: detected capacity change from 0 to 764 [ 473.378951][T20747] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 473.387903][T20747] Symlink component flag not implemented [ 473.393713][T20747] Symlink component flag not implemented (7) [ 473.563472][T20757] loop7: detected capacity change from 0 to 2048 [ 473.592202][T20757] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 473.878930][T20766] lo speed is unknown, defaulting to 1000 [ 473.926610][T20766] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 473.941451][T20766] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 473.953852][T20766] EXT4-fs (loop7): This should not happen!! Data will be lost [ 473.953852][T20766] [ 473.963601][T20766] EXT4-fs (loop7): Total free blocks count 0 [ 473.969599][T20766] EXT4-fs (loop7): Free/Dirty block details [ 473.975571][T20766] EXT4-fs (loop7): free_blocks=2415919504 [ 473.981313][T20766] EXT4-fs (loop7): dirty_blocks=64 [ 473.986441][T20766] EXT4-fs (loop7): Block reservation details [ 473.992557][T20766] EXT4-fs (loop7): i_reserved_data_blocks=4 [ 474.669918][ T4678] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 474.711235][T20766] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 474.815146][T17698] Bluetooth: hci1: Frame reassembly failed (-84) [ 475.058245][T17705] Bluetooth: hci0: Frame reassembly failed (-84) [ 475.074762][T20784] Bluetooth: hci0: Frame reassembly failed (-84) [ 475.099831][T20784] Bluetooth: hci0: Frame reassembly failed (-84) [ 475.369368][T20789] loop6: detected capacity change from 0 to 764 [ 475.390223][T20789] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 475.419846][T20789] Symlink component flag not implemented [ 475.425645][T20789] Symlink component flag not implemented (7) [ 475.530717][T20793] lo speed is unknown, defaulting to 1000 [ 476.259964][T20809] lo speed is unknown, defaulting to 1000 [ 476.344543][T20811] lo speed is unknown, defaulting to 1000 [ 476.630183][T20814] Bluetooth: hci2: Frame reassembly failed (-90) [ 476.893684][T13134] Bluetooth: hci1: command 0x1003 tx timeout [ 476.893682][ T44] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 476.922368][ T29] kauditd_printk_skb: 236 callbacks suppressed [ 476.922399][ T29] audit: type=1400 audit(1763042490.004:46290): avc: denied { bind } for pid=20818 comm="syz.4.5814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 476.950128][ T29] audit: type=1400 audit(1763042490.034:46291): avc: denied { write } for pid=20818 comm="syz.4.5814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 477.050451][T20825] siw: device registration error -23 [ 477.134116][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 477.143678][ T4678] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 477.193826][ T29] audit: type=1326 audit(1763042490.274:46292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20832 comm="syz.0.5820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18f988f6c9 code=0x50000 [ 477.217593][ T29] audit: type=1326 audit(1763042490.274:46293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20832 comm="syz.0.5820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18f988f6c9 code=0x50000 [ 477.241120][ T29] audit: type=1326 audit(1763042490.274:46294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20832 comm="syz.0.5820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18f988f6c9 code=0x50000 [ 477.264718][ T29] audit: type=1326 audit(1763042490.274:46295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20832 comm="syz.0.5820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18f988f6c9 code=0x50000 [ 477.288431][ T29] audit: type=1326 audit(1763042490.274:46296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20832 comm="syz.0.5820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18f988f6c9 code=0x50000 [ 477.312832][ T29] audit: type=1326 audit(1763042490.274:46297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20832 comm="syz.0.5820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18f988f6c9 code=0x50000 [ 477.336313][ T29] audit: type=1326 audit(1763042490.274:46298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20832 comm="syz.0.5820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18f988f6c9 code=0x50000 [ 477.360041][ T29] audit: type=1326 audit(1763042490.274:46299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20832 comm="syz.0.5820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18f988f6c9 code=0x50000 [ 477.683908][T17698] Bluetooth: hci0: Frame reassembly failed (-84) [ 477.816359][T20849] lo speed is unknown, defaulting to 1000 [ 477.973690][T20851] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5826'. [ 478.144436][T20857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5829'. [ 478.376779][T20862] 9pnet: Could not find request transport: t [ 478.490187][T20870] Bluetooth: hci1: Frame reassembly failed (-84) [ 478.534068][T17705] Bluetooth: hci1: Frame reassembly failed (-84) [ 478.557549][T20870] Bluetooth: hci1: Frame reassembly failed (-84) [ 479.368207][T20888] lo speed is unknown, defaulting to 1000 [ 479.703682][ T4678] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 480.475274][T20906] lo speed is unknown, defaulting to 1000 [ 480.593828][T13134] Bluetooth: hci1: command 0x1003 tx timeout [ 480.623654][ T44] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 480.774241][T20910] xt_hashlimit: max too large, truncated to 1048576 [ 481.324288][T17704] Bluetooth: hci0: Frame reassembly failed (-90) [ 481.407293][T20923] Bluetooth: hci0: Frame reassembly failed (-84) [ 481.658043][T20928] lo speed is unknown, defaulting to 1000 [ 481.986067][T20942] Bluetooth: hci1: Frame reassembly failed (-84) [ 481.993837][T20942] Bluetooth: hci1: Frame reassembly failed (-84) [ 482.000836][ T4678] Bluetooth: hci1: sending frame failed (-49) [ 482.007153][T13134] Bluetooth: hci1: Opcode 0x1003 failed: -49 [ 482.110015][T20943] lo speed is unknown, defaulting to 1000 [ 483.326461][T20950] siw: device registration error -23 [ 483.373700][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 483.393360][T20952] loop6: detected capacity change from 0 to 764 [ 483.410445][T20952] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 483.427531][T20952] Symlink component flag not implemented [ 483.445486][T20952] Symlink component flag not implemented (7) [ 483.463416][T20958] xt_hashlimit: max too large, truncated to 1048576 [ 483.699805][T20969] lo speed is unknown, defaulting to 1000 [ 484.410195][ T29] kauditd_printk_skb: 344 callbacks suppressed [ 484.410214][ T29] audit: type=1326 audit(1763042497.494:46644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20979 comm="syz.7.5866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7527df6c9 code=0x50000 [ 484.486232][T20978] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5867'. [ 484.680641][ T29] audit: type=1326 audit(1763042497.534:46645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20979 comm="syz.7.5866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7527df6c9 code=0x50000 [ 484.704302][ T29] audit: type=1326 audit(1763042497.534:46646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20979 comm="syz.7.5866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7527df6c9 code=0x50000 [ 484.727680][ T29] audit: type=1326 audit(1763042497.534:46647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20979 comm="syz.7.5866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7527df6c9 code=0x50000 [ 484.751049][ T29] audit: type=1326 audit(1763042497.534:46648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20979 comm="syz.7.5866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7527df6c9 code=0x50000 [ 484.774437][ T29] audit: type=1326 audit(1763042497.534:46649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20979 comm="syz.7.5866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7527df6c9 code=0x50000 [ 484.797835][ T29] audit: type=1326 audit(1763042497.534:46650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20979 comm="syz.7.5866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7527df6c9 code=0x50000 [ 484.821181][ T29] audit: type=1326 audit(1763042497.534:46651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20979 comm="syz.7.5866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7527df6c9 code=0x50000 [ 484.844537][ T29] audit: type=1326 audit(1763042497.534:46652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20979 comm="syz.7.5866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7527df6c9 code=0x50000 [ 484.867923][ T29] audit: type=1326 audit(1763042497.534:46653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20979 comm="syz.7.5866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7527df6c9 code=0x50000 [ 485.199475][T20997] loop6: detected capacity change from 0 to 764 [ 485.214790][T20997] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 485.225128][T20997] Symlink component flag not implemented [ 485.231040][T20997] Symlink component flag not implemented (7) [ 485.488272][T21004] lo speed is unknown, defaulting to 1000 [ 486.413694][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 486.419817][T13134] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 486.969218][T21024] loop6: detected capacity change from 0 to 2048 [ 486.997964][T21022] lo speed is unknown, defaulting to 1000 [ 487.101452][T21028] lo speed is unknown, defaulting to 1000 [ 487.324697][T21031] Bluetooth: hci0: Frame reassembly failed (-90) [ 487.981459][T21040] lo speed is unknown, defaulting to 1000 [ 488.400354][T21049] lo speed is unknown, defaulting to 1000 [ 489.374041][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 489.429642][T13134] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 489.484692][ T29] kauditd_printk_skb: 106 callbacks suppressed [ 489.484711][ T29] audit: type=1326 audit(1763042502.574:46760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21064 comm="syz.0.5892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f18f988df10 code=0x7ffc0000 [ 489.514598][ T29] audit: type=1326 audit(1763042502.574:46761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21064 comm="syz.0.5892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f18f988df10 code=0x7ffc0000 [ 489.538208][ T29] audit: type=1326 audit(1763042502.574:46762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21064 comm="syz.0.5892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18f988f6c9 code=0x7ffc0000 [ 489.561895][ T29] audit: type=1326 audit(1763042502.574:46763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21064 comm="syz.0.5892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18f988f6c9 code=0x7ffc0000 [ 489.652156][T21077] loop7: detected capacity change from 0 to 2048 [ 489.660142][ T29] audit: type=1326 audit(1763042502.604:46764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21064 comm="syz.0.5892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7f18f988f6c9 code=0x7ffc0000 [ 489.683811][ T29] audit: type=1326 audit(1763042502.604:46765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21064 comm="syz.0.5892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18f988f6c9 code=0x7ffc0000 [ 489.733340][ T29] audit: type=1326 audit(1763042502.814:46766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21080 comm="syz.2.5899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895518f6c9 code=0x50000 [ 489.756826][ T29] audit: type=1326 audit(1763042502.814:46767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21080 comm="syz.2.5899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895518f6c9 code=0x50000 [ 489.780399][ T29] audit: type=1326 audit(1763042502.814:46768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21080 comm="syz.2.5899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895518f6c9 code=0x50000 [ 489.803835][ T29] audit: type=1326 audit(1763042502.814:46769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21080 comm="syz.2.5899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895518f6c9 code=0x50000 [ 489.932798][T21077] Alternate GPT is invalid, using primary GPT. [ 489.939292][T21077] loop7: p2 p3 p7 [ 490.230562][T21089] lo speed is unknown, defaulting to 1000 [ 490.645785][T21092] lo speed is unknown, defaulting to 1000 [ 491.691894][T21105] lo speed is unknown, defaulting to 1000 [ 491.724780][T21106] lo speed is unknown, defaulting to 1000 [ 491.731156][T21113] siw: device registration error -23 [ 491.910475][T21115] loop7: detected capacity change from 0 to 764 [ 491.933151][T21115] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 491.951925][T21115] Symlink component flag not implemented [ 491.961226][T21115] Symlink component flag not implemented (7) [ 492.001364][T21128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5909'. [ 492.062063][T21129] loop7: detected capacity change from 0 to 2048 [ 492.076766][T21127] loop6: detected capacity change from 0 to 764 [ 492.094797][T21127] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 492.110779][T21127] Symlink component flag not implemented [ 492.123684][T21127] Symlink component flag not implemented (7) [ 492.131704][T21129] Alternate GPT is invalid, using primary GPT. [ 492.138251][T21129] loop7: p2 p3 p7 [ 492.397683][T21150] loop7: detected capacity change from 0 to 764 [ 492.405584][T21150] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 492.415823][T21150] Symlink component flag not implemented [ 492.421631][T21150] Symlink component flag not implemented (7) [ 492.446307][T21154] lo speed is unknown, defaulting to 1000 [ 493.395350][T21161] lo speed is unknown, defaulting to 1000 [ 493.422644][T17706] Bluetooth: hci0: Frame reassembly failed (-84) [ 493.669759][T21175] loop6: detected capacity change from 0 to 764 [ 493.682292][T21175] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 493.694558][T21175] Symlink component flag not implemented [ 493.703668][T21175] Symlink component flag not implemented (7) [ 493.786727][T21180] siw: device registration error -23 [ 493.795914][T21178] lo speed is unknown, defaulting to 1000 [ 493.969159][T21194] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5935'. [ 494.233754][T21198] lo speed is unknown, defaulting to 1000 [ 494.739547][T21189] ================================================================== [ 494.747782][T21189] BUG: KCSAN: data-race in fasync_remove_entry / sock_wake_async [ 494.755536][T21189] [ 494.757882][T21189] write to 0xffff888106e75718 of 8 bytes by task 21190 on cpu 0: [ 494.765614][T21189] fasync_remove_entry+0xcc/0x120 [ 494.770662][T21189] fasync_helper+0x97/0xc0 [ 494.775113][T21189] sock_fasync+0x58/0xc0 [ 494.779387][T21189] __fput+0x5e6/0x650 [ 494.783397][T21189] ____fput+0x1c/0x30 [ 494.787394][T21189] task_work_run+0x131/0x1a0 [ 494.792042][T21189] exit_to_user_mode_loop+0xed/0x110 [ 494.798175][T21189] do_syscall_64+0x1d6/0x200 [ 494.802797][T21189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.808883][T21189] [ 494.811215][T21189] read to 0xffff888106e75718 of 8 bytes by task 21189 on cpu 1: [ 494.818854][T21189] sock_wake_async+0x29/0x110 [ 494.823561][T21189] unix_write_space+0x13b/0x140 [ 494.828497][T21189] sock_wfree+0x14b/0x3c0 [ 494.832852][T21189] unix_destruct_scm+0xc3/0xf0 [ 494.837642][T21189] skb_release_head_state+0xba/0x1a0 [ 494.842982][T21189] __kfree_skb+0x18/0x150 [ 494.847332][T21189] sk_skb_reason_drop+0xbd/0x270 [ 494.852295][T21189] unix_release_sock+0x661/0x7b0 [ 494.857257][T21189] unix_release+0x58/0x80 [ 494.861607][T21189] sock_close+0x6b/0x150 [ 494.865867][T21189] __fput+0x29b/0x650 [ 494.869855][T21189] ____fput+0x1c/0x30 [ 494.873872][T21189] task_work_run+0x131/0x1a0 [ 494.878478][T21189] exit_to_user_mode_loop+0xed/0x110 [ 494.883778][T21189] do_syscall_64+0x1d6/0x200 [ 494.888411][T21189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.894318][T21189] [ 494.896643][T21189] value changed: 0xffff88811af07000 -> 0x0000000000000000 [ 494.903751][T21189] [ 494.906075][T21189] Reported by Kernel Concurrency Sanitizer on: [ 494.912230][T21189] CPU: 1 UID: 0 PID: 21189 Comm: syz.4.5935 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 494.923672][T21189] Tainted: [W]=WARN [ 494.927485][T21189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 494.937546][T21189] ================================================================== [ 495.453663][T13134] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 495.454010][ T44] Bluetooth: hci0: command 0x1003 tx timeout