last executing test programs: 6m36.255285426s ago: executing program 4 (id=270): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r3, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYRES16, @ANYRES64=r0, @ANYRES16=0x0, @ANYRESHEX=0x0, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000009c0)="010000000037a788a11d1f000000000000006923c63a4541062101b60a2156566de77062086575a59ea9cb", 0x2b, r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffb}, 0x18) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000380), 0x1, 0xbac, &(0x7f00000017c0)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) syz_io_uring_setup(0x834, &(0x7f0000000180)={0x0, 0x679a, 0x10, 0x0, 0xf, 0x0, r6}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) socket$netlink(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000300)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x27, &(0x7f0000000000)=0x4, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x5c}}, 0x0) get_robust_list(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10002, 0x8, 0x1, 0x3, 0x20005, 0xe, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xd, 0xffffffffffffffff, 0x2) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b00)=ANY=[@ANYBLOB="1c000000030605000000000000050000000000060500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) socket$xdp(0x2c, 0x3, 0x0) 6m35.285919792s ago: executing program 4 (id=293): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000002c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) 6m35.284228762s ago: executing program 4 (id=294): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mount$9p_tcp(0x0, &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22']) 6m35.267076953s ago: executing program 4 (id=295): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r1}, 0x3d) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='hrtimer_start\x00', r2}, 0x18) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="ae0c14a94991f72134432d80c3fbca549490a872f27322effdeea2b833b2b4de03c06b951b1d2008100a89a27c93c4cf9265301ff4aeb987a07198b9c4539d4a6de906f95e5acc01807a62006410a031307a154a40eade7bdde90fcaf3ee7f19f6107d5f9827e8dbc68c8b8c0d794711fcbe8e828f7aff5e229034d0a4df75ed5a0700000088ed002b0f8e4d812e0ad067ef09a4edce48f6176ef29e7e02a0dcf258e968c55e3fce13731c0b202c03196b4e244697b4adb4"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0xde6c802f551bc066) io_setup(0x202, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200081}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x0, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x845}, 0x24040811) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000000d00010029bd7000ffdbdf25e6090000", @ANYRES32=r5, @ANYBLOB="80007f0a0a000200ffffffffffff0000"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, 0x0, 0x0, 0x0) timerfd_create(0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='contention_end\x00', r8, 0x0, 0x7}, 0x18) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000c40), 0x2, 0x4a7, &(0x7f0000001140)="$eJzs3EtvG0UcAPD/bl59hZhSXm2hhoKIeCRNWqAHJB4CqRckJDiUY0jTqjRtUBMkWkU0IFSOqJ+gcETiE3CCCwIkJBBXuCOkCuXS0gNatLY3dRI7OGkc0+T3k1zPeGZ3ZnY969mZbgLYssr5P0nEroj4LSIGqtHFGcrVtxvzs+N/z8+OJ5Flb/6VVPJdn58dL7IW2+2sRQbTiPSTJPY1KHf6wsUzY5OTE+dr8eGZs+8NT1+4+Mzps2OnJk5NnBs9evTI4ZHnnxt9dl3a2Z/Xde+HU/sfPPb2ldfHj19554ev8vruqqVfn5/tXbxFqQjsjYhs6f5eaqHMcpQXH8s6j6+u+v97/XXhpLuDFWFVuiIiP109lf4/EF1x6+QNxGsfR6QdrR/QPlmWZX3LPs2vCtvzwFwGbGJJdLoGQGcUv/j5fXzx2uAhSEdde7l6A5S3+0btVU3prtz5lEvVe6P+NpVfjgMRcfPq8bmbV2PJfAoAQDt8k49/nm40/kvjvrp8d9XWhkoRcXdE7I6IeyJiT0TcG1HJe39EPNBqwUnjpZHl459ftq+xaS3Jx38v1Na2Fo//Fua9S121WH+l/T3JydOTE4dqx2Qwevry+MgKZXz76q+fNUsrR0Q+9iteefnFWLBWjz+7l0zQnRibGbudNte7diBib3ej9icLKwFJbFvz/vNjdvrJL/c3S//v9q9gHdaZsi8inqie/7lY0v5CsvL65PC2mJw4NFx8K5b78efLbzQr/7bavw6ufRSxo+H3f6H9paR+vXZ61UV0X/7906b3NGv9/vcmb1XCxaLtB2MzM+dHInqTueWfj97atogX+fP2Dx5s3P93R/zzeW27fRGRf4kfioiHIyp3bXndH4mIRyPi4AoH4PtXHns3f/9pTe1vr7z9J1Z1/usDPbH0k0aBrjPffd2s/NbO/5FKaLD2SSvXv2rhxXWreQXXetwAAADgTpJW/g98kkRU50121aXtiR3p5NT0zFMnp94/d6KaVoqetJjpGqibDx2pzQ0X8dEl8cOVeeMsy7LtlfjQ+NRku9bUgdbsrPb/dGjhWpCmQ0PVtD+6Fud9sSM1BNpqVetozZ5oA+5IrfV/HR82o4X+v/xJwILOD5tUtf93DXS6HsDG8/daYOtq1P8vRdzoQFWADeb3H7Yu/R+2rtX2/1Kb6gFsPL//sCUtfiS+N1p4nL+lwO5j67OfzR/o6nQ1+ta2eaQdP3TLA0mDpLRB5rTlPfeuS8VipTx9EdHqDi/FRh3MTl+ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1se/AQAA//++KOKq") r11 = perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x7}, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x40, 0x4}, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r11, 0x4008240b, &(0x7f00000013c0)) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='tvarfd', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r10, @ANYBLOB=',\x00']) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400003900120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) 6m35.033993434s ago: executing program 4 (id=298): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000840000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010002ce663038c435f03050000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r1, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 6m34.701150176s ago: executing program 4 (id=308): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079104800000000006104000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffc}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r4, 0x5408, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x2, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, 0x0, &(0x7f00000002c0)=r0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000500)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c0, 0x160, 0x98, 0x98, 0x220, 0x160, 0x3a0, 0x3a0, 0x3a0, 0x3a0, 0x3a0, 0x6, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, 0xffffffff, 0xffffff00, 'ip6gretap0\x00', 'pim6reg1\x00', {0xff}, {0xff}, 0x2f, 0x2, 0x72}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0xc7, 0x1}}}, {{@uncond, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xf}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x5, @rand_addr=0x64010101, 0x4e23}}}, {{@ip={@loopback, @local, 0xff000000, 0xff000000, 'macsec0\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x62, 0x0, 0x38}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x8}}}, {{@ip={@broadcast, @local, 0xff000000, 0xff000000, 'vxcan1\x00', 'macvtap0\x00', {0xff}, {0xff}, 0x0, 0x1, 0x2}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x420) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="020e000010000000000000000004830008001200000001000000ff000000400000001ea0abff7f00000000000000d41f9ab9000100700000ebdf000008000000c4fc0000100000000000e2ffff1c004f030006000020080002000080f5008e24ce6e4ae300a5000003000500001e001e02"], 0x80}}, 0x4814) syz_emit_ethernet(0x6e, &(0x7f0000000140)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dc58c", 0x38, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xe, 0x2, 0xfffd, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x1, 0x1}, @sack={0x5, 0x1a, [0x1ff, 0xfffffffe, 0x22c00000, 0x5, 0x800, 0x9]}]}}}}}}}}, 0x0) socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) recvmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) 6m34.700919556s ago: executing program 32 (id=308): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079104800000000006104000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffc}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r4, 0x5408, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x2, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, 0x0, &(0x7f00000002c0)=r0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000500)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c0, 0x160, 0x98, 0x98, 0x220, 0x160, 0x3a0, 0x3a0, 0x3a0, 0x3a0, 0x3a0, 0x6, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, 0xffffffff, 0xffffff00, 'ip6gretap0\x00', 'pim6reg1\x00', {0xff}, {0xff}, 0x2f, 0x2, 0x72}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0xc7, 0x1}}}, {{@uncond, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xf}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x5, @rand_addr=0x64010101, 0x4e23}}}, {{@ip={@loopback, @local, 0xff000000, 0xff000000, 'macsec0\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x62, 0x0, 0x38}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x8}}}, {{@ip={@broadcast, @local, 0xff000000, 0xff000000, 'vxcan1\x00', 'macvtap0\x00', {0xff}, {0xff}, 0x0, 0x1, 0x2}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x420) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="020e000010000000000000000004830008001200000001000000ff000000400000001ea0abff7f00000000000000d41f9ab9000100700000ebdf000008000000c4fc0000100000000000e2ffff1c004f030006000020080002000080f5008e24ce6e4ae300a5000003000500001e001e02"], 0x80}}, 0x4814) syz_emit_ethernet(0x6e, &(0x7f0000000140)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dc58c", 0x38, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xe, 0x2, 0xfffd, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x1, 0x1}, @sack={0x5, 0x1a, [0x1ff, 0xfffffffe, 0x22c00000, 0x5, 0x800, 0x9]}]}}}}}}}}, 0x0) socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) recvmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) 5m33.814269425s ago: executing program 3 (id=1354): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000001e00100000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000fcffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000500)='kmem_cache_free\x00', r0}, 0x18) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0x0, 0x0}, 0x8) openat$uhid(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x19, 0xa, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0xffe}, [@map_idx={0x18, 0x8, 0x5, 0x0, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000080)='GPL\x00', 0xf31, 0x91, &(0x7f00000000c0)=""/145, 0x41100, 0x10, '\x00', 0x0, @fallback=0xe, r2, 0x8, &(0x7f00000001c0)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x3, 0x3ff, 0x101}, 0x10, r3, r4, 0x5, &(0x7f00000002c0)=[r4], &(0x7f0000000300)=[{0x2, 0x2, 0x1, 0x2}, {0x4, 0x5, 0xa, 0x7}, {0x1, 0x2, 0x7, 0xc}, {0x4, 0x4, 0xc}, {0x5, 0x3, 0x4, 0x5}], 0x10, 0x1}, 0x94) open_tree(r4, &(0x7f0000000240)='./file0\x00', 0x21cd008b755684f6) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x85}], 0x1, 0x40, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r5, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r6, &(0x7f0000000040)=""/60, 0xdb, 0x40, 0x0, 0x0) 5m33.625275156s ago: executing program 3 (id=1355): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {r0}}, './file0/file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) r2 = socket(0x2, 0x1, 0x0) r3 = epoll_create1(0x0) epoll_pwait2(r3, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000180)={0x20000012}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001200), 0x101101, 0x0) ioctl$TCSBRKP(r4, 0x5425, 0x6) ioctl$TCSBRKP(r4, 0x5425, 0x80000000) r5 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{0x0}], 0x1}}], 0x48}, 0x0) shmat(r5, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x49, &(0x7f0000000180), 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x8, 0x1, 0x8, 0x9, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCDELRT(r6, 0x890c, &(0x7f0000000340)={0x0, @rc={0x1f, @none, 0x5}, @xdp={0x2c, 0x10, 0x0, 0x14}, @l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}, 0x4}, 0x8000, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000180)='bond0\x00', 0x4, 0x800, 0x4}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x9, &(0x7f00000002c0), 0x4, 0x50e, &(0x7f0000000e40)="$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") 5m32.566138493s ago: executing program 3 (id=1372): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f00000005c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="02030003120000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a00000000000000000000000000000000000000000000010b0000000000000a02000100000000000000070c0000000005000500000000000a00000000000000fc0100000000000000f8ff00000000010700000000000000010014"], 0x90}, 0x1, 0x7}, 0x0) 5m32.505155823s ago: executing program 3 (id=1374): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000500), 0x1, 0x523, &(0x7f0000000c00)="$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") r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000025000a20000000000a01030000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000003740000001e0a01020000000000000000010000000900020073797a32000000003400038030000080090006400000000024000b802000018007000100637400001400028008000160ee00000000000040000000000900010073797a30"], 0xe4}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRES32=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x203, 0x8401) ioctl$USBDEVFS_ALLOW_SUSPEND(r6, 0x5522) ioctl$USBDEVFS_BULK(r6, 0x5523, 0x0) fsetxattr$security_ima(r2, &(0x7f00000002c0), &(0x7f0000000300)=@md5={0x1, "194b8844bd89cded6b53a73d76f1930e"}, 0x11, 0x3) write$binfmt_elf32(r1, &(0x7f0000000780)=ANY=[@ANYBLOB="5c8a9cecec63ec472270da68a440d5a1827dd7666e8457467c10783f6457692131aa9e88d8428d21c47c9c044960d2bfd714335f78a19a65297c2e7b562f66309a4bbe4e439afb3ddf75046f953374174d7f0d94626dc6a9335597fe76526d3c5820da193060d1b506133c45d3ec8c420c", @ANYRESDEC=r0, @ANYRES64=r1, @ANYRESOCT=r1, @ANYBLOB="e0c90013d46bb6a1d7c7bf7b477c0b8a531946825e05e36d453e259966783d2cb16f4660074df0586a786b6fb4d676854ee172e83a44c9b4521def83a810b3b6c1ee2923dbf72b07dca7c31e450efd24e4b536725d033d67887280ffd31f92d4957875da173dcfe5572863dbe870432d4055c59b2296cccaa06178628bfb7ef151b8a784f850ac308262f3af72ee4d2706796e1af45d01df5403e5b20d21be39fb576092e3a2f86598d873cfc05c9209602e4895a17f5ec979aec228a8dabbdce84b11af1e45e8", @ANYRES32=r0, @ANYRESDEC=r0, @ANYRES8=r0, @ANYBLOB="ea638a3b01ec1ddce85e1d011693b1903c41d5fa8bb18b8fcc67765eee9ec2cc467ce4c039edeb16c8c4a7ca88719ef6f858f2decd263921aeb73507f888cf06ca67f289ca622965f8086f2e957d269b5a447a22ce12a47093357c9fe25e251560780a75b68dd647da4f4d17694dbc21fbdfc41631bead92baf5b2bd14e70d1fe753dbf253327a8fc06ff5efb8a60d67743947dfe6999783a4915fc0e3bd38e2c78008b3fe8e0bd07382fd2d711d15abbf7603da66b18ff9c59550a927648338d9216d00f8abe0e78931a978", @ANYRESHEX=0x0], 0x58) r7 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15) pwrite64(r7, &(0x7f0000000140)='2', 0x1, 0xe80) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000000b0601010000000000000000d5000009"], 0x14}}, 0x48040) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0xc, r1, 0x0, 0x0, 0x2, 0xfffefffffdffffff}) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0x1) syz_clone(0x289a2400, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r9, 0x0, 0xfffffffffffffffd}, 0x18) r10 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r10, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r10, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0, 0x300}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000400000000000200"/44, @ANYRES32=0x0], 0x30}], 0x1, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 5m32.121976415s ago: executing program 3 (id=1380): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000010c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x280, 0x268, 0x300, 0x280, 0x268, 0x390, 0x460, 0x460, 0x390, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8, 0x0, {0x9401}}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x8, 0x21, "6bb6778f9bdec125b0fb4f26be757b1e6f2fb8e9079627dc6726c4bc85e9"}}}, {{@ipv6={@private2, @remote, [0x0, 0x20], [], 'ip6gretap0\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) 5m31.949240587s ago: executing program 3 (id=1381): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x2}, 0x18) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4044000) 5m31.928223287s ago: executing program 33 (id=1381): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x2}, 0x18) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4044000) 5m12.742753694s ago: executing program 5 (id=1667): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_ifindex, @remote}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000005c0)='kfree\x00', r2}, 0x18) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f00000000c0)=0x6, 0x4) 5m12.742524214s ago: executing program 5 (id=1668): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0xd, 0x2}, {0xb, 0x3}, {0xd}, {0x7}, {0x0, 0x3}]}]}, {0x0, [0x0, 0x2e, 0x30, 0x0]}}, &(0x7f0000000380)=""/246, 0x52, 0xf6, 0x0, 0x1}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, r0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x5, 0x3, 0x4, 0x4a}, 0x10) close(r2) 5m12.741427034s ago: executing program 5 (id=1669): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000440)={'gretap0\x00', 0x0, 0x1, 0x20, 0x2, 0x401, {{0x1b, 0x4, 0x2, 0x1f, 0x6c, 0x68, 0x0, 0xfe, 0x29, 0x0, @multicast2, @broadcast, {[@timestamp_addr={0x44, 0xc, 0x13, 0x1, 0xb, [{@rand_addr=0x64010101, 0x3}]}, @timestamp_addr={0x44, 0xc, 0x20, 0x1, 0x4, [{@rand_addr=0x64010101, 0x7}]}, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @noop, @generic={0x7, 0x9, "3604641720b311"}, @ssrr={0x89, 0x2b, 0xd9, [@dev={0xac, 0x14, 0x14, 0x3a}, @empty, @remote, @rand_addr=0x64010101, @empty, @multicast2, @loopback, @multicast2, @remote, @private=0xa010102]}]}}}}}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095", @ANYRES16=r0, @ANYBLOB="c7076bad5e46dbea4a718e8d680af8e3cffbafa02e0593545c4bb012bbaf7a982d003fb8c41b0ce8", @ANYRESOCT=r0], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x34, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x5, 0x0, 0x0, 0x40, 0x0, 0x0, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100, 0xc8, 0x7fffd, 0x1, 0x5}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81e6978800fe08000e40000200875a65969ff57b00ff020000000000000000000000000001e2607e15e697ab"], 0xfdef) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r6) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x20, r7, 0x6a98047402e98331, 0x70bd21, 0xffa1, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004040}, 0x4008800) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x24008011}, 0x81) 5m12.677811894s ago: executing program 5 (id=1671): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40040}, 0xc801) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r4 = open(0x0, 0x145142, 0x0) sendfile(r4, r4, 0x0, 0x800000009) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="871000000000000000000100000008000300000001000500060000000000050005"], 0x30}, 0x1, 0x0, 0x0, 0x94}, 0x8808) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8000f28, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) tkill(r8, 0x2f) ptrace$peeksig(0x4209, r8, &(0x7f0000000140)={0x1, 0x0, 0x7b}, &(0x7f0000000fc0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r9, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000080000000000000000000850000007d00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m12.595242845s ago: executing program 5 (id=1674): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r3, 0x0, 0x10000001}, 0x18) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x20) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r5, 0x3, '\x00', 0x0, r4, 0x3, 0x80}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@jqfmt_vfsv1}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") setxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x3c8, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000100)='./file1\x00') 5m12.281985307s ago: executing program 5 (id=1687): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000d5030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x800000002400}, 0xc) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x85}], 0x1, 0x40, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r1, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r2, &(0x7f0000000040)=""/60, 0xdb, 0x40, 0x0, 0x0) 5m12.281821267s ago: executing program 34 (id=1687): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000d5030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x800000002400}, 0xc) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x85}], 0x1, 0x40, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r1, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r2, &(0x7f0000000040)=""/60, 0xdb, 0x40, 0x0, 0x0) 5m0.913498025s ago: executing program 7 (id=1858): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00"/13], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) lsm_get_self_attr(0x67, &(0x7f00000000c0)={0x0, 0x0, 0x2c, 0xc, ""/12}, &(0x7f0000000000)=0x2c, 0x0) 5m0.852797116s ago: executing program 7 (id=1859): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$caif_stream(0x25, 0x1, 0x0) sendmmsg$inet(r1, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x1000000}], 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007240)=[{{&(0x7f0000000500)=@hci={0x1f, 0xffffffffffffffff, 0x3}, 0x80, &(0x7f0000000280), 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="10090000000000003a000000f4ffffff"], 0x10}}, {{&(0x7f0000000580)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2, 0x2, {0xa, 0x4e22, 0xb519, @private2, 0x8001}}}, 0x80, 0x0}}], 0x2, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='ext4_mark_inode_dirty\x00', r2}, 0x18) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x2f, 0x9, 0x7, 0xffffffff, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, 0x7, 0x20, 0x0, 0x5}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x100, 0x0, 0xffffffffffffffff, 0x98, '\x00', r4, 0xffffffffffffffff, 0x4, 0x5, 0x1}, 0x50) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000000400000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffd3b703000008000000b704000002000000850000008200000095"], &(0x7f0000000300)='GPL\x00', 0xc, 0xff6, &(0x7f0000001e00)=""/4086, 0x41100, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r8}, &(0x7f0000000580), &(0x7f00000005c0)=r9}, 0x20) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x81f, &(0x7f00000009c0)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@errors_continue}, {@bsdgroups}, {@errors_continue}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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") setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000d00000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108) 5m0.691907787s ago: executing program 7 (id=1861): syz_mount_image$iso9660(&(0x7f0000000540), &(0x7f00000001c0)='./file1\x00', 0x14004, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0], 0x4, 0x70a, &(0x7f00000232c0)="$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") r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xca) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1}, 0x18) chown(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) 5m0.599679888s ago: executing program 7 (id=1862): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000", @ANYRES32, @ANYBLOB="0000000000000000b70500001000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="07000000040000008000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x18) socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fchown(r2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x702, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x783}, 0x50) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2b0, &(0x7f0000000280)="$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") r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r4, 0x10001, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r9}, 0x18) r10 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_FILES(r10, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff], 0x57) setns(r8, 0x24020000) syz_clone(0xf5982500, 0x0, 0x0, 0x0, 0x0, 0x0) 4m59.695047823s ago: executing program 7 (id=1867): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0x7, 0x0, 0x0, 0x0, 0x40008, 0x590, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x4c58, 0x4, 0x0, 0x0, 0x7, 0x4ac, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x13, r2, 0x100000) 4m59.169682286s ago: executing program 7 (id=1880): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r1, &(0x7f0000000200)={0xa, 0xffff, 0xb7, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x1e) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB="5800000233bd8e00100039042abd7000eaffffff", @ANYRES32=0x0, @ANYBLOB="03000000c31006003800128008000100736974002c00028006000e000010000008000300ac1414bb08000200ac14142d08000c00000000000800140001000100"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002280)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000080)=@gcm_128={{0x303}, "ba28597967d1b54c", "9712b0d86846b5ecc522bc6f13a6e30c", "ea0292da", "9e87dc79f4c04982"}, 0x28) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000e80)={{r1}, "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"}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r3}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x200001, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r5, 0x51cd, 0x79c, 0xb, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffdb7}, 0x48) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) r8 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001680000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r9}, &(0x7f0000000180), &(0x7f00000001c0)=r8}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r10}, 0x10) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x818010, &(0x7f0000000300)={[{@minixdf}, {@grpjquota}]}, 0x3, 0x738, &(0x7f0000000780)="$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") connect$inet(0xffffffffffffffff, 0x0, 0x0) 4m59.169213626s ago: executing program 35 (id=1880): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r1, &(0x7f0000000200)={0xa, 0xffff, 0xb7, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x1e) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB="5800000233bd8e00100039042abd7000eaffffff", @ANYRES32=0x0, @ANYBLOB="03000000c31006003800128008000100736974002c00028006000e000010000008000300ac1414bb08000200ac14142d08000c00000000000800140001000100"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002280)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000080)=@gcm_128={{0x303}, "ba28597967d1b54c", "9712b0d86846b5ecc522bc6f13a6e30c", "ea0292da", "9e87dc79f4c04982"}, 0x28) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000e80)={{r1}, "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"}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r3}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x200001, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r5, 0x51cd, 0x79c, 0xb, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffdb7}, 0x48) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) r8 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001680000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r9}, &(0x7f0000000180), &(0x7f00000001c0)=r8}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r10}, 0x10) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x818010, &(0x7f0000000300)={[{@minixdf}, {@grpjquota}]}, 0x3, 0x738, &(0x7f0000000780)="$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") connect$inet(0xffffffffffffffff, 0x0, 0x0) 3m50.002828797s ago: executing program 2 (id=3220): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000) 3m49.985886528s ago: executing program 2 (id=3222): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x88604, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x20000, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = io_uring_setup(0x68af, &(0x7f0000000480)={0x0, 0x0, 0x1000, 0x1}) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3f, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xfc, r0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0xac, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfb460be5}, @TIPC_NLA_NODE_ID={0xa0, 0x3, "1c7f33240fc012cfc2ae1c5e1b650f3e81b7e3f74b454784603fc5b60600e21ada5152e28f57f6a6062496158d28b1be6516bc2b2188cf4fbd4c0c62dcd49dab1d375c729ab401b0195a7f79576e42d0a41c9ed98c4f804b0baf64af03704fb7ebe2219cf475aa277997aae3b41aa877d92910fe37455be3b21907d82fb975ef7cb4f62312a166c2d00cb2ec607a2765a4deae8e9751d029f17eb73a"}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x400}]}, @TIPC_NLA_NODE={0x24, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffff9}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x80}, 0x4000105) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x20, &(0x7f0000000540)={&(0x7f0000000440)=""/174, 0xae, 0x0, &(0x7f0000000500)=""/18, 0x12}}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYBLOB], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)="e636", 0x2}], 0x1}, 0x4040001) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r7}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) recvmsg$unix(r5, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000000480)}, 0x40000000) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r8}, 0x10) pipe2$9p(&(0x7f0000001900), 0x0) 3m49.56560493s ago: executing program 2 (id=3232): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000) 3m49.547490481s ago: executing program 2 (id=3233): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x4}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@dioread_lock}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") pivot_root(&(0x7f0000001500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r2, 0x8993, &(0x7f0000000080)={'bond0\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000000)='/proc\x00\x00\x00\x00\x00\x00\x00\x00D\x00\x00v4\x00\x00s/\x92Ync_\x00le\xf44.\xab%nN\xd4\xfc\x11\x00\xd1l,'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r5) r6 = open(&(0x7f00000000c0)='.\x00', 0x30000, 0x0) lseek(r6, 0x100, 0x1) getdents(r6, &(0x7f0000000340)=""/212, 0xd4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x20000000) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 3m49.321069622s ago: executing program 2 (id=3234): quotactl$Q_SYNC(0xffffffff80000101, 0xfbffffff, 0x0, 0x0) 3m48.697422156s ago: executing program 2 (id=3238): msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0229cd6c40d9e329a8337c90996775cb26ff8966d51808ae30b625ef0c7a392857963133290a6f03a904c37399818b84a56b218942f664ca25f9c584a96d30ae190ebb95e16845142b3c2f5e52cd9c58c3d41a748560999f70c27d8448c1d2b3f6aa7eb2b884024ecd4f8c2ea6da0844ca40b3305f3fc296aa2680c2444c16231ac5cdfe71acdc1da378fde4348615dc96"], 0x2000, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000007c0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12t\x02\x006\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x01\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x828_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x04.\x9aL\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdc,]R\xcc\xb2O\xdb\xed-\x87$\xeb\xde\x10*\xd9\xc6\xe7\x10\xd9rY\x0f\xa1d\x96\x03\x99\xa6.o4g\xc9+j\xd5\x9a-\x90\xfc1\xa0|\xe5\xf2\xe99\xa8zJ\xdb\x1c\x0e\x8b\x1e\x96\xa5?\xffv\x1f\x00\xd4\xfc\x04\x95\xfb\r\"\x86\x0f\xc9d\xa2\xef\x16\x030\x8a\x18(\xca\xfc\x11O4\x9aZ\xf8\xf6\xfc*q\xff\x16\xfe{@W$H\x9d\xfe\v\x93\x04u\x93\x920e\x11\x0e\xe9\x06\xc2\xd7\xcc\x18U\xd5\x80\xef\xbda\x82\b\a\xd4\xefU\x92|\xcfX-\xddoSh\x81*\x03T\x87\xf3_Jp\x18cA\xccc\x9e\"\n\xc9\x17\xaf\xdd\xe8aa\xb0\xf5\'U\xb6 \xa0O\xab)\xe5Un\xcb\x95\xe4\xcb\xccX\xee\xa4\x81\xc6\xb7\xd0c\xfc[P\xe1\xa5\xd8\xf9u\xab\x91\xccT<\t\xe6\x1f\xc6\xf6\xd0\x18b\x9e\x8e\xe3\xe3\xa2\xe9/\xcb\x11u5~\'\xbb\x85\xd2\xaafTp^\x85\xdc\x1c\xe1d6\xf8e\xd8\xe1\xdcg\x1c \xb19\x1ey#>z\x9e') r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES16=r1, @ANYRES8=r1], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd6a, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r2, 0x0, 0x3}, 0x18) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) 3m48.697057546s ago: executing program 36 (id=3238): msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0229cd6c40d9e329a8337c90996775cb26ff8966d51808ae30b625ef0c7a392857963133290a6f03a904c37399818b84a56b218942f664ca25f9c584a96d30ae190ebb95e16845142b3c2f5e52cd9c58c3d41a748560999f70c27d8448c1d2b3f6aa7eb2b884024ecd4f8c2ea6da0844ca40b3305f3fc296aa2680c2444c16231ac5cdfe71acdc1da378fde4348615dc96"], 0x2000, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000007c0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12t\x02\x006\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x01\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x828_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x04.\x9aL\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdc,]R\xcc\xb2O\xdb\xed-\x87$\xeb\xde\x10*\xd9\xc6\xe7\x10\xd9rY\x0f\xa1d\x96\x03\x99\xa6.o4g\xc9+j\xd5\x9a-\x90\xfc1\xa0|\xe5\xf2\xe99\xa8zJ\xdb\x1c\x0e\x8b\x1e\x96\xa5?\xffv\x1f\x00\xd4\xfc\x04\x95\xfb\r\"\x86\x0f\xc9d\xa2\xef\x16\x030\x8a\x18(\xca\xfc\x11O4\x9aZ\xf8\xf6\xfc*q\xff\x16\xfe{@W$H\x9d\xfe\v\x93\x04u\x93\x920e\x11\x0e\xe9\x06\xc2\xd7\xcc\x18U\xd5\x80\xef\xbda\x82\b\a\xd4\xefU\x92|\xcfX-\xddoSh\x81*\x03T\x87\xf3_Jp\x18cA\xccc\x9e\"\n\xc9\x17\xaf\xdd\xe8aa\xb0\xf5\'U\xb6 \xa0O\xab)\xe5Un\xcb\x95\xe4\xcb\xccX\xee\xa4\x81\xc6\xb7\xd0c\xfc[P\xe1\xa5\xd8\xf9u\xab\x91\xccT<\t\xe6\x1f\xc6\xf6\xd0\x18b\x9e\x8e\xe3\xe3\xa2\xe9/\xcb\x11u5~\'\xbb\x85\xd2\xaafTp^\x85\xdc\x1c\xe1d6\xf8e\xd8\xe1\xdcg\x1c \xb19\x1ey#>z\x9e') r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES16=r1, @ANYRES8=r1], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd6a, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r2, 0x0, 0x3}, 0x18) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) 1.52209722s ago: executing program 9 (id=7661): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0xffffffffffffffa0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000000), 0x2) 1.437400701s ago: executing program 0 (id=7664): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r2, 0x0, 0xb}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x89f6, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x12, 0x0, 0x2, 0x100, 0xb152, 0x3, 0x1fb, 0xfffffff9, 0x5}}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x7, 0x4, 0x100, 0x6, 0x28}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000400)='sys_enter\x00', r5}, 0x18) clock_getres(0xc1f7663ffa812601, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB=',version=9p2000']) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) r8 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r8, 0x0, 0x0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)="21fd768f5cd243d043abdd73077df5fdd69d77235149", 0x16, r8) 1.377853161s ago: executing program 9 (id=7665): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x81}, 0x2012, 0x0, 0x80002, 0x2, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) socket$pptp(0x18, 0x1, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x7, 0x8000, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x22, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00', r2, 0x0, 0x4}, 0x18) setrlimit(0x9, &(0x7f0000000080)={0x8606, 0xffff}) io_setup(0x8f0, &(0x7f0000002400)) r3 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="03000000000000000a004e230000000cff010000000000000000000000000001f8ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000a0080010000000200000000000000000000000000000001"], 0x110) setsockopt$inet6_group_source_req(r3, 0x29, 0x2c, &(0x7f0000000180)={0x0, {{0xa, 0x4e22, 0x6ef, @mcast1, 0xfffffffd}}, {{0xa, 0x4e24, 0x21, @loopback, 0xfffffe01}}}, 0x108) 1.219658662s ago: executing program 0 (id=7670): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000340), &(0x7f0000000300)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x6a, &(0x7f0000000200)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "1fa3883e21cd9fe5caae18544a9131d14c91cf0d35507989", "6e447a58f2e6a0893330bdb477ae5aa6740446707740eb6dcb6c5545363eff42"}}}}}}, 0x0) 1.187825752s ago: executing program 9 (id=7671): syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x88604, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x20000, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = io_uring_setup(0x68af, &(0x7f0000000480)={0x0, 0x0, 0x1000, 0x1}) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3f, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) close_range(r1, 0xffffffffffffffff, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x20, &(0x7f0000000540)={&(0x7f0000000440)=""/174, 0xae, 0x0, &(0x7f0000000500)=""/18, 0x12}}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(r3, 0x0, 0x40000000) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r4}, 0x10) pipe2$9p(&(0x7f0000001900), 0x0) 1.169219023s ago: executing program 0 (id=7673): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_icmp(0xa, 0x2, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x348, 0x0, 0x12, 0x60a, 0x170, 0x202, 0x278, 0x2e8, 0x2e8, 0x278, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private1, @mcast2, [0xff000000], [0x0, 0x0, 0xff000000], 'caif0\x00', 'xfrm0\x00', {}, {0xff}}, 0x0, 0x108, 0x170, 0x0, {}, [@common=@unspec=@statistic={{0x38}}, @common=@inet=@socket2={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x9, 0x7, 0x4, 0x67, 'syz0\x00', 'syz0\x00', {0x3}}}}, {{@ipv6={@private2, @private1, [], [], 'veth0_to_bridge\x00', 'geneve0\x00', {}, {}, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [], 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x39e}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) 1.047597443s ago: executing program 9 (id=7676): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x0, 0x41}, 0x28) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/12, @ANYRES32], 0x0, 0x75, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x16, 0xc, &(0x7f0000000480)=ANY=[], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r3, 0x0, 0x4804}, 0x18) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x8, 0x3, 0xa38, 0x0, 0xa, 0x148, 0x0, 0x60, 0x9a0, 0x2a8, 0x2a8, 0x9a0, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'ip6tnl0\x00'}, 0x0, 0x8a8, 0x910, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0xfff}}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x400, 0x2}, {0x80000001}, {0xf, 0x2}, {0x200, 0x1}, {0x0, 0x5be7f83cee24a62a}, {0x4, 0x1}, {0x593}, {0xf778, 0x3}, {0x3, 0x1}, {0xf, 0x1}, {0x12, 0x1}], [{0x8}, {0x10}, {0x2, 0x1}, {0x18cfe09f, 0xffffffa0}, {0x5, 0x3ff}, {0x8, 0xf}, {0xcd, 0x55}, {0x4, 0xf}, {0x5, 0x38}, {0x40, 0x1a02}, {0x80, 0x7ff}], 0x8, 0x2}, {[{0xb}, {0x1, 0x3}, {0x7b}, {0xffffffff}, {0x7, 0x2}, {0xa0, 0x2}, {0x1, 0x3}, {0x10000, 0x2}, {0x9, 0x2}, {0x6d2, 0x2}, {0x6, 0x3}], [{0x0, 0x2}, {0x4, 0x7ff}, {0x4, 0x7}, {0x1, 0xe}, {0x22c454a6, 0xfffffff3}, {0xdce, 0x4780}, {0x7, 0x9}, {0x6, 0x5}, {0x2, 0x40}, {0xfff, 0xa}, {0x3, 0x6}], 0x2, 0x8}, {[{0x2, 0x1}, {0x1}, {0xfff, 0x3}, {0x8, 0x1}, {0x0, 0x3}, {0x69f}, {0xffff0000, 0x2}, {0x5, 0x1}, {0x4, 0x3}, {0x8000, 0x3}, {0x7, 0x3}], [{0x0, 0x2000}, {0xc, 0x3}, {0x80000000, 0x7f17}, {0xf, 0x8000}, {0xd, 0x1}, {0xc6, 0xc24}, {0x1, 0xfffffffa}, {0x9, 0xa77}, {0xfffffffc, 0x2}, {0xffffb8d7, 0x7}, {0x1fb, 0x7ff}], 0xa, 0x2}, {[{0x5, 0x1}, {0xe116, 0x2}, {0x3, 0x2}, {0x9, 0x3}, {0x7, 0x2}, {0x3, 0x2}, {0xfff, 0x1}, {0x7ff, 0x3}, {0x9c, 0x3}, {0xe9d, 0x3}, {0x868, 0x2}], [{0xfffffffc, 0x8}, {0x800, 0x5}, {0xc, 0x7}, {0x5, 0x5a4}, {0x1, 0x5}, {0x5, 0x7}, {0x0, 0xfff}, {0xffffff81, 0x7ff}, {0x7, 0x3}, {0xc78, 0x9}, {0x93, 0x9}], 0x7, 0x9}, {[{0xe, 0x2}, {0x9}, {0x3, 0x1}, {0x4, 0x2}, {}, {0x4f4}, {0x2, 0x2}, {0x5}, {0x7, 0x1}, {0x1, 0x1}, {0x80000000, 0x2}], [{0xe70, 0xa3}, {0x100, 0x8}, {0xfffffffe, 0x1}, {0x7ba, 0x42c11bd9}, {0x1, 0x5}, {0x5, 0x5}, {0xffff2d51, 0x1}, {0x5, 0x1}, {0x8, 0x4}, {0x6, 0x3}, {0x3, 0x3}], 0x0, 0x9}, {[{0x1, 0x2}, {0x3, 0x3}, {0x7, 0x3}, {0x9, 0x1}, {0x80000001, 0x1}, {0xffff9d57}, {0xff, 0x2}, {0x5}, {0x5075, 0x3}, {0x6, 0x1}, {0x10000, 0x1}], [{0x0, 0x9}, {0x8c, 0x7fff}, {0x1}, {0x6, 0x8001}, {0x3, 0x80000001}, {0x8}, {0x1, 0xc}, {0x2, 0x8}, {0x73a, 0x1}, {0xfffffffb, 0x5}, {0x6, 0x6}], 0x6, 0x2}, {[{0xfffffffc, 0x3}, {0x5, 0x3}, {0x2, 0x3}, {0xa646, 0x2}, {0x40, 0x3}, {0xfffffffe, 0x2}, {0x5, 0x1}, {0x3, 0x3}, {0x1000, 0x1}, {0x1, 0x1}, {0x400, 0x3}], [{0x7f, 0x10000}, {0x9, 0xff}, {0x718f, 0x5}, {0x3, 0x7}, {0x7, 0xe}, {0x3, 0x3}, {0x4, 0x10001}, {0x6, 0x3}, {0x1, 0x101}, {0x800, 0x4}, {0x9, 0xa49}], 0x7, 0x7}, {[{0x7f}, {0xf, 0x3}, {0x1, 0x2}, {0x7, 0x2}, {0x1}, {0x7fffffff, 0x1}, {0x1, 0x1}, {0x3, 0x2}, {0x1, 0x2}, {0x8}, {0x3, 0x3}], [{0xe, 0x3}, {0x7fffffff, 0x5}, {0x10001, 0xc696}, {0x400, 0x7ff}, {0x9, 0x7}, {0x0, 0x10000}, {0x9, 0x7f}, {0x1, 0x4}, {0x0, 0x80000000}, {0x85, 0x8}, {0x6, 0x2}], 0x7, 0xb}, {[{0x6, 0x3}, {0x9}, {0x800}, {0x7fffffff, 0x3}, {0xd}, {0x1, 0x3}, {}, {0x93, 0x3}, {0x4a6}, {0xc, 0x3}, {0xfffffff8, 0x3}], [{0x3, 0x7}, {0xffffffff, 0x556385be}, {0x3, 0x40000000}, {0x5, 0xfffff748}, {0xca, 0xff}, {0x3}, {0x9, 0x2}, {0xfffffff7, 0xb6d4}, {0x40, 0x5}, {0xd447, 0x101}, {0x9}], 0x7, 0x7}, {[{0x20000000, 0x2}, {0xf, 0x1}, {0x8, 0x1}, {0xffff0000}, {0x7fffffff, 0x2}, {0x5, 0x1}, {0x7}, {0x9, 0x3}, {0x4, 0x2}, {0x8, 0x1}, {0x5, 0x3}], [{0xdc, 0xfffffffe}, {0x3ff, 0x401}, {0x96, 0x4}, {0x401, 0x6}, {0x4, 0x3dc33565}, {0x3ff, 0x7fff}, {0xffffffff, 0xf}, {0x3d, 0x9}, {0x9}, {0xfffffffb, 0x2}, {0x0, 0x200}], 0x2, 0x7}, {[{0xfffffffd}, {0x400000, 0x2}, {0x10, 0x3}, {0x2}, {0x3}, {0x0, 0x3}, {0x3f79, 0x2}, {0x80000000, 0x1}, {0x3, 0x2}, {0x40, 0x1}, {0x6, 0x3}], [{0x101, 0x6c}, {0x3, 0x7}, {0x0, 0x2}, {0x4, 0x4}, {0x0, 0x4}, {0x2afd, 0xd}, {0x398, 0x1c2c}, {0x5, 0x1}, {0x1}, {0xe, 0x2}, {0x89b, 0xe}], 0x5, 0x7}], 0x5, 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x3, 0xfc, 0xd3, 0xe, 'syz1\x00', 'syz0\x00', {0x9}}}}, {{@ip={@local, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0xa98) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r5, 0x6, &(0x7f0000002000)={0x1, 0x2, 0x200, 0x2}) fcntl$lock(r5, 0x0, &(0x7f0000000000)={0x1, 0x2, 0x0, 0xa}) fcntl$lock(r5, 0x26, &(0x7f0000000080)) fcntl$lock(r5, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00'}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) r7 = inotify_init1(0x80800) inotify_add_watch(r7, &(0x7f0000000400)='.\x00', 0xa4000021) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000380)="$eJzs3d9rY1kdAPDvvW1mOzNdk1WRdcF1cVc6i07Sbt3dIqLriz4tqOv7WNu0lCZNadJ1Whbt4H8ggoJPPvki+AcIwzz4B8jAgL6ID6KiiM7og6DOlSQ3TidN2rrTNp3m84HTnHPvzf2ec0NO7o/TewMYWy9FxFsRMRERr0ZEMZ+e5in2uqm93IP77y21UxJZ9s5fk0jyab11tdcxGRFX87dNRcTXvhzxzeRg3ObO7vpirVbdysuVVn2z0tzZvb5WX1ytrlY35ufn3lh4c+H1hdks90TtLPUyP/nS529/+lu/u/Hna99uV+tzH4lC9LXjJHWbXuhsi572Nto6jWAj0PvMC6OuCAAAx9Lex/9gRHyis/9fjInO3lyfiVHUDAAAADgp2Rem499JRAYAAABcWGlETEeSlvOxANORppfycwMfjitprdFsfWqlsb2x3J4XUYpCurJWq87mY4VLUUja5bl8jG2v/FpfeT4inouI7xcvd8rlpUZtecTnPgAAAGBcXO07/v9HMe3kjzbg/wQAAACA86s0tAAAAABcFA75AQAA4OLrP/6/PaJ6AAAAAKfiK2+/3U5Z7/nXy+/ubK833r2+XG2ul+vbS+WlxtZmebXRWO3cs69+1PpqjcbmZ2Jj+2alVW22Ks2d3Rv1xvZG68baY4/ABgAAAM7Qcx+/8+skIvY+e7mTIr8PIMBj/jDqCgAnaWLUFQBGxl28YXwVRl0BYOSSI+YbvAMAAE+/mY8evP7fe/6/cwNwsRnrAwDjx/V/GF8FIwBhrKUR8YFu9plhywy9/v/L40bJsoi7xf1TnF8EAICzNd1JSVrOjwOmI03L5YhnI9JSFJKVtVp1Nj8++FWx8Ey7PNd5Z3LkmGEAAAAAAAAAAAAAAAAAAAAAAAAAoCvLksgAAACACy0i/VPSuZt/xEzxlen+8wOXkn8W44954Ufv/ODmYqu1Ndee/rfOs7wuRUTrh/n014Y+PgwAAAA4acne0Fnd4/T8de5MawUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAGHhw/72lXjrLuH/5YkSUBsWfjKnO61QUIuLK35OY3Pe+JCImTiD+3q2IeH5Q/CQeZllWymvRHz+NiMunHL/U2TTD4189gfgwzu60+5+3Bn3/0nip8zr4+zeZpyc1vP9L88jPd/q5Qf3fswfWVh8Y44V7P6sMjX8r4oXJwf1Pr/9NhsR/+cDa/pVl2cEY3/j67u6w+NmPI2YG/v4kj8WqtOqblebO7vW1+uJqdbW6MT8/98bCmwuvL8xWVtZq1fzvwBjf+9jPHx7W/isD4v/2N93+97D2vzJspX3+c+/m/Q91s4VB8a+9PPD3dyqGxE/z375P5vn2/Jlefq+b3+/Fn9598bD2Lw/Z/kd9/teO2f5Xv/rd3x9zUQDgDDR3dtcXa7Xq1iGZqWMs8zRmfjF1Lqrxf2ay73Q/ufNSn/ebae+tPprSa9U5qNi+THZmsSbinDT5f5mRdksAAMApeLTTP+qaAAAAAAAAAAAAAAAAAAAAwPg6i9uJ9cfcG01TAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO9d8AAAD//yLg4A8=") 890.367454ms ago: executing program 1 (id=7679): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x2, 0xfffffe81, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000480)=""/128, 0x80}], 0x1, 0x12e, 0x0) mq_timedreceive(r3, &(0x7f00000002c0)=""/50, 0x32, 0x2, &(0x7f0000000340)) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000010000104000000000000000000000006", @ANYRES32=0x0, @ANYBLOB="00000000060000000a00030008bc872f00000000180012807f0000007769726567756172640000000400028046cb9e0194d51cff81a3f10cc89f1e5fbaee36d547a3383fca7c0c68d23d922dd8484849f4c2b4fcaa62fb0b1e7c208f"], 0x44}}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x88182, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'ipvlan1\x00', &(0x7f0000000000)=@ethtool_rxfh={0x1, 0x0, 0x0, 0x7fff, 0x0, '\x00', 0x100000}}) getpid() socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @generic={0x65}, @initr0={0x18, 0x0, 0x0, 0x0, 0x20000000}, @exit, @alu={0x4, 0x0, 0x2, 0x3, 0x0, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000000000010000000a000000090002008d001f106f194eb3050001"], 0x30}}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="1b0000001c008102e00f80ecdb4cb9f207c804a00d", 0x15}], 0x1, 0x0, 0x0, 0x5865}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES8=r5], 0x5c}, 0x1, 0x0, 0x0, 0x2400c414}, 0x4000) 749.495135ms ago: executing program 1 (id=7680): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0xf) ustat(0x7fffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$packet(0x11, 0x2, 0x300) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r5, 0x0, 0x100000000}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r7) getsockname$packet(r7, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r8, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070005"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x11, 0x8100, r8, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x30, 0x2, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_FILTER={0x4}, @CTA_MARK={0x8}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x100}]}, 0x30}, 0x1, 0x0, 0x0, 0x4014}, 0x44880) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x18) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xa, 0x0, 0x0, 0x7995}, 0x846e, 0x0, 0x0, 0x48000000, 0x0, 0x5e, 0x0}) 749.209565ms ago: executing program 6 (id=7681): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x81}, 0x2012, 0x0, 0x80002, 0x2, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) socket$pptp(0x18, 0x1, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x7, 0x8000, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x22, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00', r2, 0x0, 0x4}, 0x18) setrlimit(0x9, &(0x7f0000000080)={0x8606, 0xffff}) io_setup(0x8f0, &(0x7f0000002400)) r3 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="03000000000000000a004e230000000cff010000000000000000000000000001f8ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000a0080010000000200000000000000000000000000000001"], 0x110) setsockopt$inet6_group_source_req(r3, 0x29, 0x2c, &(0x7f0000000180)={0x0, {{0xa, 0x4e22, 0x6ef, @mcast1, 0xfffffffd}}, {{0xa, 0x4e24, 0x21, @loopback, 0xfffffe01}}}, 0x108) 641.503926ms ago: executing program 1 (id=7682): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000100000028"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="ca000000006ae85934", @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0, 0x0, 0x800000000000000}, 0x18) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=""/6) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xfffffe66) syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x7, 0x48, [@local]}, @timestamp={0x44, 0xc, 0x5, 0x0, 0x0, [0x0, 0x0]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r4 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xadz\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x64, 0x10, 0x403, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e23}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0xfffffff4}]}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x64}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 419.062367ms ago: executing program 6 (id=7683): r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x80800) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x2, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x425d9b36da1673a8}, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r6}, 0x38) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) 361.542877ms ago: executing program 6 (id=7685): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x20, 0x7, 0x5, 0x40000007, {{0x28, 0x4, 0x1, 0x3d, 0xa0, 0x65, 0x0, 0x2, 0x2f, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x39, 0xffffffffffffffff, [{0x2, 0x4, "a1b6"}, {0x7, 0xd, "5cd66fadeb1ec4ffd631e7"}, {0x0, 0xe, "d3b996f9bd4603fe9943ea38"}, {0x7, 0x12, "c8ba5484814e7d52719e4580f6d69872"}, {0x5, 0x2}]}, @timestamp_prespec={0x44, 0x2c, 0x6f, 0x3, 0x0, [{@rand_addr=0x64010100, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0x80000000}, {@empty, 0x5}, {@multicast2, 0x3}, {@private=0xa010100, 0x3}]}, @lsrr={0x83, 0xb, 0x84, [@rand_addr=0x64010101, @multicast2]}, @timestamp={0x44, 0x8, 0x58, 0x0, 0xc, [0x20000000]}, @generic={0x86, 0xb, "c6c0336d04bf0dd37f"}, @rr={0x7, 0x7, 0x9, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) 345.709408ms ago: executing program 1 (id=7686): syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x88604, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x20000, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = io_uring_setup(0x68af, &(0x7f0000000480)={0x0, 0x0, 0x1000, 0x1}) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3f, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) close_range(r1, 0xffffffffffffffff, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x20, &(0x7f0000000540)={&(0x7f0000000440)=""/174, 0xae, 0x0, &(0x7f0000000500)=""/18, 0x12}}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(r3, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x40000000) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r4}, 0x10) pipe2$9p(&(0x7f0000001900), 0x0) 318.868277ms ago: executing program 6 (id=7687): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0xb}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mlock(&(0x7f00004bc000/0x4000)=nil, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000001e000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) r3 = io_uring_setup(0x6c2, &(0x7f00000003c0)={0x0, 0x4075, 0x18, 0x0, 0x10f}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x7, @perf_config_ext={0xff, 0x7}, 0x108a40, 0x10000, 0x8, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000006c0)='./file2\x00', 0x0, &(0x7f0000000700)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0xac7}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@mblk_io_submit}]}, 0x1, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000100)='./file2\x00') inotify_init1(0x80000) socket(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r6, 0x89ed, 0x0) 279.108538ms ago: executing program 8 (id=7688): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x29}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getxattr(0x0, &(0x7f0000000100)=@known='trusted.overlay.nlink\x00', 0x0, 0x0) 278.522098ms ago: executing program 8 (id=7689): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000040000000000000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18) r1 = open(&(0x7f0000000140)='./bus\x00', 0x143bc2, 0x1c0) fcntl$setlease(r1, 0x400, 0x1) lsetxattr$security_selinux(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000200), &(0x7f0000000180)='system_u:object_r:systemd_systemctl_exec_t:s0\x00', 0x2e, 0x0) 273.561328ms ago: executing program 6 (id=7690): socket$kcm(0x2, 0x3, 0x84) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x6a, &(0x7f0000000200)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "1fa3883e21cd9fe5caae18544a9131d14c91cf0d35507989", "6e447a58f2e6a0893330bdb477ae5aa6740446707740eb6dcb6c5545363eff42"}}}}}}, 0x0) 231.430658ms ago: executing program 6 (id=7691): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x2, 0xfffffe81, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000480)=""/128, 0x80}], 0x1, 0x12e, 0x0) mq_timedreceive(r3, &(0x7f00000002c0)=""/50, 0x32, 0x2, &(0x7f0000000340)) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000010000104000000000000000000000006", @ANYRES32=0x0, @ANYBLOB="00000000060000000a00030008bc872f00000000180012807f0000007769726567756172640000000400028046cb9e0194d51cff81a3f10cc89f1e5fbaee36d547a3383fca7c0c68d23d922dd8484849f4c2b4fcaa62fb0b1e7c208f"], 0x44}}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x88182, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'ipvlan1\x00', &(0x7f0000000000)=@ethtool_rxfh={0x1, 0x0, 0x0, 0x7fff, 0x0, '\x00', 0x100000}}) getpid() socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @generic={0x65}, @initr0={0x18, 0x0, 0x0, 0x0, 0x20000000}, @exit, @alu={0x4, 0x0, 0x2, 0x3, 0x0, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000000000010000000a000000090002008d001f106f194eb3050001"], 0x30}}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES8=r5], 0x5c}, 0x1, 0x0, 0x0, 0x2400c414}, 0x4000) 229.587918ms ago: executing program 8 (id=7692): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0xf) ustat(0x7fffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$packet(0x11, 0x2, 0x300) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r5, 0x0, 0x100000000}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r7) getsockname$packet(r7, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r8, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070005"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x11, 0x8100, r8, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x30, 0x2, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_FILTER={0x4}, @CTA_MARK={0x8}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x100}]}, 0x30}, 0x1, 0x0, 0x0, 0x4014}, 0x44880) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x18) r11 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(r11, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xa, 0x0, 0x0, 0x7995}, 0x846e, 0x0, 0x0, 0x48000000, 0x0, 0x5e, 0x0}) 197.952448ms ago: executing program 0 (id=7693): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x29}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getxattr(0x0, &(0x7f0000000100)=@known='trusted.overlay.nlink\x00', 0x0, 0x0) 174.948149ms ago: executing program 0 (id=7694): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x40900, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x5ea3, 0x8, 0x8000, 0x400250}, &(0x7f0000000080)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x0, @fd=r1, 0x8006, &(0x7f0000000300)=""/210, 0xd2, 0x2, 0x1}) io_uring_enter(r2, 0x4be7, 0x4c3, 0x43, 0x0, 0x0) 174.528559ms ago: executing program 8 (id=7695): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x40900, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x5ea3, 0x8, 0x8000, 0x400250}, &(0x7f0000000080)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x0, @fd=r1, 0x8006, &(0x7f0000000300)=""/210, 0xd2, 0x2, 0x1}) io_uring_enter(r2, 0x4be7, 0x4c3, 0x43, 0x0, 0x0) (fail_nth: 1) 160.664468ms ago: executing program 1 (id=7696): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newqdisc={0x70, 0x24, 0xe0b, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x6, 0xfffffffd, 0x0, 0xfffffffd, 0x32d}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xfffff800, 0x8, 0x99f5, 0x2, 0x2}}]}]}}}]}, 0x70}}, 0x0) sendto$packet(r0, &(0x7f0000000580)="44c394f305916c4516999da20800", 0xe, 0x8044, 0x0, 0x0) 73.83676ms ago: executing program 8 (id=7697): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x20, 0x7, 0x5, 0x40000007, {{0x28, 0x4, 0x1, 0x3d, 0xa0, 0x65, 0x0, 0x2, 0x2f, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x39, 0xffffffffffffffff, [{0x2, 0x4, "a1b6"}, {0x7, 0xd, "5cd66fadeb1ec4ffd631e7"}, {0x0, 0xe, "d3b996f9bd4603fe9943ea38"}, {0x7, 0x12, "c8ba5484814e7d52719e4580f6d69872"}, {0x5, 0x2}]}, @timestamp_prespec={0x44, 0x2c, 0x6f, 0x3, 0x0, [{@rand_addr=0x64010100, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0x80000000}, {@empty, 0x5}, {@multicast2, 0x3}, {@private=0xa010100, 0x3}]}, @lsrr={0x83, 0xb, 0x84, [@rand_addr=0x64010101, @multicast2]}, @timestamp={0x44, 0x8, 0x58, 0x0, 0xc, [0x20000000]}, @generic={0x86, 0xb, "c6c0336d04bf0dd37f"}, @rr={0x7, 0x7, 0x9, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) 73.228739ms ago: executing program 9 (id=7698): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffdc}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) timer_create(0x4, &(0x7f0000000080)={0x0, 0x3b, 0x1, @thr={&(0x7f0000000280)="134bd6f8d8291449265560529cdea8fc6197503dba595b6920662d8449de3614d854bcc80e430b8b7e66662be0e653ce378d37c74fce06071bf40b7a9ff5f106c6608baf9e2d9a39d87470478b5dd3f5426a10bc87e3d07383467c96c5fc2d79acd325b0e4de2e5019fb67026422f19154ae2656cf30577af6ef2fd9a7eb8adf7f6f2311e3357ef18965f010eab15c70b07fcc03fef7b42fbd8c3b1a9abd7f6452029be33521f916203ebc0c15a84e0a78bdabf23887149322e24d04cfe355a5935768f8cf8acee6c24486415802552c4dbde9071d4699ac3aafe90269091a6f9298e42a5de20c0555b7bde1b4b47d33da647e", &(0x7f00000005c0)="8dd32086884da27b762761a8590ab12b60fe1cdb710be06cb4989a5a2a928b78fc435cfa65205b4574b78ca9160ece5607c32e58226d78fc0080737e867efdb905e428cae030b86b15e6a83f6e274553a54d341b1407bfab804e6b975a5cbe0c63ca0de895269e00481a93d6a79fd4ab5c5a8ce326337b3352b8e3331faadec858a88005ad0742b70a484ae45857c299811e6076f83e87bb91dc7ca2b50d07bc1f33493b99ce896f4d95b6bd0a2079534b3a06b596c2590f3d9c566113a63e2dabb9174596253d478cbd0a817ea2c3a050eea4428da173fd"}}, &(0x7f00000001c0)) splice(r3, 0x0, r2, 0x0, 0x7f, 0xe) write(r1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) lseek(r4, 0x2004, 0x0) 46.981549ms ago: executing program 1 (id=7699): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "9ac420000461afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}]}}}, {0x14, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = gettid() kcmp(r4, r4, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./file1\x00', 0x1c0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) getdents(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1b, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) syz_clone(0x20000, &(0x7f0000000040)="f5f1977da3b86f3106a35863bb0588c5a1b4815d13704f2948512a6c33d30e7b00439c62c022c8ce13e6ecdad9da27b137", 0x31, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="a10d6a605fc2d6ef4c3f90dc9416fbb8b60fbb17bbc74ba2e94010ed40a00be8332bb8b2ad6fc838e69852172c2bd4f18598437e2e6f9d87bf6f3b221c4873273f676b45ac38a18204368e6a434342fb5d6f564267f5a4a70e22041202a76027291bd5b7ae7059f008ed625ffb95add155559bbe996c32a01b6d26d54052380759a2e16e3a946a20a24cfe4cfa46f65af0f47f0495b49b44ff142cde4551c899bafd5b49168b532320dabaa8ebcead410c43dba063d28dbace4e0b04b381ceae34bcc7549754a55d5bcce3f84f84554158f96c71d1d7c94d0bbb398823f35eb7dd29b4becb3292e34934976b4e4fe5a62aa555c1d0e371") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0) 30.484229ms ago: executing program 0 (id=7700): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000202070250009000000000000001af8ff00000000bfa100000000000007010000f8ffffff281c000008000000b703000000000083850000007100000095000000000000000000000000000000ddff000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x40900, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) r4 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x5ea3, 0x8, 0x8000, 0x400250}, &(0x7f0000000080)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='kmem_cache_free\x00', r7, 0x0, 0x7}, 0x18) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x8d, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, 0x0, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) io_setup(0x3ff, &(0x7f0000000500)=0x0) r10 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) r11 = syz_pidfd_open(r10, 0x0) waitid$P_PIDFD(0x3, r11, 0x0, 0xa000000c, 0x0) io_submit(r9, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x3fd, r11, 0x0}]) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x0, @fd=r2, 0x8006, &(0x7f0000000300)=""/210, 0xd2, 0x2, 0x1}) io_uring_enter(r4, 0x4be7, 0x4c3, 0x43, 0x0, 0x0) 12.04062ms ago: executing program 8 (id=7701): socket$kcm(0x2, 0x3, 0x84) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x6a, &(0x7f0000000200)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "1fa3883e21cd9fe5caae18544a9131d14c91cf0d35507989", "6e447a58f2e6a0893330bdb477ae5aa6740446707740eb6dcb6c5545363eff42"}}}}}}, 0x0) 0s ago: executing program 9 (id=7702): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x5, 0xe, 0x0, &(0x7f0000000000)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x2a1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x400, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x0, 0x6}, 0x200, 0x10000, 0x1, 0x6, 0x0, 0x20005, 0xa, 0x0, 0x8001, 0x0, 0x2000000a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) kernel console output (not intermixed with test programs): ted: [W]=WARN [ 406.439193][ T5804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 406.439208][ T5804] Call Trace: [ 406.439214][ T5804] [ 406.439222][ T5804] __dump_stack+0x1d/0x30 [ 406.439247][ T5804] dump_stack_lvl+0xe8/0x140 [ 406.439311][ T5804] dump_stack+0x15/0x1b [ 406.439330][ T5804] should_fail_ex+0x265/0x280 [ 406.439352][ T5804] should_failslab+0x8c/0xb0 [ 406.439404][ T5804] __kvmalloc_node_noprof+0x12e/0x670 [ 406.439506][ T5804] ? traverse+0xa2/0x3a0 [ 406.439530][ T5804] traverse+0xa2/0x3a0 [ 406.439548][ T5804] ? terminate_walk+0x27f/0x2a0 [ 406.439589][ T5804] seq_read_iter+0x85f/0x950 [ 406.439610][ T5804] ? _parse_integer_limit+0x170/0x190 [ 406.439676][ T5804] seq_read+0x270/0x2b0 [ 406.439701][ T5804] ? __pfx_seq_read+0x10/0x10 [ 406.439720][ T5804] proc_reg_read+0x128/0x1c0 [ 406.439750][ T5804] ? __pfx_proc_reg_read+0x10/0x10 [ 406.439875][ T5804] vfs_readv+0x3fb/0x690 [ 406.439919][ T5804] __x64_sys_preadv+0xfd/0x1c0 [ 406.439947][ T5804] x64_sys_call+0x282e/0x3000 [ 406.439968][ T5804] do_syscall_64+0xd2/0x200 [ 406.440052][ T5804] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 406.440084][ T5804] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 406.440122][ T5804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.440213][ T5804] RIP: 0033:0x7fac9f2cf6c9 [ 406.440229][ T5804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 406.440250][ T5804] RSP: 002b:00007fac9dd37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 406.440271][ T5804] RAX: ffffffffffffffda RBX: 00007fac9f525fa0 RCX: 00007fac9f2cf6c9 [ 406.440285][ T5804] RDX: 0000000000000001 RSI: 0000200000000400 RDI: 0000000000000003 [ 406.440340][ T5804] RBP: 00007fac9dd37090 R08: 00000000fffff25a R09: 0000000000000000 [ 406.440433][ T5804] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 406.440446][ T5804] R13: 00007fac9f526038 R14: 00007fac9f525fa0 R15: 00007ffc428f7e48 [ 406.440467][ T5804] [ 406.825896][T20667] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.888893][T20667] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.952021][T20667] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.994319][ T5853] lo speed is unknown, defaulting to 1000 [ 407.030456][T20667] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.069480][ T5853] lo speed is unknown, defaulting to 1000 [ 407.083103][ T5838] lo speed is unknown, defaulting to 1000 [ 407.130340][ T5873] IPv6: NLM_F_CREATE should be specified when creating new route [ 407.173324][ T5883] 8021q: adding VLAN 0 to HW filter on device bond1 [ 407.192333][ T5883] __nla_validate_parse: 26 callbacks suppressed [ 407.192351][ T5883] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6941'. [ 407.218854][ T5853] lo speed is unknown, defaulting to 1000 [ 407.226432][T20667] bridge_slave_1: left allmulticast mode [ 407.232145][T20667] bridge_slave_1: left promiscuous mode [ 407.237896][T20667] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.252306][T20667] bridge_slave_0: left promiscuous mode [ 407.258043][T20667] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.267224][ T5929] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6942'. [ 407.277156][ T5929] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6942'. [ 407.316116][ T5933] validate_nla: 4 callbacks suppressed [ 407.316132][ T5933] netlink: 'syz.1.6944': attribute type 4 has an invalid length. [ 407.329454][ T5933] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6944'. [ 407.496323][T20667] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 407.505857][T20667] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 407.515000][T20667] .` (unregistering): Released all slaves [ 407.522893][T20667] bond1 (unregistering): Released all slaves [ 407.531626][T20667] bond2 (unregistering): Released all slaves [ 407.540164][T20667] bond3 (unregistering): Released all slaves [ 407.548232][ T5838] lo speed is unknown, defaulting to 1000 [ 407.555777][ T5883] bond1 (unregistering): Released all slaves [ 407.616194][T20667] tipc: Left network mode [ 407.628958][ T5838] lo speed is unknown, defaulting to 1000 [ 407.724136][ T6004] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6952'. [ 407.745759][ T6005] netlink: 'syz.9.6951': attribute type 1 has an invalid length. [ 407.789444][ T6005] 8021q: adding VLAN 0 to HW filter on device bond1 [ 407.802169][ T6056] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6951'. [ 407.829647][ T6056] bond1 (unregistering): Released all slaves [ 407.910742][ T6163] netlink: 'syz.9.6956': attribute type 4 has an invalid length. [ 407.918536][ T6163] netlink: 152 bytes leftover after parsing attributes in process `syz.9.6956'. [ 407.932354][T20667] hsr_slave_0: left promiscuous mode [ 407.939090][T20667] hsr_slave_1: left promiscuous mode [ 407.945112][T20667] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 407.952542][T20667] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 407.959962][T20667] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 407.967480][T20667] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 407.978229][T20667] veth0_macvtap: left promiscuous mode [ 407.983746][T20667] veth1_vlan: left promiscuous mode [ 407.989367][T20667] veth0_vlan: left promiscuous mode [ 408.034041][ T6181] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6958'. [ 408.067457][T20667] team0 (unregistering): Port device team_slave_1 removed [ 408.077254][T20667] team0 (unregistering): Port device team_slave_0 removed [ 408.104203][ T6182] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6182 comm=syz.8.6958 [ 408.125521][ T6163] .`: renamed from bond0 (while UP) [ 408.132721][ T6181] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 408.140502][ T6181] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 408.159883][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 408.212775][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.219950][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.227692][ T5838] bridge_slave_0: entered allmulticast mode [ 408.234482][ T5838] bridge_slave_0: entered promiscuous mode [ 408.241536][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.248660][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.255951][ T5838] bridge_slave_1: entered allmulticast mode [ 408.262468][ T5838] bridge_slave_1: entered promiscuous mode [ 408.271641][ T6250] can0: slcan on ttyS3. [ 408.297626][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.308624][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.334674][ T5838] team0: Port device team_slave_0 added [ 408.341784][ T5838] team0: Port device team_slave_1 added [ 408.372010][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.379039][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.405029][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.415896][ T6250] can0 (unregistered): slcan off ttyS3. [ 408.423143][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.430201][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.456192][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.508504][ T5838] hsr_slave_0: entered promiscuous mode [ 408.521317][ T5838] hsr_slave_1: entered promiscuous mode [ 408.521724][ T6369] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6964'. [ 408.527338][ T5838] debugfs: 'hsr0' already exists in 'hsr' [ 408.541652][ T5838] Cannot create hsr debugfs directory [ 408.664756][ T6421] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 408.724846][ T6444] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6969'. [ 408.806836][ T6454] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 408.878839][ T6460] syzkaller0: entered allmulticast mode [ 408.889399][ T6460] syzkaller0 (unregistering): left allmulticast mode [ 409.051743][ T5838] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 409.068898][ T5838] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 409.075873][ T6487] loop8: detected capacity change from 0 to 8192 [ 409.092323][ T5838] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 409.110944][ T5838] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 409.148440][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.155537][ T5838] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.162872][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.169943][ T5838] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.177868][ T6528] FAULT_INJECTION: forcing a failure. [ 409.177868][ T6528] name failslab, interval 1, probability 0, space 0, times 0 [ 409.190560][ T6528] CPU: 1 UID: 0 PID: 6528 Comm: syz.8.6985 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 409.190595][ T6528] Tainted: [W]=WARN [ 409.190602][ T6528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 409.190615][ T6528] Call Trace: [ 409.190621][ T6528] [ 409.190628][ T6528] __dump_stack+0x1d/0x30 [ 409.190651][ T6528] dump_stack_lvl+0xe8/0x140 [ 409.190712][ T6528] dump_stack+0x15/0x1b [ 409.190729][ T6528] should_fail_ex+0x265/0x280 [ 409.190750][ T6528] should_failslab+0x8c/0xb0 [ 409.190779][ T6528] __kvmalloc_node_noprof+0x12e/0x670 [ 409.190876][ T6528] ? vmemdup_user+0x2b/0xd0 [ 409.190902][ T6528] ? should_fail_usercopy+0x1a/0x20 [ 409.190998][ T6528] vmemdup_user+0x2b/0xd0 [ 409.191087][ T6528] path_setxattrat+0x1b6/0x310 [ 409.191133][ T6528] __x64_sys_lsetxattr+0x71/0x90 [ 409.191162][ T6528] x64_sys_call+0x287b/0x3000 [ 409.191183][ T6528] do_syscall_64+0xd2/0x200 [ 409.191204][ T6528] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 409.191327][ T6528] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 409.191423][ T6528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.191442][ T6528] RIP: 0033:0x7fcf6ee1f6c9 [ 409.191456][ T6528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 409.191557][ T6528] RSP: 002b:00007fcf6d887038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 409.191574][ T6528] RAX: ffffffffffffffda RBX: 00007fcf6f075fa0 RCX: 00007fcf6ee1f6c9 [ 409.191588][ T6528] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000200000000900 [ 409.191599][ T6528] RBP: 00007fcf6d887090 R08: 0000000000000000 R09: 0000000000000000 [ 409.191648][ T6528] R10: 0000000000000025 R11: 0000000000000246 R12: 0000000000000001 [ 409.191733][ T6528] R13: 00007fcf6f076038 R14: 00007fcf6f075fa0 R15: 00007ffde61472c8 [ 409.191752][ T6528] [ 409.421683][T20706] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.424443][ T6534] 9pnet: Could not find request transport: fd [ 410.070274][ T6630] __dump_stack+0x1d/0x30 [ 410.070302][ T6630] dump_stack_lvl+0xe8/0x140 [ 410.070327][ T6630] dump_stack+0x15/0x1b [ 410.070350][ T6630] should_fail_ex+0x265/0x280 [ 410.070375][ T6630] should_fail+0xb/0x20 [ 410.070466][ T6630] should_fail_usercopy+0x1a/0x20 [ 410.070493][ T6630] _copy_from_user+0x1c/0xb0 [ 410.070524][ T6630] sg_write+0x1ed/0x750 [ 410.070577][ T6630] vfs_writev+0x406/0x8b0 [ 410.070660][ T6630] ? __pfx_sg_write+0x10/0x10 [ 410.070709][ T6630] do_writev+0xe7/0x210 [ 410.070751][ T6630] __x64_sys_writev+0x45/0x50 [ 410.070842][ T6630] x64_sys_call+0x1e9a/0x3000 [ 410.070869][ T6630] do_syscall_64+0xd2/0x200 [ 410.070895][ T6630] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 410.070977][ T6630] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 410.071019][ T6630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.071046][ T6630] RIP: 0033:0x7fa63210f6c9 [ 410.071064][ T6630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 410.071153][ T6630] RSP: 002b:00007fa630b6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 410.071176][ T6630] RAX: ffffffffffffffda RBX: 00007fa632365fa0 RCX: 00007fa63210f6c9 [ 410.071192][ T6630] RDX: 0000000000000002 RSI: 0000200000000400 RDI: 0000000000000003 [ 410.071207][ T6630] RBP: 00007fa630b6f090 R08: 0000000000000000 R09: 0000000000000000 [ 410.071249][ T6630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.071264][ T6630] R13: 00007fa632366038 R14: 00007fa632365fa0 R15: 00007fff09aea458 [ 410.071319][ T6630] [ 410.268510][T20706] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.283563][T20706] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.293041][T20706] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.295775][ T29] kauditd_printk_skb: 303 callbacks suppressed [ 410.295793][ T29] audit: type=1326 audit(397.647:22388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6638 comm="syz.9.7012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871ce3f6c9 code=0x7ffc0000 [ 410.387782][ T29] audit: type=1326 audit(397.675:22389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6638 comm="syz.9.7012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f871ce3f6c9 code=0x7ffc0000 [ 410.410716][ T29] audit: type=1326 audit(397.675:22390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6638 comm="syz.9.7012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871ce3f6c9 code=0x7ffc0000 [ 410.433688][ T29] audit: type=1326 audit(397.675:22391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6638 comm="syz.9.7012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871ce3f6c9 code=0x7ffc0000 [ 410.456573][ T29] audit: type=1326 audit(397.675:22392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6638 comm="syz.9.7012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f871ce3f6c9 code=0x7ffc0000 [ 410.480210][ T29] audit: type=1326 audit(397.675:22393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6638 comm="syz.9.7012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871ce3f6c9 code=0x7ffc0000 [ 410.503248][ T29] audit: type=1326 audit(397.675:22394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6638 comm="syz.9.7012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871ce3f6c9 code=0x7ffc0000 [ 410.526214][ T29] audit: type=1326 audit(397.675:22395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6638 comm="syz.9.7012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f871ce3f6c9 code=0x7ffc0000 [ 410.549134][ T29] audit: type=1326 audit(397.675:22396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6638 comm="syz.9.7012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871ce3f6c9 code=0x7ffc0000 [ 410.571998][ T29] audit: type=1326 audit(397.675:22397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6638 comm="syz.9.7012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871ce3f6c9 code=0x7ffc0000 [ 410.691774][ T6671] lo speed is unknown, defaulting to 1000 [ 410.782292][ T6671] lo speed is unknown, defaulting to 1000 [ 410.836930][ T6671] lo speed is unknown, defaulting to 1000 [ 411.425044][ T6726] syzkaller0: entered allmulticast mode [ 411.437062][ T6726] syzkaller0: entered promiscuous mode [ 411.454749][ T6726] tipc: Started in network mode [ 411.459684][ T6726] tipc: Node identity ac14140f, cluster identity 4711 [ 411.481259][ T6726] tipc: New replicast peer: 255.255.255.255 [ 411.487538][ T6726] tipc: Enabled bearer , priority 10 [ 411.565421][ T6731] syzkaller0 (unregistering): left allmulticast mode [ 411.572199][ T6731] syzkaller0 (unregistering): left promiscuous mode [ 412.095520][ T6769] FAULT_INJECTION: forcing a failure. [ 412.095520][ T6769] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 412.108664][ T6769] CPU: 1 UID: 0 PID: 6769 Comm: syz.0.7045 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 412.108697][ T6769] Tainted: [W]=WARN [ 412.108704][ T6769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 412.108717][ T6769] Call Trace: [ 412.108724][ T6769] [ 412.108733][ T6769] __dump_stack+0x1d/0x30 [ 412.108777][ T6769] dump_stack_lvl+0xe8/0x140 [ 412.108804][ T6769] dump_stack+0x15/0x1b [ 412.108826][ T6769] should_fail_ex+0x265/0x280 [ 412.108931][ T6769] should_fail+0xb/0x20 [ 412.108951][ T6769] should_fail_usercopy+0x1a/0x20 [ 412.108992][ T6769] _copy_from_user+0x1c/0xb0 [ 412.109060][ T6769] ___sys_sendmsg+0xc1/0x1d0 [ 412.109101][ T6769] __x64_sys_sendmsg+0xd4/0x160 [ 412.109131][ T6769] x64_sys_call+0x191e/0x3000 [ 412.109174][ T6769] do_syscall_64+0xd2/0x200 [ 412.109212][ T6769] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 412.109250][ T6769] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 412.109384][ T6769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.109443][ T6769] RIP: 0033:0x7fc4448cf6c9 [ 412.109455][ T6769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 412.109472][ T6769] RSP: 002b:00007fc443337038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 412.109493][ T6769] RAX: ffffffffffffffda RBX: 00007fc444b25fa0 RCX: 00007fc4448cf6c9 [ 412.109559][ T6769] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000006 [ 412.109575][ T6769] RBP: 00007fc443337090 R08: 0000000000000000 R09: 0000000000000000 [ 412.109590][ T6769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 412.109605][ T6769] R13: 00007fc444b26038 R14: 00007fc444b25fa0 R15: 00007fff61cc8388 [ 412.109627][ T6769] [ 412.332042][ T6773] loop1: detected capacity change from 0 to 1024 [ 412.568393][ T6817] __nla_validate_parse: 17 callbacks suppressed [ 412.568424][ T6817] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7056'. [ 412.583882][ T7985] tipc: Node number set to 2886997007 [ 412.691975][ T6823] loop8: detected capacity change from 0 to 8192 [ 412.706587][ T6835] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7064'. [ 412.744430][ T6823] loop8: p2 p3 p4 [ 412.750293][ T6823] loop8: p2 start 164919041 is beyond EOD, truncated [ 412.757166][ T6823] loop8: p3 size 66846464 extends beyond EOD, truncated [ 412.757296][ T6838] loop1: detected capacity change from 0 to 4096 [ 412.765414][ T6823] loop8: p4 size 37048832 extends beyond EOD, truncated [ 412.773454][ T6838] EXT4-fs: inline encryption not supported [ 412.784459][ T6838] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 412.841870][ T6853] vhci_hcd: invalid port number 255 [ 412.981295][ T6869] netlink: 'syz.6.7071': attribute type 4 has an invalid length. [ 412.989098][ T6869] netlink: 152 bytes leftover after parsing attributes in process `syz.6.7071'. [ 413.020134][ T6869] .`: renamed from bond0 (while UP) [ 413.048251][ T6874] geneve2: entered promiscuous mode [ 413.053579][ T6874] geneve2: entered allmulticast mode [ 413.103853][ T6891] netlink: 96 bytes leftover after parsing attributes in process `syz.8.7076'. [ 413.153748][ T6896] netlink: 'syz.1.7078': attribute type 1 has an invalid length. [ 413.153762][ T6896] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7078'. [ 413.159661][ T6896] loop1: detected capacity change from 0 to 1024 [ 413.160767][ T6896] EXT4-fs: Ignoring removed nomblk_io_submit option [ 413.160788][ T6896] EXT4-fs: Ignoring removed orlov option [ 413.160906][ T6896] ext2: Bad value for 'mb_optimize_scan' [ 413.190098][ T6906] netlink: 20 bytes leftover after parsing attributes in process `syz.8.7080'. [ 413.225111][ T6907] veth1_to_bridge: entered allmulticast mode [ 413.241811][T20648] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.412007][ T6934] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7090'. [ 413.535809][ T6971] SELinux: failed to load policy [ 413.561973][ T6973] loop8: detected capacity change from 0 to 1024 [ 413.582533][ T6973] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 413.599375][ T6973] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.7095: bg 0: block 112: padding at end of block bitmap is not set [ 413.615425][ T6973] EXT4-fs error (device loop8): ext4_free_blocks:6706: comm syz.8.7095: Freeing blocks not in datazone - block = 0, count = 16 [ 413.629778][ T6940] loop1: detected capacity change from 0 to 8192 [ 413.654315][T20706] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 413.666572][T20706] EXT4-fs (loop8): This should not happen!! Data will be lost [ 413.666572][T20706] [ 413.676223][T20706] EXT4-fs (loop8): Total free blocks count 0 [ 413.682292][T20706] EXT4-fs (loop8): Free/Dirty block details [ 413.688234][T20706] EXT4-fs (loop8): free_blocks=16 [ 413.693254][T20706] EXT4-fs (loop8): dirty_blocks=16 [ 413.698381][T20706] EXT4-fs (loop8): Block reservation details [ 413.704486][T20706] EXT4-fs (loop8): i_reserved_data_blocks=1 [ 413.717357][T25356] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 413.738933][ T6940] loop1: p2 p3 p4 [ 413.742776][ T6940] loop1: p2 start 164919041 is beyond EOD, truncated [ 413.744621][ T6991] loop8: detected capacity change from 0 to 512 [ 413.749546][ T6940] loop1: p3 size 66846464 extends beyond EOD, truncated [ 413.770467][ T6940] loop1: p4 size 37048832 extends beyond EOD, truncated [ 413.773880][ T6991] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 413.882992][ T7014] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7102'. [ 413.894637][ T7014] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.901841][ T7014] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.089370][ T7020] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7104'. [ 414.098473][ T7020] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7104'. [ 414.229765][ T7029] Falling back ldisc for ttyS3. [ 414.235830][T20648] Bluetooth: hci0: Frame reassembly failed (-84) [ 414.330685][ T7985] hid-generic 0000:3000000:0000.0035: unknown main item tag 0x4 [ 414.338423][ T7985] hid-generic 0000:3000000:0000.0035: unknown main item tag 0x2 [ 414.346189][ T7985] hid-generic 0000:3000000:0000.0035: unknown main item tag 0x3 [ 414.354312][ T7985] hid-generic 0000:3000000:0000.0035: hidraw0: HID v0.00 Device [sy] on syz0 [ 414.788353][ T7985] hid-generic 0000:3000000:0000.0036: unknown main item tag 0x4 [ 414.796165][ T7985] hid-generic 0000:3000000:0000.0036: unknown main item tag 0x2 [ 414.804024][ T7985] hid-generic 0000:3000000:0000.0036: unknown main item tag 0x3 [ 414.813405][ T7985] hid-generic 0000:3000000:0000.0036: hidraw0: HID v0.00 Device [sy] on syz0 [ 415.927533][ T29] kauditd_printk_skb: 415 callbacks suppressed [ 415.927545][ T29] audit: type=1326 audit(402.904:22813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7096 comm="syz.9.7120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871ce3f6c9 code=0x7ffc0000 [ 415.964325][ T29] audit: type=1326 audit(402.932:22814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7096 comm="syz.9.7120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871ce3f6c9 code=0x7ffc0000 [ 415.987352][ T29] audit: type=1326 audit(402.932:22815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7096 comm="syz.9.7120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7f871ce3f6c9 code=0x7ffc0000 [ 416.010325][ T29] audit: type=1326 audit(402.932:22816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7096 comm="syz.9.7120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871ce3f6c9 code=0x7ffc0000 [ 416.033251][ T29] audit: type=1326 audit(402.932:22817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7096 comm="syz.9.7120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871ce3f6c9 code=0x7ffc0000 [ 416.056123][ T29] audit: type=1326 audit(402.932:22818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7096 comm="syz.9.7120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f871ce3f6c9 code=0x7ffc0000 [ 416.078997][ T29] audit: type=1326 audit(402.932:22819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7096 comm="syz.9.7120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871ce3f6c9 code=0x7ffc0000 [ 416.093539][ T7101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.101920][ T29] audit: type=1326 audit(402.932:22820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7096 comm="syz.9.7120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871ce3f6c9 code=0x7ffc0000 [ 416.101959][ T29] audit: type=1326 audit(402.932:22821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7096 comm="syz.9.7120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f871ce415e7 code=0x7ffc0000 [ 416.121625][ T7101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.133185][ T29] audit: type=1326 audit(402.941:22822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7096 comm="syz.9.7120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f871ce4155c code=0x7ffc0000 [ 416.251433][ T7097] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.263842][ T7100] tipc: MTU too low for tipc bearer [ 416.358945][ T7097] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.453473][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 416.453573][ T3520] Bluetooth: hci0: command 0x1003 tx timeout [ 416.465987][ T7097] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.639748][ T7097] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.666328][ T7138] loop8: detected capacity change from 0 to 1024 [ 416.714002][ T7138] ext4: Unknown parameter 'uid<00000000000000000000' [ 416.789197][T20715] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.834566][T20715] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.855150][T20715] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.867039][T20715] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.872590][ T7161] loop8: detected capacity change from 0 to 512 [ 416.882588][ T7161] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 416.908136][ T7161] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 416.955143][T25356] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.079547][ T7183] netlink: 'syz.8.7136': attribute type 4 has an invalid length. [ 417.109642][ T7185] loop8: detected capacity change from 0 to 1024 [ 417.116836][ T7185] EXT4-fs: Ignoring removed orlov option [ 417.139167][ T7185] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 417.196742][T25356] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.621473][ T7245] netlink: 'syz.8.7147': attribute type 4 has an invalid length. [ 417.743917][ T7248] loop8: detected capacity change from 0 to 1024 [ 417.790327][ T7248] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 417.880603][ T7249] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4193: comm syz.8.7148: Allocating blocks 449-513 which overlap fs metadata [ 417.912100][ T7248] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4193: comm syz.8.7148: Allocating blocks 449-513 which overlap fs metadata [ 417.928594][ T7247] EXT4-fs (loop8): pa ffff8881004a7c40: logic 48, phys. 177, len 21 [ 417.936607][ T7247] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 417.967470][T25356] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.174643][ T7293] netlink: 'syz.8.7158': attribute type 4 has an invalid length. [ 418.182425][ T7293] __nla_validate_parse: 6 callbacks suppressed [ 418.182439][ T7293] netlink: 152 bytes leftover after parsing attributes in process `syz.8.7158'. [ 418.274015][ T7303] FAULT_INJECTION: forcing a failure. [ 418.274015][ T7303] name failslab, interval 1, probability 0, space 0, times 0 [ 418.286744][ T7303] CPU: 0 UID: 0 PID: 7303 Comm: syz.6.7163 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 418.286846][ T7303] Tainted: [W]=WARN [ 418.286853][ T7303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 418.286866][ T7303] Call Trace: [ 418.286872][ T7303] [ 418.286881][ T7303] __dump_stack+0x1d/0x30 [ 418.286908][ T7303] dump_stack_lvl+0xe8/0x140 [ 418.286932][ T7303] dump_stack+0x15/0x1b [ 418.287054][ T7303] should_fail_ex+0x265/0x280 [ 418.287072][ T7303] should_failslab+0x8c/0xb0 [ 418.287164][ T7303] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 418.287232][ T7303] ? __alloc_skb+0x101/0x320 [ 418.287258][ T7303] __alloc_skb+0x101/0x320 [ 418.287305][ T7303] netlink_alloc_large_skb+0xbf/0xf0 [ 418.287341][ T7303] netlink_sendmsg+0x3cf/0x6b0 [ 418.287363][ T7303] ? __pfx_netlink_sendmsg+0x10/0x10 [ 418.287383][ T7303] __sock_sendmsg+0x145/0x180 [ 418.287505][ T7303] ____sys_sendmsg+0x31e/0x4e0 [ 418.287537][ T7303] ___sys_sendmsg+0x17b/0x1d0 [ 418.287565][ T7303] __x64_sys_sendmsg+0xd4/0x160 [ 418.287587][ T7303] x64_sys_call+0x191e/0x3000 [ 418.287619][ T7303] do_syscall_64+0xd2/0x200 [ 418.287692][ T7303] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 418.287717][ T7303] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 418.287748][ T7303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.287823][ T7303] RIP: 0033:0x7f86f47cf6c9 [ 418.287836][ T7303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 418.287854][ T7303] RSP: 002b:00007f86f3237038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 418.287871][ T7303] RAX: ffffffffffffffda RBX: 00007f86f4a25fa0 RCX: 00007f86f47cf6c9 [ 418.287882][ T7303] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 418.287894][ T7303] RBP: 00007f86f3237090 R08: 0000000000000000 R09: 0000000000000000 [ 418.287909][ T7303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.287920][ T7303] R13: 00007f86f4a26038 R14: 00007f86f4a25fa0 R15: 00007ffeb4e140f8 [ 418.287999][ T7303] [ 418.549766][ T7310] netlink: 'syz.0.7166': attribute type 3 has an invalid length. [ 418.559702][ T7311] netlink: 'syz.6.7165': attribute type 1 has an invalid length. [ 418.610931][ T7315] netlink: 'syz.6.7168': attribute type 1 has an invalid length. [ 418.621027][ T7315] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7168'. [ 418.762400][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 418.763219][ T3520] Bluetooth: hci0: command 0x1003 tx timeout [ 418.785502][ T7346] netlink: 'syz.0.7170': attribute type 4 has an invalid length. [ 418.793288][ T7346] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7170'. [ 418.933176][ T7354] xt_CT: You must specify a L4 protocol and not use inversions on it [ 419.251960][ T7383] netlink: 'syz.0.7181': attribute type 4 has an invalid length. [ 419.259870][ T7383] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7181'. [ 419.284078][ T7386] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53212 sclass=netlink_route_socket pid=7386 comm=syz.0.7182 [ 419.424598][ T7399] FAULT_INJECTION: forcing a failure. [ 419.424598][ T7399] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 419.437898][ T7399] CPU: 1 UID: 0 PID: 7399 Comm: syz.1.7187 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 419.437931][ T7399] Tainted: [W]=WARN [ 419.437940][ T7399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 419.438035][ T7399] Call Trace: [ 419.438041][ T7399] [ 419.438051][ T7399] __dump_stack+0x1d/0x30 [ 419.438080][ T7399] dump_stack_lvl+0xe8/0x140 [ 419.438108][ T7399] dump_stack+0x15/0x1b [ 419.438132][ T7399] should_fail_ex+0x265/0x280 [ 419.438159][ T7399] should_fail+0xb/0x20 [ 419.438258][ T7399] should_fail_usercopy+0x1a/0x20 [ 419.438287][ T7399] _copy_from_user+0x1c/0xb0 [ 419.438320][ T7399] ucma_set_option+0x54/0x7f0 [ 419.438436][ T7399] ? _parse_integer+0x27/0x40 [ 419.438479][ T7399] ? kstrtoull+0x111/0x140 [ 419.438521][ T7399] ? kstrtouint+0x76/0xc0 [ 419.438660][ T7399] ? kstrtouint_from_user+0x9f/0xf0 [ 419.438679][ T7399] ? should_fail_ex+0xdb/0x280 [ 419.438700][ T7399] ucma_write+0x1b3/0x250 [ 419.438725][ T7399] ? __pfx_ucma_write+0x10/0x10 [ 419.438770][ T7399] vfs_write+0x269/0x960 [ 419.438805][ T7399] ? __rcu_read_unlock+0x4f/0x70 [ 419.438842][ T7399] ? __fget_files+0x184/0x1c0 [ 419.438885][ T7399] ksys_write+0xda/0x1a0 [ 419.438986][ T7399] __x64_sys_write+0x40/0x50 [ 419.439012][ T7399] x64_sys_call+0x2802/0x3000 [ 419.439074][ T7399] do_syscall_64+0xd2/0x200 [ 419.439102][ T7399] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 419.439169][ T7399] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 419.439205][ T7399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.439246][ T7399] RIP: 0033:0x7fa63210f6c9 [ 419.439340][ T7399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 419.439362][ T7399] RSP: 002b:00007fa630b6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 419.439387][ T7399] RAX: ffffffffffffffda RBX: 00007fa632365fa0 RCX: 00007fa63210f6c9 [ 419.439404][ T7399] RDX: 0000000000000020 RSI: 00002000000001c0 RDI: 0000000000000003 [ 419.439420][ T7399] RBP: 00007fa630b6f090 R08: 0000000000000000 R09: 0000000000000000 [ 419.439437][ T7399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 419.439450][ T7399] R13: 00007fa632366038 R14: 00007fa632365fa0 R15: 00007fff09aea458 [ 419.439470][ T7399] [ 419.710699][ T7407] bridge_slave_0: left allmulticast mode [ 419.716562][ T7407] bridge_slave_0: left promiscuous mode [ 419.722306][ T7407] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.731511][ T7407] bridge_slave_1: left allmulticast mode [ 419.737326][ T7407] bridge_slave_1: left promiscuous mode [ 419.743230][ T7407] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.744321][ T7401] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7189'. [ 419.761431][ T7410] netlink: 'syz.6.7190': attribute type 10 has an invalid length. [ 419.769273][ T7410] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7190'. [ 419.780000][ T7407] .`: (slave bond_slave_0): Releasing backup interface [ 419.794243][ T7407] .`: (slave bond_slave_1): Releasing backup interface [ 419.821844][ T7407] team0: Port device team_slave_0 removed [ 419.832787][ T7407] team0: Port device team_slave_1 removed [ 419.839126][ T7407] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 419.846629][ T7407] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 419.873852][ T7407] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 419.881284][ T7407] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 419.890394][ T7407] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 419.924494][ T7415] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 419.933388][ T7415] SELinux: failed to load policy [ 419.958875][ T7421] FAULT_INJECTION: forcing a failure. [ 419.958875][ T7421] name failslab, interval 1, probability 0, space 0, times 0 [ 419.971897][ T7421] CPU: 1 UID: 0 PID: 7421 Comm: syz.6.7196 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 419.971925][ T7421] Tainted: [W]=WARN [ 419.971931][ T7421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 419.971991][ T7421] Call Trace: [ 419.971997][ T7421] [ 419.972050][ T7421] __dump_stack+0x1d/0x30 [ 419.972072][ T7421] dump_stack_lvl+0xe8/0x140 [ 419.972093][ T7421] dump_stack+0x15/0x1b [ 419.972122][ T7421] should_fail_ex+0x265/0x280 [ 419.972141][ T7421] should_failslab+0x8c/0xb0 [ 419.972180][ T7421] __kmalloc_cache_node_noprof+0x54/0x4a0 [ 419.972211][ T7421] ? __get_vm_area_node+0x106/0x1d0 [ 419.972243][ T7421] __get_vm_area_node+0x106/0x1d0 [ 419.972315][ T7421] __vmalloc_node_range_noprof+0x28c/0xed0 [ 419.972385][ T7421] ? n_tty_open+0x1b/0xf0 [ 419.972434][ T7421] ? klist_dec_and_del+0xba/0x270 [ 419.972461][ T7421] ? klist_next+0x1c2/0x220 [ 419.972485][ T7421] ? class_find_device+0x24d/0x2a0 [ 419.972511][ T7421] ? __pfx_device_match_devt+0x10/0x10 [ 419.972587][ T7421] ? n_tty_open+0x1b/0xf0 [ 419.972614][ T7421] vzalloc_noprof+0x82/0xc0 [ 419.972644][ T7421] ? n_tty_open+0x1b/0xf0 [ 419.972671][ T7421] n_tty_open+0x1b/0xf0 [ 419.972749][ T7421] tty_ldisc_setup+0x83/0x220 [ 419.972788][ T7421] tty_init_dev+0x183/0x330 [ 419.972836][ T7421] ptmx_open+0xda/0x240 [ 419.972866][ T7421] chrdev_open+0x2eb/0x3a0 [ 419.972893][ T7421] do_dentry_open+0x649/0xa20 [ 419.972910][ T7421] ? __pfx_chrdev_open+0x10/0x10 [ 419.972972][ T7421] vfs_open+0x37/0x1e0 [ 419.973011][ T7421] path_openat+0x1c5e/0x2170 [ 419.973052][ T7421] ? path_openat+0x1bf8/0x2170 [ 419.973072][ T7421] ? _parse_integer_limit+0x170/0x190 [ 419.973109][ T7421] do_filp_open+0x109/0x230 [ 419.973172][ T7421] file_open_name+0xfa/0x120 [ 419.973192][ T7421] __se_sys_acct+0xeb/0x530 [ 419.973211][ T7421] __x64_sys_acct+0x1f/0x30 [ 419.973227][ T7421] x64_sys_call+0x2f3a/0x3000 [ 419.973328][ T7421] do_syscall_64+0xd2/0x200 [ 419.973424][ T7421] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 419.973451][ T7421] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 419.973483][ T7421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.973578][ T7421] RIP: 0033:0x7f86f47cf6c9 [ 419.973592][ T7421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 419.973609][ T7421] RSP: 002b:00007f86f3237038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 419.973627][ T7421] RAX: ffffffffffffffda RBX: 00007f86f4a25fa0 RCX: 00007f86f47cf6c9 [ 419.973638][ T7421] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 419.973650][ T7421] RBP: 00007f86f3237090 R08: 0000000000000000 R09: 0000000000000000 [ 419.973661][ T7421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 419.973702][ T7421] R13: 00007f86f4a26038 R14: 00007f86f4a25fa0 R15: 00007ffeb4e140f8 [ 419.973720][ T7421] [ 419.973866][ T7421] syz.6.7196: vmalloc error: size 8904, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 420.273289][ T7421] CPU: 1 UID: 0 PID: 7421 Comm: syz.6.7196 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 420.273317][ T7421] Tainted: [W]=WARN [ 420.273324][ T7421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 420.273337][ T7421] Call Trace: [ 420.273348][ T7421] [ 420.273358][ T7421] __dump_stack+0x1d/0x30 [ 420.273382][ T7421] dump_stack_lvl+0xe8/0x140 [ 420.273450][ T7421] dump_stack+0x15/0x1b [ 420.273474][ T7421] warn_alloc+0x12b/0x1a0 [ 420.273532][ T7421] __vmalloc_node_range_noprof+0x2b1/0xed0 [ 420.273565][ T7421] ? klist_dec_and_del+0xba/0x270 [ 420.273658][ T7421] ? klist_next+0x1c2/0x220 [ 420.273683][ T7421] ? class_find_device+0x24d/0x2a0 [ 420.273711][ T7421] ? __pfx_device_match_devt+0x10/0x10 [ 420.273735][ T7421] ? n_tty_open+0x1b/0xf0 [ 420.273761][ T7421] vzalloc_noprof+0x82/0xc0 [ 420.273789][ T7421] ? n_tty_open+0x1b/0xf0 [ 420.273832][ T7421] n_tty_open+0x1b/0xf0 [ 420.273868][ T7421] tty_ldisc_setup+0x83/0x220 [ 420.273899][ T7421] tty_init_dev+0x183/0x330 [ 420.273964][ T7421] ptmx_open+0xda/0x240 [ 420.273991][ T7421] chrdev_open+0x2eb/0x3a0 [ 420.274017][ T7421] do_dentry_open+0x649/0xa20 [ 420.274122][ T7421] ? __pfx_chrdev_open+0x10/0x10 [ 420.274153][ T7421] vfs_open+0x37/0x1e0 [ 420.274240][ T7421] path_openat+0x1c5e/0x2170 [ 420.274260][ T7421] ? path_openat+0x1bf8/0x2170 [ 420.274278][ T7421] ? _parse_integer_limit+0x170/0x190 [ 420.274313][ T7421] do_filp_open+0x109/0x230 [ 420.274344][ T7421] file_open_name+0xfa/0x120 [ 420.274437][ T7421] __se_sys_acct+0xeb/0x530 [ 420.274490][ T7421] __x64_sys_acct+0x1f/0x30 [ 420.274503][ T7421] x64_sys_call+0x2f3a/0x3000 [ 420.274521][ T7421] do_syscall_64+0xd2/0x200 [ 420.274596][ T7421] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 420.274624][ T7421] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 420.274700][ T7421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.274717][ T7421] RIP: 0033:0x7f86f47cf6c9 [ 420.274729][ T7421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 420.274743][ T7421] RSP: 002b:00007f86f3237038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 420.274836][ T7421] RAX: ffffffffffffffda RBX: 00007f86f4a25fa0 RCX: 00007f86f47cf6c9 [ 420.274846][ T7421] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 420.274856][ T7421] RBP: 00007f86f3237090 R08: 0000000000000000 R09: 0000000000000000 [ 420.274866][ T7421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 420.274875][ T7421] R13: 00007f86f4a26038 R14: 00007f86f4a25fa0 R15: 00007ffeb4e140f8 [ 420.274935][ T7421] [ 420.275016][ T7421] Mem-Info: [ 420.537230][ T7421] active_anon:8353 inactive_anon:10 isolated_anon:0 [ 420.537230][ T7421] active_file:14864 inactive_file:9848 isolated_file:0 [ 420.537230][ T7421] unevictable:0 dirty:298 writeback:0 [ 420.537230][ T7421] slab_reclaimable:4296 slab_unreclaimable:139538 [ 420.537230][ T7421] mapped:34701 shmem:4356 pagetables:1360 [ 420.537230][ T7421] sec_pagetables:0 bounce:0 [ 420.537230][ T7421] kernel_misc_reclaimable:0 [ 420.537230][ T7421] free:1717669 free_pcp:20424 free_cma:0 [ 420.582360][ T7421] Node 0 active_anon:33412kB inactive_anon:40kB active_file:59456kB inactive_file:39392kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:138804kB dirty:1192kB writeback:0kB shmem:17424kB kernel_stack:5584kB pagetables:5440kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 420.609879][ T7421] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 420.639681][ T7421] lowmem_reserve[]: 0 2881 7859 7859 [ 420.645021][ T7421] Node 0 DMA32 free:2946624kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950256kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3528kB free_cma:0kB [ 420.676385][ T7421] lowmem_reserve[]: 0 0 4978 4978 [ 420.681419][ T7421] Node 0 Normal free:3908692kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:33412kB inactive_anon:40kB active_file:59456kB inactive_file:39392kB unevictable:0kB writepending:1192kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:78064kB local_pcp:43824kB free_cma:0kB [ 420.714641][ T7421] lowmem_reserve[]: 0 0 0 0 [ 420.719189][ T7421] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 420.732272][ T7421] Node 0 DMA32: 2*4kB (M) 1*8kB (M) 3*16kB (M) 2*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946624kB [ 420.748464][ T7421] Node 0 Normal: 1217*4kB (UME) 1074*8kB (UME) 2388*16kB (UME) 1212*32kB (UME) 834*64kB (UME) 541*128kB (UME) 420*256kB (UME) 530*512kB (UME) 505*1024kB (UME) 85*2048kB (UME) 641*4096kB (UM) = 3908692kB [ 420.768653][ T7421] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 420.777963][ T7421] 29030 total pagecache pages [ 420.782677][ T7421] 7 pages in swap cache [ 420.786861][ T7421] Free swap = 92220kB [ 420.790915][ T7421] Total swap = 124996kB [ 420.795090][ T7421] 2097051 pages RAM [ 420.798893][ T7421] 0 pages HighMem/MovableOnly [ 420.803564][ T7421] 81087 pages reserved [ 420.807656][ T7421] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 420.918066][T20689] Bluetooth: hci0: Frame reassembly failed (-84) [ 420.936041][ T7437] netlink: 96 bytes leftover after parsing attributes in process `syz.8.7200'. [ 421.108480][ T7457] FAULT_INJECTION: forcing a failure. [ 421.108480][ T7457] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 421.121695][ T7457] CPU: 0 UID: 0 PID: 7457 Comm: syz.1.7206 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 421.121733][ T7457] Tainted: [W]=WARN [ 421.121741][ T7457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 421.121756][ T7457] Call Trace: [ 421.121765][ T7457] [ 421.121773][ T7457] __dump_stack+0x1d/0x30 [ 421.121832][ T7457] dump_stack_lvl+0xe8/0x140 [ 421.121907][ T7457] dump_stack+0x15/0x1b [ 421.121928][ T7457] should_fail_ex+0x265/0x280 [ 421.122010][ T7457] should_fail+0xb/0x20 [ 421.122028][ T7457] should_fail_usercopy+0x1a/0x20 [ 421.122052][ T7457] _copy_from_user+0x1c/0xb0 [ 421.122082][ T7457] sctp_setsockopt+0x154/0xe30 [ 421.122150][ T7457] sock_common_setsockopt+0x69/0x80 [ 421.122179][ T7457] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 421.122203][ T7457] __sys_setsockopt+0x184/0x200 [ 421.122283][ T7457] __x64_sys_setsockopt+0x64/0x80 [ 421.122364][ T7457] x64_sys_call+0x20ec/0x3000 [ 421.122406][ T7457] do_syscall_64+0xd2/0x200 [ 421.122458][ T7457] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 421.122495][ T7457] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 421.122566][ T7457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.122601][ T7457] RIP: 0033:0x7fa63210f6c9 [ 421.122621][ T7457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 421.122640][ T7457] RSP: 002b:00007fa630b6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 421.122712][ T7457] RAX: ffffffffffffffda RBX: 00007fa632365fa0 RCX: 00007fa63210f6c9 [ 421.122730][ T7457] RDX: 0000000000000084 RSI: 0000000000000084 RDI: 0000000000000003 [ 421.122746][ T7457] RBP: 00007fa630b6f090 R08: 0000000000000090 R09: 0000000000000000 [ 421.122763][ T7457] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 421.122780][ T7457] R13: 00007fa632366038 R14: 00007fa632365fa0 R15: 00007fff09aea458 [ 421.122804][ T7457] [ 421.472838][ T7474] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7212'. [ 421.532691][ T7481] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7215'. [ 421.581737][ T7483] netlink: 'syz.0.7216': attribute type 3 has an invalid length. [ 421.669310][ T7984] hid-generic 0000:3000000:0000.0037: unknown main item tag 0x4 [ 421.677053][ T7984] hid-generic 0000:3000000:0000.0037: unknown main item tag 0x2 [ 421.684903][ T7984] hid-generic 0000:3000000:0000.0037: unknown main item tag 0x3 [ 421.692938][ T7984] hid-generic 0000:3000000:0000.0037: hidraw0: HID v0.00 Device [sy] on syz0 [ 422.054456][ T7497] syzkaller1: tun_chr_ioctl cmd 1074812118 [ 422.339849][ T7515] usb usb7: usbfs: process 7515 (syz.9.7220) did not claim interface 0 before use [ 422.410282][ T7525] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7223'. [ 422.532862][ T29] kauditd_printk_skb: 562 callbacks suppressed [ 422.532875][ T29] audit: type=1326 audit(409.087:23385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7536 comm="syz.0.7228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4448cf6c9 code=0x7ffc0000 [ 422.562152][ T29] audit: type=1326 audit(409.087:23386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7536 comm="syz.0.7228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4448cf6c9 code=0x7ffc0000 [ 422.588557][ T29] audit: type=1326 audit(409.134:23387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7536 comm="syz.0.7228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc4448cf6c9 code=0x7ffc0000 [ 422.611722][ T29] audit: type=1326 audit(409.134:23388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7536 comm="syz.0.7228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4448cf6c9 code=0x7ffc0000 [ 422.634651][ T29] audit: type=1326 audit(409.134:23389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7536 comm="syz.0.7228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc4448cf6c9 code=0x7ffc0000 [ 422.657572][ T29] audit: type=1326 audit(409.134:23390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7536 comm="syz.0.7228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4448cf6c9 code=0x7ffc0000 [ 422.680563][ T29] audit: type=1326 audit(409.134:23391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7536 comm="syz.0.7228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc4448cf6c9 code=0x7ffc0000 [ 422.703594][ T29] audit: type=1326 audit(409.134:23392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7536 comm="syz.0.7228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4448cf6c9 code=0x7ffc0000 [ 422.726474][ T29] audit: type=1326 audit(409.134:23393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7536 comm="syz.0.7228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc4448cf6c9 code=0x7ffc0000 [ 422.749483][ T29] audit: type=1326 audit(409.134:23394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7536 comm="syz.0.7228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4448cf6c9 code=0x7ffc0000 [ 422.795148][ T7527] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 422.804898][ T7527] SELinux: failed to load policy [ 422.824893][ T7550] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 422.853215][ T7553] FAULT_INJECTION: forcing a failure. [ 422.853215][ T7553] name failslab, interval 1, probability 0, space 0, times 0 [ 422.866086][ T7553] CPU: 0 UID: 0 PID: 7553 Comm: syz.0.7232 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 422.866118][ T7553] Tainted: [W]=WARN [ 422.866126][ T7553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 422.866181][ T7553] Call Trace: [ 422.866219][ T7553] [ 422.866227][ T7553] __dump_stack+0x1d/0x30 [ 422.866260][ T7553] dump_stack_lvl+0xe8/0x140 [ 422.866284][ T7553] dump_stack+0x15/0x1b [ 422.866303][ T7553] should_fail_ex+0x265/0x280 [ 422.866324][ T7553] ? resv_map_alloc+0x32/0x190 [ 422.866428][ T7553] should_failslab+0x8c/0xb0 [ 422.866458][ T7553] __kmalloc_cache_noprof+0x4c/0x4a0 [ 422.866584][ T7553] ? vfs_write+0x7e8/0x960 [ 422.866613][ T7553] resv_map_alloc+0x32/0x190 [ 422.866709][ T7553] hugetlbfs_get_inode+0x67/0x370 [ 422.866806][ T7553] hugetlb_file_setup+0x192/0x3d0 [ 422.866841][ T7553] ksys_mmap_pgoff+0x157/0x310 [ 422.866864][ T7553] x64_sys_call+0x14a3/0x3000 [ 422.866921][ T7553] do_syscall_64+0xd2/0x200 [ 422.867016][ T7553] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 422.867044][ T7553] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 422.867076][ T7553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.867146][ T7553] RIP: 0033:0x7fc4448cf6c9 [ 422.867162][ T7553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 422.867185][ T7553] RSP: 002b:00007fc443337038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 422.867295][ T7553] RAX: ffffffffffffffda RBX: 00007fc444b25fa0 RCX: 00007fc4448cf6c9 [ 422.867315][ T7553] RDX: 000000000300000c RSI: 0000000000c00000 RDI: 0000200000400000 [ 422.867331][ T7553] RBP: 00007fc443337090 R08: ffffffffffffffff R09: 0000000000000000 [ 422.867347][ T7553] R10: 0000000000050032 R11: 0000000000000246 R12: 0000000000000001 [ 422.867362][ T7553] R13: 00007fc444b26038 R14: 00007fc444b25fa0 R15: 00007fff61cc8388 [ 422.867387][ T7553] [ 423.050489][ T7559] loop1: detected capacity change from 0 to 2048 [ 423.067300][ T7558] 0ªX¹¦À: renamed from caif0 [ 423.081959][ T7558] 0ªX¹¦À: entered allmulticast mode [ 423.087209][ T7558] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 423.105647][ T7560] veth1_to_batadv: entered promiscuous mode [ 423.112264][ T7560] batadv_slave_0: entered promiscuous mode [ 423.122601][ T7560] hsr1: Slave A (veth1_to_batadv) is not up; please bring it up to get a fully working HSR network [ 423.133380][ T7560] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network [ 423.133730][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 423.144166][ T3520] Bluetooth: hci0: command 0x1003 tx timeout [ 423.157882][ T7559] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 423.177851][ T7560] hsr1: entered promiscuous mode [ 423.230632][ T3937] hid-generic 0000:3000000:0000.0038: unknown main item tag 0x4 [ 423.238486][ T3937] hid-generic 0000:3000000:0000.0038: unknown main item tag 0x2 [ 423.246522][ T3937] hid-generic 0000:3000000:0000.0038: unknown main item tag 0x3 [ 423.255807][ T3937] hid-generic 0000:3000000:0000.0038: hidraw0: HID v0.00 Device [sy] on syz0 [ 423.767712][T30809] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 423.921948][ T7622] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 423.940423][ T7631] FAULT_INJECTION: forcing a failure. [ 423.940423][ T7631] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 423.953765][ T7631] CPU: 1 UID: 0 PID: 7631 Comm: syz.1.7245 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 423.953804][ T7631] Tainted: [W]=WARN [ 423.953813][ T7631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 423.953829][ T7631] Call Trace: [ 423.953837][ T7631] [ 423.953847][ T7631] __dump_stack+0x1d/0x30 [ 423.953918][ T7631] dump_stack_lvl+0xe8/0x140 [ 423.953946][ T7631] dump_stack+0x15/0x1b [ 423.954057][ T7631] should_fail_ex+0x265/0x280 [ 423.954083][ T7631] should_fail_alloc_page+0xf2/0x100 [ 423.954114][ T7631] __alloc_frozen_pages_noprof+0xff/0x360 [ 423.954138][ T7631] alloc_pages_mpol+0xb3/0x260 [ 423.954165][ T7631] alloc_pages_noprof+0x90/0x130 [ 423.954223][ T7631] pte_alloc_one+0x1e/0xd0 [ 423.954258][ T7631] __do_fault+0x7b/0x200 [ 423.954287][ T7631] handle_mm_fault+0xd69/0x2be0 [ 423.954361][ T7631] ? check_vma_flags+0x315/0x340 [ 423.954421][ T7631] __get_user_pages+0x102a/0x1ed0 [ 423.954467][ T7631] faultin_page_range+0x107/0x4e0 [ 423.954500][ T7631] madvise_do_behavior+0x197/0x970 [ 423.954534][ T7631] ? 0xffffffff81000000 [ 423.954549][ T7631] ? __rcu_read_unlock+0x4f/0x70 [ 423.954611][ T7631] do_madvise+0x10e/0x190 [ 423.954647][ T7631] __x64_sys_madvise+0x64/0x80 [ 423.954678][ T7631] x64_sys_call+0x1f1a/0x3000 [ 423.954767][ T7631] do_syscall_64+0xd2/0x200 [ 423.954791][ T7631] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 423.954834][ T7631] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 423.954864][ T7631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.954882][ T7631] RIP: 0033:0x7fa63210f6c9 [ 423.954895][ T7631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 423.954961][ T7631] RSP: 002b:00007fa630b6f038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 423.954984][ T7631] RAX: ffffffffffffffda RBX: 00007fa632365fa0 RCX: 00007fa63210f6c9 [ 423.954999][ T7631] RDX: 0000000000000017 RSI: 0000000000800000 RDI: 00002000000ec000 [ 423.955013][ T7631] RBP: 00007fa630b6f090 R08: 0000000000000000 R09: 0000000000000000 [ 423.955027][ T7631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.955041][ T7631] R13: 00007fa632366038 R14: 00007fa632365fa0 R15: 00007fff09aea458 [ 423.955059][ T7631] [ 424.182730][ T7626] __nla_validate_parse: 3 callbacks suppressed [ 424.182795][ T7626] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7244'. [ 424.252131][ T7622] netlink: 140 bytes leftover after parsing attributes in process `syz.6.7244'. [ 424.374524][ T7653] netlink: 'syz.1.7252': attribute type 28 has an invalid length. [ 424.409814][ T7653] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7653 comm=syz.1.7252 [ 424.443857][ T7659] vcan0 speed is unknown, defaulting to 1000 [ 424.461207][ T7659] vcan0 speed is unknown, defaulting to 1000 [ 424.474180][ T7653] loop1: detected capacity change from 0 to 256 [ 424.490475][ T7659] vcan0 speed is unknown, defaulting to 1000 [ 424.495835][ T7658] SELinux: failed to load policy [ 424.503510][ T7653] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 424.536622][ T7653] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 424.596087][ T7659] infiniband syz1: set active [ 424.600851][ T7659] infiniband syz1: added vcan0 [ 424.605886][ T7981] vcan0 speed is unknown, defaulting to 1000 [ 424.619776][ T7666] tipc: New replicast peer: 255.255.255.255 [ 424.626255][ T7666] tipc: Enabled bearer , priority 10 [ 424.630827][ T7981] hid-generic 0000:3000000:0000.0039: unknown main item tag 0x4 [ 424.640188][ T7981] hid-generic 0000:3000000:0000.0039: unknown main item tag 0x2 [ 424.655155][ T7670] netlink: 105116 bytes leftover after parsing attributes in process `+}[@'. [ 424.687168][ T7659] RDS/IB: syz1: added [ 424.693473][ T7981] hid-generic 0000:3000000:0000.0039: unknown main item tag 0x3 [ 424.701410][ T7659] smc: adding ib device syz1 with port count 1 [ 424.707671][ T7659] smc: ib device syz1 port 1 has no pnetid [ 424.715949][ T3397] vcan0 speed is unknown, defaulting to 1000 [ 424.724191][ T7981] hid-generic 0000:3000000:0000.0039: hidraw0: HID v0.00 Device [sy] on syz0 [ 424.744246][ T7682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 424.754532][ T7659] vcan0 speed is unknown, defaulting to 1000 [ 424.756284][ T7682] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7262'. [ 424.784531][ T7682] bond0 (unregistering): Released all slaves [ 424.801341][ T7659] vcan0 speed is unknown, defaulting to 1000 [ 424.861086][ T7659] vcan0 speed is unknown, defaulting to 1000 [ 424.894152][ T7773] lo speed is unknown, defaulting to 1000 [ 424.908113][ T7659] vcan0 speed is unknown, defaulting to 1000 [ 424.936185][ T7780] netlink: 'syz.1.7267': attribute type 12 has an invalid length. [ 424.989396][ T7773] lo speed is unknown, defaulting to 1000 [ 425.011541][ T7659] vcan0 speed is unknown, defaulting to 1000 [ 425.063208][ T7784] netlink: 120 bytes leftover after parsing attributes in process `syz.9.7270'. [ 425.082021][ T7773] lo speed is unknown, defaulting to 1000 [ 425.105046][ T7787] netlink: 20 bytes leftover after parsing attributes in process `syz.8.7271'. [ 425.115013][ T7659] vcan0 speed is unknown, defaulting to 1000 [ 425.122994][ T7784] loop9: detected capacity change from 0 to 2048 [ 425.131334][ T7784] EXT4-fs (loop9): couldn't mount as ext3 due to feature incompatibilities [ 425.193420][ T7659] vcan0 speed is unknown, defaulting to 1000 [ 425.252274][ T7659] vcan0 speed is unknown, defaulting to 1000 [ 425.310489][ T7659] vcan0 speed is unknown, defaulting to 1000 [ 425.387928][ T7659] vcan0 speed is unknown, defaulting to 1000 [ 425.423872][ T7841] tmpfs: Bad value for 'mpol' [ 425.438286][ T7659] vcan0 speed is unknown, defaulting to 1000 [ 425.486336][ T7841] pim6reg: entered allmulticast mode [ 425.499613][ T7841] pim6reg: left allmulticast mode [ 425.559301][T20690] Bluetooth: hci0: Frame reassembly failed (-84) [ 425.593999][ T7859] Bluetooth: hci0: Frame reassembly failed (-90) [ 425.607000][ T7851] netlink: 'syz.0.7283': attribute type 12 has an invalid length. [ 425.614979][ T7851] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7283'. [ 425.707174][ T7875] netlink: 'syz.6.7288': attribute type 12 has an invalid length. [ 425.725672][ T7866] lo speed is unknown, defaulting to 1000 [ 425.764159][ T7866] lo speed is unknown, defaulting to 1000 [ 425.799878][ T7866] lo speed is unknown, defaulting to 1000 [ 425.818069][ T3937] tipc: Node number set to 2477810318 [ 425.858959][ T7866] vcan0 speed is unknown, defaulting to 1000 [ 426.079278][ T7911] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7292'. [ 426.088285][ T7911] netlink: 32 bytes leftover after parsing attributes in process `syz.6.7292'. [ 426.097375][ T7911] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7292'. [ 426.179640][ T3937] hid-generic 0000:3000000:0000.003A: unknown main item tag 0x4 [ 426.187826][ T3937] hid-generic 0000:3000000:0000.003A: hidraw0: HID v0.00 Device [sy] on syz0 [ 426.646422][ T7937] loop8: detected capacity change from 0 to 512 [ 426.654476][ T7937] FAT-fs (loop8): Directory bread(block 199916) failed [ 426.661388][ T7937] FAT-fs (loop8): Directory bread(block 199917) failed [ 426.668698][ T7937] FAT-fs (loop8): Directory bread(block 199918) failed [ 426.675755][ T7937] FAT-fs (loop8): Directory bread(block 199919) failed [ 426.682756][ T7937] FAT-fs (loop8): Directory bread(block 199920) failed [ 426.693011][ T7937] FAT-fs (loop8): Directory bread(block 199921) failed [ 426.700238][ T7937] FAT-fs (loop8): Directory bread(block 199922) failed [ 426.707243][ T7937] FAT-fs (loop8): Directory bread(block 199923) failed [ 426.719838][ T7937] 9p: Unknown access argument o: -22 [ 426.776967][ T7954] SELinux: Context @ is not valid (left unmapped). [ 426.785755][ T7955] hub 6-0:1.0: USB hub found [ 426.790527][ T7955] hub 6-0:1.0: 8 ports detected [ 426.800087][ T7955] FAT-fs (loop8): Directory bread(block 199916) failed [ 426.812475][ T7955] FAT-fs (loop8): Directory bread(block 199917) failed [ 426.842551][ T7937] lo speed is unknown, defaulting to 1000 [ 426.875411][ T7965] FAULT_INJECTION: forcing a failure. [ 426.875411][ T7965] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 426.881569][ T7937] lo speed is unknown, defaulting to 1000 [ 426.888748][ T7965] CPU: 1 UID: 0 PID: 7965 Comm: syz.0.7306 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 426.888787][ T7965] Tainted: [W]=WARN [ 426.888796][ T7965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 426.888861][ T7965] Call Trace: [ 426.888869][ T7965] [ 426.888879][ T7965] __dump_stack+0x1d/0x30 [ 426.888912][ T7965] dump_stack_lvl+0xe8/0x140 [ 426.888942][ T7965] dump_stack+0x15/0x1b [ 426.888968][ T7965] should_fail_ex+0x265/0x280 [ 426.889042][ T7965] should_fail+0xb/0x20 [ 426.889066][ T7965] should_fail_usercopy+0x1a/0x20 [ 426.889095][ T7965] _copy_from_user+0x1c/0xb0 [ 426.889147][ T7965] ___sys_sendmsg+0xc1/0x1d0 [ 426.889196][ T7965] __x64_sys_sendmsg+0xd4/0x160 [ 426.889230][ T7965] x64_sys_call+0x191e/0x3000 [ 426.889263][ T7965] do_syscall_64+0xd2/0x200 [ 426.889295][ T7965] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 426.889336][ T7965] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 426.889410][ T7965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.889438][ T7965] RIP: 0033:0x7fc4448cf6c9 [ 426.889458][ T7965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 426.889521][ T7965] RSP: 002b:00007fc443337038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 426.889545][ T7965] RAX: ffffffffffffffda RBX: 00007fc444b25fa0 RCX: 00007fc4448cf6c9 [ 426.889562][ T7965] RDX: 0000000004040000 RSI: 0000200000000100 RDI: 0000000000000004 [ 426.889579][ T7965] RBP: 00007fc443337090 R08: 0000000000000000 R09: 0000000000000000 [ 426.889595][ T7965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 426.889611][ T7965] R13: 00007fc444b26038 R14: 00007fc444b25fa0 R15: 00007fff61cc8388 [ 426.889637][ T7965] [ 427.103020][ T7937] lo speed is unknown, defaulting to 1000 [ 427.164042][ T7937] vcan0 speed is unknown, defaulting to 1000 [ 427.207260][ T7998] FAULT_INJECTION: forcing a failure. [ 427.207260][ T7998] name failslab, interval 1, probability 0, space 0, times 0 [ 427.220050][ T7998] CPU: 1 UID: 0 PID: 7998 Comm: syz.0.7311 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 427.220078][ T7998] Tainted: [W]=WARN [ 427.220156][ T7998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 427.220172][ T7998] Call Trace: [ 427.220179][ T7998] [ 427.220188][ T7998] __dump_stack+0x1d/0x30 [ 427.220222][ T7998] dump_stack_lvl+0xe8/0x140 [ 427.220241][ T7998] dump_stack+0x15/0x1b [ 427.220282][ T7998] should_fail_ex+0x265/0x280 [ 427.220306][ T7998] ? kernfs_get_tree+0x56/0x490 [ 427.220331][ T7998] should_failslab+0x8c/0xb0 [ 427.220431][ T7998] __kmalloc_cache_noprof+0x4c/0x4a0 [ 427.220501][ T7998] kernfs_get_tree+0x56/0x490 [ 427.220539][ T7998] cgroup_do_get_tree+0x86/0x330 [ 427.220590][ T7998] cgroup_get_tree+0xd2/0x1f0 [ 427.220618][ T7998] vfs_get_tree+0x57/0x1d0 [ 427.220643][ T7998] vfs_cmd_create+0x8a/0x140 [ 427.220761][ T7998] vfs_fsconfig_locked+0x6f/0x210 [ 427.220811][ T7998] __se_sys_fsconfig+0x648/0x770 [ 427.220933][ T7998] __x64_sys_fsconfig+0x67/0x80 [ 427.221049][ T7998] x64_sys_call+0x1f83/0x3000 [ 427.221073][ T7998] do_syscall_64+0xd2/0x200 [ 427.221099][ T7998] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 427.221202][ T7998] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 427.221248][ T7998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.221269][ T7998] RIP: 0033:0x7fc4448cf6c9 [ 427.221283][ T7998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 427.221303][ T7998] RSP: 002b:00007fc443337038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 427.221334][ T7998] RAX: ffffffffffffffda RBX: 00007fc444b25fa0 RCX: 00007fc4448cf6c9 [ 427.221397][ T7998] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 427.221412][ T7998] RBP: 00007fc443337090 R08: 0000000000000000 R09: 0000000000000000 [ 427.221427][ T7998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 427.221441][ T7998] R13: 00007fc444b26038 R14: 00007fc444b25fa0 R15: 00007fff61cc8388 [ 427.221464][ T7998] [ 427.742504][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 427.752684][ T7981] hid_parser_main: 2 callbacks suppressed [ 427.752704][ T7981] hid-generic 0000:3000000:0000.003B: unknown main item tag 0x4 [ 427.766217][ T7981] hid-generic 0000:3000000:0000.003B: unknown main item tag 0x2 [ 427.792264][ T7981] hid-generic 0000:3000000:0000.003B: unknown main item tag 0x3 [ 427.815662][ T7981] hid-generic 0000:3000000:0000.003B: hidraw0: HID v0.00 Device [sy] on syz0 [ 427.884165][ T29] kauditd_printk_skb: 1128 callbacks suppressed [ 427.884180][ T29] audit: type=1400 audit(414.091:24523): avc: denied { map } for pid=8046 comm="syz.0.7320" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 427.914160][ T8047] vhci_hcd: invalid port number 96 [ 427.919266][ T8047] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 427.970805][ T8047] netlink: 'syz.0.7320': attribute type 10 has an invalid length. [ 428.081144][ T8053] loop9: detected capacity change from 0 to 32768 [ 428.116150][ T29] audit: type=1326 audit(414.306:24524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8067 comm="syz.6.7326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86f47cf6c9 code=0x7ffc0000 [ 428.117407][ T8053] loop9: p1 p2 p3 < > p4 < p5 p6 > [ 428.139935][ T29] audit: type=1326 audit(414.334:24525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8067 comm="syz.6.7326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7f86f47cf6c9 code=0x7ffc0000 [ 428.146362][ T8053] loop9: p1 start 460800 is beyond EOD, [ 428.167208][ T29] audit: type=1326 audit(414.334:24526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8067 comm="syz.6.7326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86f47cf6c9 code=0x7ffc0000 [ 428.167246][ T29] audit: type=1326 audit(414.334:24527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8067 comm="syz.6.7326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86f47cf6c9 code=0x7ffc0000 [ 428.172936][ T8053] truncated [ 428.172945][ T8053] loop9: p2 size 83886080 extends beyond EOD, truncated [ 428.197749][ T8053] loop9: p5 start 460800 is beyond EOD, truncated [ 428.235541][ T8053] loop9: p6 size 83886080 extends beyond EOD, truncated [ 428.236076][ T29] audit: type=1326 audit(414.409:24528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8069 comm="syz.1.7327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63210f6c9 code=0x7ffc0000 [ 428.265713][ T29] audit: type=1326 audit(414.409:24529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8069 comm="syz.1.7327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63210f6c9 code=0x7ffc0000 [ 428.288844][ T29] audit: type=1326 audit(414.409:24530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8069 comm="syz.1.7327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7fa63210f6c9 code=0x7ffc0000 [ 428.311757][ T29] audit: type=1326 audit(414.409:24531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8069 comm="syz.1.7327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63210f6c9 code=0x7ffc0000 [ 428.334711][ T29] audit: type=1326 audit(414.409:24532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8069 comm="syz.1.7327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63210f6c9 code=0x7ffc0000 [ 428.408424][T20689] Bluetooth: hci0: Frame reassembly failed (-84) [ 428.415006][ T8091] Bluetooth: hci0: Frame reassembly failed (-90) [ 428.468433][ T8096] loop1: detected capacity change from 0 to 1024 [ 428.480974][ T8096] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 428.489660][ T8096] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 428.503731][ T8096] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.7332: bg 0: block 88: padding at end of block bitmap is not set [ 428.654080][ T8110] loop8: detected capacity change from 0 to 512 [ 428.662649][ T8110] EXT4-fs error (device loop8): ext4_ext_check_inode:523: inode #2: comm syz.8.7334: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 6, max 4(4), depth 0(0) [ 428.680524][ T8110] EXT4-fs (loop8): get root inode failed [ 428.686208][ T8110] EXT4-fs (loop8): mount failed [ 428.921289][ T8123] netlink: zone id is out of range [ 428.926483][ T8123] netlink: zone id is out of range [ 428.931700][ T8123] netlink: zone id is out of range [ 428.936820][ T8123] netlink: zone id is out of range [ 428.945435][ T8123] netlink: zone id is out of range [ 428.950600][ T8123] netlink: zone id is out of range [ 428.955713][ T8123] netlink: zone id is out of range [ 428.960845][ T8123] netlink: zone id is out of range [ 428.965977][ T8123] netlink: zone id is out of range [ 428.971122][ T8123] netlink: zone id is out of range [ 429.130246][ T8130] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 429.364524][T30809] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.129381][ T8158] netlink: 'syz.8.7345': attribute type 1 has an invalid length. [ 430.163558][ T8158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 430.185805][ T8158] __nla_validate_parse: 20 callbacks suppressed [ 430.185824][ T8158] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7345'. [ 430.229377][ T8158] bond0 (unregistering): Released all slaves [ 430.340771][ T8229] netlink: 96 bytes leftover after parsing attributes in process `syz.1.7348'. [ 430.381386][ T8235] loop8: detected capacity change from 0 to 512 [ 430.435884][ T8235] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 430.517641][ T8252] netlink: 'syz.0.7354': attribute type 3 has an invalid length. [ 430.534718][ T8252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7354'. [ 430.543639][ T8252] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7354'. [ 430.575504][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 430.575639][ T3520] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 430.630310][ T8265] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 430.686984][ T8265] netlink: 104 bytes leftover after parsing attributes in process `syz.9.7356'. [ 430.715719][ T8272] netlink: 'syz.9.7359': attribute type 1 has an invalid length. [ 430.740383][ T8272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 430.750425][ T8272] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7359'. [ 430.764488][ T8272] bond0 (unregistering): Released all slaves [ 430.813321][ T7981] hid-generic 0000:3000000:0000.003C: unknown main item tag 0x4 [ 430.821021][ T7981] hid-generic 0000:3000000:0000.003C: unknown main item tag 0x2 [ 430.830748][ T7981] hid-generic 0000:3000000:0000.003C: unknown main item tag 0x3 [ 430.841222][ T7981] hid-generic 0000:3000000:0000.003C: hidraw0: HID v0.00 Device [sy] on syz0 [ 430.956901][ T8350] netlink: 20 bytes leftover after parsing attributes in process `syz.9.7361'. [ 431.215930][T25356] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.234312][ T8360] netlink: 'syz.8.7363': attribute type 4 has an invalid length. [ 431.242071][ T8360] netlink: 152 bytes leftover after parsing attributes in process `syz.8.7363'. [ 431.362177][ T8369] Bluetooth: hci0: Frame reassembly failed (-90) [ 431.377190][ T44] Bluetooth: hci0: sending frame failed (-49) [ 431.383598][ T3520] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 431.670935][ T8382] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7368'. [ 431.727656][ T8390] can: request_module (can-proto-4) failed. [ 431.824444][ T8395] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7372'. [ 431.860798][ T8403] netlink: 'syz.6.7374': attribute type 4 has an invalid length. [ 431.875078][ T8405] bridge0: entered promiscuous mode [ 431.880458][ T8405] macsec1: entered promiscuous mode [ 431.886555][ T8405] bridge0: port 3(macsec1) entered blocking state [ 431.893099][ T8405] bridge0: port 3(macsec1) entered disabled state [ 431.899814][ T8405] macsec1: entered allmulticast mode [ 431.905210][ T8405] bridge0: entered allmulticast mode [ 431.913495][ T8405] macsec1: left allmulticast mode [ 431.918579][ T8405] bridge0: left allmulticast mode [ 432.118040][ T8405] bridge0: left promiscuous mode [ 432.294776][ T8422] loop9: detected capacity change from 0 to 1024 [ 432.305189][ T8422] EXT4-fs error (device loop9): ext4_quota_enable:7136: inode #3: comm syz.9.7379: iget: special inode unallocated [ 432.317474][ T8422] EXT4-fs error (device loop9): ext4_quota_enable:7139: comm syz.9.7379: Bad quota inode: 3, type: 0 [ 432.328545][ T8422] EXT4-fs warning (device loop9): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 432.358987][ T8422] EXT4-fs (loop9): mount failed [ 432.565516][ T7984] hid-generic 0000:3000000:0000.003D: unknown main item tag 0x4 [ 432.573206][ T7984] hid-generic 0000:3000000:0000.003D: unknown main item tag 0x2 [ 432.945256][ T3381] hid-generic 00B8:100000:0000.003E: unknown main item tag 0x0 [ 432.952921][ T3381] hid-generic 00B8:100000:0000.003E: unknown main item tag 0x0 [ 432.969597][ T8422] netlink: 'syz.9.7379': attribute type 10 has an invalid length. [ 432.998573][ T8422] ipvlan0: entered allmulticast mode [ 433.004018][ T8422] veth0_vlan: entered allmulticast mode [ 433.088680][ T3381] hid-generic 00B8:100000:0000.003E: hidraw0: HID v7.ff Device [syz0] on syz0 [ 433.100357][ T7984] hid-generic 0000:3000000:0000.003D: hidraw1: HID v0.00 Device [sy] on syz0 [ 433.116776][ T8422] team0: Device ipvlan0 failed to register rx_handler [ 433.173413][ T8460] netlink: 'syz.9.7386': attribute type 4 has an invalid length. [ 433.176329][ T8462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.190192][ T8462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.202450][ T8462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.211303][ T8462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.294926][ T29] kauditd_printk_skb: 452 callbacks suppressed [ 433.294943][ T29] audit: type=1400 audit(419.152:24985): avc: denied { create } for pid=8461 comm="syz.0.7387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1 [ 433.330733][ T8462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.340958][ T8462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.355175][ T8462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.366030][ T8462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.405362][ T29] audit: type=1400 audit(419.255:24986): avc: denied { read } for pid=8485 comm="syz.1.7392" name="cgroup.procs" dev="cgroup" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:netutils_exec_t:s0" [ 433.431937][ T29] audit: type=1400 audit(419.255:24987): avc: denied { open } for pid=8485 comm="syz.1.7392" path="/syzcgroup/cpu/syz1/cgroup.procs" dev="cgroup" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:netutils_exec_t:s0" [ 433.465237][ T29] audit: type=1400 audit(419.311:24988): avc: denied { setopt } for pid=8483 comm="syz.9.7391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 433.591295][ T8490] loop1: detected capacity change from 0 to 512 [ 433.599838][ T8490] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 433.602219][ T8462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.632342][ T8462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.644343][ T8462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.647438][ T8490] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 433.652922][ T8462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.708042][ T8490] EXT4-fs (loop1): 1 truncate cleaned up [ 433.714086][ T8490] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 433.740506][ T29] audit: type=1400 audit(419.573:24989): avc: denied { name_bind } for pid=8501 comm="syz.9.7396" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 433.764027][ T29] audit: type=1400 audit(419.573:24990): avc: denied { write } for pid=8501 comm="syz.9.7396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 433.789462][ T8502] loop9: detected capacity change from 0 to 128 [ 433.806209][ T8502] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 433.826113][ T29] audit: type=1326 audit(419.647:24991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8489 comm="syz.1.7393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63210f6c9 code=0x7ffc0000 [ 433.849116][ T29] audit: type=1326 audit(419.647:24992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8489 comm="syz.1.7393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63210f6c9 code=0x7ffc0000 [ 433.872035][ T29] audit: type=1326 audit(419.647:24993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8489 comm="syz.1.7393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fa63210f6c9 code=0x7ffc0000 [ 433.894939][ T29] audit: type=1326 audit(419.657:24994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8489 comm="syz.1.7393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63210f6c9 code=0x7ffc0000 [ 433.930754][ T1719] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 433.950147][T30809] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.998574][ T8518] IPVS: Error connecting to the multicast addr [ 435.209811][ T7985] hid_parser_main: 33 callbacks suppressed [ 435.209833][ T7985] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 435.223164][ T7985] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 435.230724][ T7985] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 435.239986][ T7985] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 435.247445][ T7985] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 435.254905][ T7985] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 435.262332][ T7985] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 435.269884][ T7985] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 435.277278][ T7985] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 435.284685][ T7985] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 435.324054][ T7985] hid-generic 0000:0000:0000.003F: hidraw0: HID v8.00 Device [syz0] on syz0 [ 435.371102][ T8556] lo speed is unknown, defaulting to 1000 [ 435.462699][T20706] Bluetooth: hci0: Frame reassembly failed (-84) [ 435.467072][ T8556] lo speed is unknown, defaulting to 1000 [ 435.491612][ T8551] netlink: 'syz.6.7408': attribute type 10 has an invalid length. [ 435.517558][ T8556] lo speed is unknown, defaulting to 1000 [ 435.547441][T20667] Bluetooth: hci1: Frame reassembly failed (-84) [ 435.557072][ T8587] Bluetooth: hci1: Frame reassembly failed (-90) [ 435.602552][ T8556] vcan0 speed is unknown, defaulting to 1000 [ 435.707912][ T8577] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 435.715634][ T8619] __nla_validate_parse: 8 callbacks suppressed [ 435.715653][ T8619] netlink: 96 bytes leftover after parsing attributes in process `syz.9.7422'. [ 435.717894][ T8577] SELinux: failed to load policy [ 436.765438][ T8656] net_ratelimit: 97 callbacks suppressed [ 436.765457][ T8656] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 436.837239][ T8669] macvtap0: entered promiscuous mode [ 436.843278][ T8669] macvtap0: left promiscuous mode [ 437.277631][ T8702] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7442'. [ 437.392245][ T8724] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7443'. [ 437.413013][ T8724] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7443'. [ 437.663292][ T6523] Bluetooth: hci0: command 0x1003 tx timeout [ 437.663635][ T3520] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 437.748904][ T44] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 437.983765][ T8768] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7457'. [ 437.992864][ T8761] loop9: detected capacity change from 0 to 8192 [ 438.003903][T20706] Bluetooth: hci0: Frame reassembly failed (-84) [ 438.040545][ T8761] netlink: 48 bytes leftover after parsing attributes in process `syz.9.7454'. [ 438.061435][ T8786] FAULT_INJECTION: forcing a failure. [ 438.061435][ T8786] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 438.074525][ T8786] CPU: 0 UID: 0 PID: 8786 Comm: syz.8.7463 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 438.074673][ T8786] Tainted: [W]=WARN [ 438.074680][ T8786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 438.074703][ T8786] Call Trace: [ 438.074708][ T8786] [ 438.074714][ T8786] __dump_stack+0x1d/0x30 [ 438.074757][ T8786] dump_stack_lvl+0xe8/0x140 [ 438.074783][ T8786] dump_stack+0x15/0x1b [ 438.074811][ T8786] should_fail_ex+0x265/0x280 [ 438.074848][ T8786] should_fail+0xb/0x20 [ 438.074863][ T8786] should_fail_usercopy+0x1a/0x20 [ 438.074881][ T8786] _copy_from_user+0x1c/0xb0 [ 438.074974][ T8786] kstrtouint_from_user+0x69/0xf0 [ 438.074991][ T8786] ? 0xffffffff81000000 [ 438.075084][ T8786] ? selinux_file_permission+0x1e4/0x320 [ 438.075194][ T8786] proc_fail_nth_write+0x50/0x160 [ 438.075232][ T8786] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 438.075266][ T8786] vfs_write+0x269/0x960 [ 438.075320][ T8786] ? __rcu_read_unlock+0x4f/0x70 [ 438.075371][ T8786] ? __fget_files+0x184/0x1c0 [ 438.075513][ T8786] ksys_write+0xda/0x1a0 [ 438.075542][ T8786] __x64_sys_write+0x40/0x50 [ 438.075616][ T8786] x64_sys_call+0x2802/0x3000 [ 438.075637][ T8786] do_syscall_64+0xd2/0x200 [ 438.075656][ T8786] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 438.075732][ T8786] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 438.075766][ T8786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.075801][ T8786] RIP: 0033:0x7fcf6ee1e17f [ 438.075819][ T8786] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 438.075851][ T8786] RSP: 002b:00007fcf6d887030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 438.075917][ T8786] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcf6ee1e17f [ 438.075943][ T8786] RDX: 0000000000000001 RSI: 00007fcf6d8870a0 RDI: 0000000000000007 [ 438.075958][ T8786] RBP: 00007fcf6d887090 R08: 0000000000000000 R09: 0000000000000000 [ 438.075972][ T8786] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 438.075985][ T8786] R13: 00007fcf6f076038 R14: 00007fcf6f075fa0 R15: 00007ffde61472c8 [ 438.076026][ T8786] [ 438.343758][ T8775] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7456'. [ 438.564401][ T8809] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7469'. [ 438.573502][ T8809] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7469'. [ 438.651903][ T29] kauditd_printk_skb: 380 callbacks suppressed [ 438.651918][ T29] audit: type=1326 audit(424.165:25375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8810 comm="syz.6.7470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86f47cf6c9 code=0x7ffc0000 [ 438.652717][ T8811] FAULT_INJECTION: forcing a failure. [ 438.652717][ T8811] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 438.658281][ T29] audit: type=1326 audit(424.165:25376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8810 comm="syz.6.7470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86f47cf6c9 code=0x7ffc0000 [ 438.681164][ T8811] CPU: 0 UID: 0 PID: 8811 Comm: syz.6.7470 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 438.681210][ T8811] Tainted: [W]=WARN [ 438.681220][ T8811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 438.681300][ T8811] Call Trace: [ 438.681308][ T8811] [ 438.681319][ T8811] __dump_stack+0x1d/0x30 [ 438.681351][ T8811] dump_stack_lvl+0xe8/0x140 [ 438.681380][ T8811] dump_stack+0x15/0x1b [ 438.681404][ T8811] should_fail_ex+0x265/0x280 [ 438.681434][ T8811] should_fail+0xb/0x20 [ 438.681507][ T8811] should_fail_usercopy+0x1a/0x20 [ 438.681538][ T8811] _copy_to_user+0x20/0xa0 [ 438.681572][ T8811] simple_read_from_buffer+0xb5/0x130 [ 438.681600][ T8811] proc_fail_nth_read+0x10e/0x150 [ 438.681679][ T8811] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 438.681723][ T8811] vfs_read+0x1a8/0x770 [ 438.681757][ T8811] ? __rcu_read_unlock+0x4f/0x70 [ 438.681858][ T8811] ? __fget_files+0x184/0x1c0 [ 438.681911][ T8811] ksys_read+0xda/0x1a0 [ 438.681945][ T8811] __x64_sys_read+0x40/0x50 [ 438.681985][ T8811] x64_sys_call+0x27c0/0x3000 [ 438.682026][ T8811] do_syscall_64+0xd2/0x200 [ 438.682053][ T8811] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 438.682124][ T8811] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 438.682169][ T8811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.682196][ T8811] RIP: 0033:0x7f86f47ce0dc [ 438.682215][ T8811] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 438.682311][ T8811] RSP: 002b:00007f86f3237030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 438.682381][ T8811] RAX: ffffffffffffffda RBX: 00007f86f4a25fa0 RCX: 00007f86f47ce0dc [ 438.682398][ T8811] RDX: 000000000000000f RSI: 00007f86f32370a0 RDI: 0000000000000006 [ 438.682414][ T8811] RBP: 00007f86f3237090 R08: 0000000000000000 R09: 0000000000000000 [ 438.682431][ T8811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 438.682447][ T8811] R13: 00007f86f4a26038 R14: 00007f86f4a25fa0 R15: 00007ffeb4e140f8 [ 438.682473][ T8811] [ 438.920755][ T29] audit: type=1326 audit(424.165:25377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8810 comm="syz.6.7470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f86f47cdf10 code=0x7ffc0000 [ 438.943663][ T29] audit: type=1326 audit(424.165:25378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8810 comm="syz.6.7470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f86f47ce17f code=0x7ffc0000 [ 438.966380][ T29] audit: type=1326 audit(424.165:25379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8810 comm="syz.6.7470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7f86f47cf6c9 code=0x7ffc0000 [ 438.989273][ T29] audit: type=1326 audit(424.165:25380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8810 comm="syz.6.7470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f86f47ce0dc code=0x7ffc0000 [ 439.012606][ T29] audit: type=1326 audit(424.193:25381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8810 comm="syz.6.7470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f86f47ce17f code=0x7ffc0000 [ 439.035358][ T29] audit: type=1326 audit(424.193:25382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8810 comm="syz.6.7470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f86f47ce17f code=0x7ffc0000 [ 439.058275][ T29] audit: type=1326 audit(424.193:25383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8810 comm="syz.6.7470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f86f47cf6c9 code=0x7ffc0000 [ 439.081161][ T29] audit: type=1400 audit(424.259:25384): avc: denied { read } for pid=8812 comm="syz.6.7471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 439.326599][ T8840] netlink: 'syz.8.7480': attribute type 4 has an invalid length. [ 439.334449][ T8840] netlink: 152 bytes leftover after parsing attributes in process `syz.8.7480'. [ 439.399933][ T8848] loop8: detected capacity change from 0 to 128 [ 439.409898][ T8848] EXT4-fs (loop8): couldn't mount as ext3 due to feature incompatibilities [ 439.423209][ T7985] hid-generic 0000:3000000:0000.0040: hidraw0: HID v0.00 Device [sy] on syz0 [ 439.637841][ T8862] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 439.647572][ T8862] SELinux: failed to load policy [ 440.154157][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 440.160226][ T3520] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 440.380532][T20667] Bluetooth: hci0: Frame reassembly failed (-84) [ 440.495161][ T8928] loop1: detected capacity change from 0 to 764 [ 440.503921][ T8928] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 440.514607][ T8928] FAULT_INJECTION: forcing a failure. [ 440.514607][ T8928] name failslab, interval 1, probability 0, space 0, times 0 [ 440.527357][ T8928] CPU: 0 UID: 0 PID: 8928 Comm: syz.1.7507 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 440.527385][ T8928] Tainted: [W]=WARN [ 440.527391][ T8928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 440.527403][ T8928] Call Trace: [ 440.527464][ T8928] [ 440.527473][ T8928] __dump_stack+0x1d/0x30 [ 440.527500][ T8928] dump_stack_lvl+0xe8/0x140 [ 440.527584][ T8928] dump_stack+0x15/0x1b [ 440.527606][ T8928] should_fail_ex+0x265/0x280 [ 440.527630][ T8928] should_failslab+0x8c/0xb0 [ 440.527666][ T8928] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 440.527694][ T8928] ? __alloc_skb+0x101/0x320 [ 440.527773][ T8928] __alloc_skb+0x101/0x320 [ 440.527852][ T8928] netlink_alloc_large_skb+0xbf/0xf0 [ 440.527900][ T8928] netlink_sendmsg+0x3cf/0x6b0 [ 440.527927][ T8928] ? __pfx_netlink_sendmsg+0x10/0x10 [ 440.527950][ T8928] __sock_sendmsg+0x145/0x180 [ 440.527975][ T8928] ____sys_sendmsg+0x31e/0x4e0 [ 440.528084][ T8928] ___sys_sendmsg+0x17b/0x1d0 [ 440.528115][ T8928] __x64_sys_sendmsg+0xd4/0x160 [ 440.528219][ T8928] x64_sys_call+0x191e/0x3000 [ 440.528275][ T8928] do_syscall_64+0xd2/0x200 [ 440.528304][ T8928] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 440.528342][ T8928] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 440.528399][ T8928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.528425][ T8928] RIP: 0033:0x7fa63210f6c9 [ 440.528445][ T8928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 440.528468][ T8928] RSP: 002b:00007fa630b6f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 440.528493][ T8928] RAX: ffffffffffffffda RBX: 00007fa632365fa0 RCX: 00007fa63210f6c9 [ 440.528577][ T8928] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000009 [ 440.528594][ T8928] RBP: 00007fa630b6f090 R08: 0000000000000000 R09: 0000000000000000 [ 440.528632][ T8928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 440.528644][ T8928] R13: 00007fa632366038 R14: 00007fa632365fa0 R15: 00007fff09aea458 [ 440.528664][ T8928] [ 441.232782][ T8958] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 441.242751][ T8958] SELinux: failed to load policy [ 441.389817][ T8992] loop1: detected capacity change from 0 to 512 [ 441.397286][ T8992] EXT4-fs: Ignoring removed mblk_io_submit option [ 441.404161][ T8992] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 441.416554][ T8992] EXT4-fs (loop1): 1 truncate cleaned up [ 441.422926][ T8992] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 441.491671][T30809] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.509562][ T9000] FAULT_INJECTION: forcing a failure. [ 441.509562][ T9000] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 441.522699][ T9000] CPU: 1 UID: 0 PID: 9000 Comm: syz.1.7531 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 441.522738][ T9000] Tainted: [W]=WARN [ 441.522745][ T9000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 441.522757][ T9000] Call Trace: [ 441.522764][ T9000] [ 441.522772][ T9000] __dump_stack+0x1d/0x30 [ 441.522826][ T9000] dump_stack_lvl+0xe8/0x140 [ 441.522853][ T9000] dump_stack+0x15/0x1b [ 441.522870][ T9000] should_fail_ex+0x265/0x280 [ 441.522892][ T9000] should_fail+0xb/0x20 [ 441.522912][ T9000] should_fail_usercopy+0x1a/0x20 [ 441.523062][ T9000] _copy_from_user+0x1c/0xb0 [ 441.523109][ T9000] memdup_user+0x5e/0xd0 [ 441.523137][ T9000] strndup_user+0x68/0xb0 [ 441.523165][ T9000] keyctl_restrict_keyring+0x15a/0x1b0 [ 441.523190][ T9000] __se_sys_keyctl+0x1ed/0xb80 [ 441.523227][ T9000] ? __rcu_read_unlock+0x4f/0x70 [ 441.523255][ T9000] ? bpf_trace_run2+0x124/0x1c0 [ 441.523291][ T9000] ? __bpf_trace_sys_enter+0x10/0x30 [ 441.523401][ T9000] __x64_sys_keyctl+0x67/0x80 [ 441.523498][ T9000] x64_sys_call+0x2f7c/0x3000 [ 441.523522][ T9000] do_syscall_64+0xd2/0x200 [ 441.523555][ T9000] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 441.523588][ T9000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.523652][ T9000] RIP: 0033:0x7fa63210f6c9 [ 441.523666][ T9000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 441.523684][ T9000] RSP: 002b:00007fa630b6f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 441.523702][ T9000] RAX: ffffffffffffffda RBX: 00007fa632365fa0 RCX: 00007fa63210f6c9 [ 441.523714][ T9000] RDX: 0000200000000240 RSI: 000000003487772a RDI: 000000000000001d [ 441.523783][ T9000] RBP: 00007fa630b6f090 R08: 0000000000000000 R09: 0000000000000000 [ 441.523794][ T9000] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 441.523806][ T9000] R13: 00007fa632366038 R14: 00007fa632365fa0 R15: 00007fff09aea458 [ 441.523825][ T9000] [ 442.538434][ T3520] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 442.795939][ T9012] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 442.806182][ T9012] SELinux: failed to load policy [ 443.035981][ T9045] netlink: 'syz.8.7542': attribute type 1 has an invalid length. [ 443.043803][ T9045] __nla_validate_parse: 2 callbacks suppressed [ 443.043819][ T9045] netlink: 224 bytes leftover after parsing attributes in process `syz.8.7542'. [ 443.062128][ T3397] hid_parser_main: 23 callbacks suppressed [ 443.062211][ T3397] hid-generic 0000:3000000:0000.0041: unknown main item tag 0x4 [ 443.075739][ T3397] hid-generic 0000:3000000:0000.0041: unknown main item tag 0x2 [ 443.102191][ T3397] hid-generic 0000:3000000:0000.0041: unknown main item tag 0x3 [ 443.111214][ T3397] hid-generic 0000:3000000:0000.0041: hidraw0: HID v0.00 Device [sy] on syz0 [ 443.220412][ T9057] 9pnet_fd: Insufficient options for proto=fd [ 443.239768][ T9057] lo speed is unknown, defaulting to 1000 [ 443.274285][ T9057] lo speed is unknown, defaulting to 1000 [ 443.313335][ T9057] lo speed is unknown, defaulting to 1000 [ 443.389779][ T9057] vcan0 speed is unknown, defaulting to 1000 [ 443.840910][ T9090] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7550'. [ 443.960642][ T9095] syz.9.7551: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 443.975338][ T9095] CPU: 1 UID: 0 PID: 9095 Comm: syz.9.7551 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 443.975393][ T9095] Tainted: [W]=WARN [ 443.975402][ T9095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 443.975469][ T9095] Call Trace: [ 443.975476][ T9095] [ 443.975485][ T9095] __dump_stack+0x1d/0x30 [ 443.975587][ T9095] dump_stack_lvl+0xe8/0x140 [ 443.975614][ T9095] dump_stack+0x15/0x1b [ 443.975665][ T9095] warn_alloc+0x12b/0x1a0 [ 443.975710][ T9095] ? __rcu_read_unlock+0x4f/0x70 [ 443.975750][ T9095] __vmalloc_node_range_noprof+0x9d/0xed0 [ 443.975799][ T9095] ? __futex_wait+0x1fa/0x260 [ 443.975827][ T9095] ? __pfx_futex_wake_mark+0x10/0x10 [ 443.975853][ T9095] ? __rcu_read_unlock+0x4f/0x70 [ 443.975933][ T9095] ? avc_has_perm_noaudit+0x1b1/0x200 [ 443.975960][ T9095] ? should_fail_ex+0x30/0x280 [ 443.975983][ T9095] ? xskq_create+0x36/0xe0 [ 443.976016][ T9095] vmalloc_user_noprof+0x7d/0xb0 [ 443.976121][ T9095] ? xskq_create+0x80/0xe0 [ 443.976142][ T9095] xskq_create+0x80/0xe0 [ 443.976229][ T9095] xsk_init_queue+0x95/0xf0 [ 443.976259][ T9095] xsk_setsockopt+0x3f5/0x640 [ 443.976305][ T9095] ? __pfx_xsk_setsockopt+0x10/0x10 [ 443.976386][ T9095] __sys_setsockopt+0x184/0x200 [ 443.976529][ T9095] __x64_sys_setsockopt+0x64/0x80 [ 443.976566][ T9095] x64_sys_call+0x20ec/0x3000 [ 443.976591][ T9095] do_syscall_64+0xd2/0x200 [ 443.976674][ T9095] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 443.976779][ T9095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.976807][ T9095] RIP: 0033:0x7f871ce3f6c9 [ 443.976823][ T9095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 443.976846][ T9095] RSP: 002b:00007f871b8a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 443.976872][ T9095] RAX: ffffffffffffffda RBX: 00007f871d095fa0 RCX: 00007f871ce3f6c9 [ 443.976886][ T9095] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000f [ 443.976902][ T9095] RBP: 00007f871cec1f91 R08: 0000000000000004 R09: 0000000000000000 [ 443.976917][ T9095] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 443.976932][ T9095] R13: 00007f871d096038 R14: 00007f871d095fa0 R15: 00007ffef0687958 [ 443.976957][ T9095] [ 443.976965][ T9095] Mem-Info: [ 444.046575][ T29] kauditd_printk_skb: 203 callbacks suppressed [ 444.046593][ T29] audit: type=1326 audit(429.217:25588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9105 comm="syz.6.7552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86f47cf6c9 code=0x7ffc0000 [ 444.047584][ T9095] active_anon:4590 inactive_anon:10 isolated_anon:0 [ 444.047584][ T9095] active_file:16592 inactive_file:9858 isolated_file:0 [ 444.047584][ T9095] unevictable:0 dirty:176 writeback:0 [ 444.047584][ T9095] slab_reclaimable:4389 slab_unreclaimable:141377 [ 444.047584][ T9095] mapped:29853 shmem:568 pagetables:1295 [ 444.047584][ T9095] sec_pagetables:0 bounce:0 [ 444.047584][ T9095] kernel_misc_reclaimable:0 [ 444.047584][ T9095] free:1715866 free_pcp:26097 free_cma:0 [ 444.052886][ T29] audit: type=1326 audit(429.217:25589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9105 comm="syz.6.7552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7f86f47cf6c9 code=0x7ffc0000 [ 444.057830][ T9095] Node 0 active_anon:18360kB inactive_anon:40kB active_file:66368kB inactive_file:39432kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119412kB dirty:704kB writeback:0kB shmem:2272kB kernel_stack:5536kB pagetables:5180kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 444.057888][ T9095] Node 0 [ 444.063037][ T29] audit: type=1326 audit(429.226:25590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9105 comm="syz.6.7552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86f47cf6c9 code=0x7ffc0000 [ 444.067194][ T9095] DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 444.067305][ T9095] lowmem_reserve[]: 0 2881 7859 7859 [ 444.389692][ T9095] Node 0 DMA32 free:2946624kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950256kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3528kB free_cma:0kB [ 444.421170][ T9095] lowmem_reserve[]: 0 0 4978 4978 [ 444.426406][ T9095] Node 0 Normal free:3901480kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18476kB inactive_anon:40kB active_file:66368kB inactive_file:39432kB unevictable:0kB writepending:820kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:100036kB local_pcp:86336kB free_cma:0kB [ 444.459761][ T9095] lowmem_reserve[]: 0 0 0 0 [ 444.464327][ T9095] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 444.477060][ T9095] Node 0 DMA32: 2*4kB (M) 1*8kB (M) 3*16kB (M) 2*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946624kB [ 444.493326][ T9095] Node 0 Normal: 2350*4kB (UME) 2286*8kB (UME) 900*16kB (UME) 453*32kB (UME) 887*64kB (UME) 644*128kB (UME) 496*256kB (UME) 510*512kB (UME) 504*1024kB (UME) 86*2048kB (UME) 641*4096kB (UM) = 3901640kB [ 444.513216][ T9095] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 444.522552][ T9095] 26981 total pagecache pages [ 444.527283][ T9095] 7 pages in swap cache [ 444.531435][ T9095] Free swap = 92220kB [ 444.535508][ T9095] Total swap = 124996kB [ 444.539777][ T9095] 2097051 pages RAM [ 444.543605][ T9095] 0 pages HighMem/MovableOnly [ 444.548306][ T9095] 81087 pages reserved [ 444.608803][ T9114] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 444.682259][T20690] Bluetooth: hci0: Frame reassembly failed (-84) [ 444.699207][ T29] audit: type=1400 audit(429.825:25591): avc: denied { create } for pid=9113 comm="syz.1.7555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 444.718592][ T29] audit: type=1400 audit(429.834:25592): avc: denied { ioctl } for pid=9113 comm="syz.1.7555" path="socket:[89178]" dev="sockfs" ino=89178 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 444.774493][ T9136] netlink: 'syz.9.7559': attribute type 1 has an invalid length. [ 444.782299][ T9136] netlink: 224 bytes leftover after parsing attributes in process `syz.9.7559'. [ 444.824426][ T29] audit: type=1326 audit(429.937:25593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9146 comm="syz.0.7560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4448cf6c9 code=0x7ffc0000 [ 444.847447][ T29] audit: type=1326 audit(429.937:25594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9146 comm="syz.0.7560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7fc4448cf6c9 code=0x7ffc0000 [ 444.870367][ T29] audit: type=1326 audit(429.937:25595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9146 comm="syz.0.7560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4448cf6c9 code=0x7ffc0000 [ 444.893569][ T29] audit: type=1326 audit(429.937:25596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9146 comm="syz.0.7560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc4448cf6c9 code=0x7ffc0000 [ 444.916511][ T29] audit: type=1326 audit(429.937:25597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9146 comm="syz.0.7560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4448cf6c9 code=0x7ffc0000 [ 444.954018][ T9136] loop9: detected capacity change from 0 to 512 [ 445.000433][ T9136] EXT4-fs (loop9): 1 truncate cleaned up [ 445.014100][ T9136] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 445.038012][ T9136] netlink: 36 bytes leftover after parsing attributes in process `syz.9.7559'. [ 445.053103][ T9136] netlink: 68 bytes leftover after parsing attributes in process `syz.9.7559'. [ 445.076392][ T1719] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.497444][ T9178] loop1: detected capacity change from 0 to 512 [ 445.504295][ T9178] EXT4-fs: Ignoring removed mblk_io_submit option [ 445.511068][ T9178] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 445.522456][ T9178] EXT4-fs (loop1): 1 truncate cleaned up [ 445.528772][ T9178] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 445.557842][T30809] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.600145][ T9186] @0Ù: renamed from bond_slave_1 (while UP) [ 445.674466][ T9193] loop1: detected capacity change from 0 to 128 [ 445.682561][ T9193] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 446.149838][ T9193] Set syz1 is full, maxelem 65536 reached [ 446.196540][T30809] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 446.209111][ T9201] Cannot find add_set index 0 as target [ 446.261235][ T9203] netlink: 'syz.8.7579': attribute type 7 has an invalid length. [ 446.269065][ T9203] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7579'. [ 446.316056][ T9198] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 446.326234][ T9198] SELinux: failed to load policy [ 446.345144][ T9215] netlink: 176 bytes leftover after parsing attributes in process `syz.9.7582'. [ 446.391107][ T9213] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7580'. [ 446.461913][ T9230] netlink: 'syz.0.7589': attribute type 4 has an invalid length. [ 446.469781][ T9230] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7589'. [ 446.495120][ T9237] loop8: detected capacity change from 0 to 128 [ 446.522608][ T9237] EXT4-fs: Mount option(s) incompatible with ext3 [ 446.551150][ T9250] siw: device registration error -23 [ 446.706986][ T9272] netlink: 'syz.0.7603': attribute type 4 has an invalid length. [ 446.714910][ T9272] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7603'. [ 446.900520][ T3520] Bluetooth: hci0: command 0x1003 tx timeout [ 446.910199][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 446.918414][ T9254] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 446.928179][ T9254] SELinux: failed to load policy [ 447.659266][ T9308] @0Ù: renamed from bond_slave_1 (while UP) [ 447.691417][ T9311] netlink: 'syz.6.7614': attribute type 4 has an invalid length. [ 447.868684][ T9333] sch_fq: defrate 0 ignored. [ 447.878555][ T9336] netlink: 'syz.0.7625': attribute type 4 has an invalid length. [ 447.921223][ T9341] FAULT_INJECTION: forcing a failure. [ 447.921223][ T9341] name failslab, interval 1, probability 0, space 0, times 0 [ 447.933973][ T9341] CPU: 1 UID: 0 PID: 9341 Comm: syz.1.7629 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 447.934002][ T9341] Tainted: [W]=WARN [ 447.934009][ T9341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 447.934022][ T9341] Call Trace: [ 447.934029][ T9341] [ 447.934037][ T9341] __dump_stack+0x1d/0x30 [ 447.934064][ T9341] dump_stack_lvl+0xe8/0x140 [ 447.934133][ T9341] dump_stack+0x15/0x1b [ 447.934152][ T9341] should_fail_ex+0x265/0x280 [ 447.934188][ T9341] should_failslab+0x8c/0xb0 [ 447.934264][ T9341] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 447.934312][ T9341] ? __alloc_skb+0x101/0x320 [ 447.934409][ T9341] __alloc_skb+0x101/0x320 [ 447.934438][ T9341] alloc_uevent_skb+0x5c/0x120 [ 447.934474][ T9341] kobject_uevent_net_broadcast+0xfb/0x410 [ 447.934512][ T9341] kobject_uevent_env+0x43d/0x570 [ 447.934621][ T9341] kobject_uevent+0x1d/0x30 [ 447.934647][ T9341] net_rx_queue_update_kobjects+0x2c5/0x540 [ 447.934679][ T9341] netif_set_real_num_rx_queues+0x163/0x1e0 [ 447.934789][ T9341] veth_set_channels+0x239/0x8c0 [ 447.934821][ T9341] ? should_fail_ex+0xdb/0x280 [ 447.934848][ T9341] ethtool_set_channels+0x38a/0x3e0 [ 447.934915][ T9341] dev_ethtool+0x1582/0x1670 [ 447.935013][ T9341] ? full_name_hash+0x92/0xe0 [ 447.935053][ T9341] dev_ioctl+0x2e0/0x960 [ 447.935081][ T9341] sock_do_ioctl+0x197/0x220 [ 447.935152][ T9341] sock_ioctl+0x41b/0x610 [ 447.935180][ T9341] ? __pfx_sock_ioctl+0x10/0x10 [ 447.935209][ T9341] __se_sys_ioctl+0xce/0x140 [ 447.935293][ T9341] __x64_sys_ioctl+0x43/0x50 [ 447.935321][ T9341] x64_sys_call+0x1816/0x3000 [ 447.935351][ T9341] do_syscall_64+0xd2/0x200 [ 447.935377][ T9341] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 447.935436][ T9341] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 447.935473][ T9341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.935493][ T9341] RIP: 0033:0x7fa63210f6c9 [ 447.935508][ T9341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 447.935555][ T9341] RSP: 002b:00007fa630b6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 447.935574][ T9341] RAX: ffffffffffffffda RBX: 00007fa632365fa0 RCX: 00007fa63210f6c9 [ 447.935587][ T9341] RDX: 0000200000000140 RSI: 0000000000008946 RDI: 0000000000000003 [ 447.935599][ T9341] RBP: 00007fa630b6f090 R08: 0000000000000000 R09: 0000000000000000 [ 447.935611][ T9341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 447.935623][ T9341] R13: 00007fa632366038 R14: 00007fa632365fa0 R15: 00007fff09aea458 [ 447.935679][ T9341] [ 448.232166][ T9351] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9351 comm=syz.9.7633 [ 448.245706][ T9351] netlink: 'syz.9.7633': attribute type 1 has an invalid length. [ 448.273852][ T9351] bond0: (slave gretap2): making interface the new active one [ 448.287320][ T9351] bond0: (slave gretap2): Enslaving as an active interface with an up link [ 448.327800][ T9397] netlink: 'syz.6.7637': attribute type 4 has an invalid length. [ 448.881993][ T9436] loop9: detected capacity change from 0 to 512 [ 448.891002][ T9436] EXT4-fs: Ignoring removed mblk_io_submit option [ 448.898045][ T9436] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 448.967667][ T9436] EXT4-fs (loop9): 1 truncate cleaned up [ 448.974873][ T9436] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 449.202448][ T1719] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.415331][ T29] kauditd_printk_skb: 610 callbacks suppressed [ 449.415413][ T29] audit: type=1400 audit(434.230:26208): avc: denied { create } for pid=9450 comm="syz.9.7656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 449.464177][ T9451] __nla_validate_parse: 4 callbacks suppressed [ 449.464193][ T9451] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7656'. [ 449.513290][ T29] audit: type=1400 audit(434.268:26209): avc: denied { nlmsg_write } for pid=9450 comm="syz.9.7656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 449.533474][ T29] audit: type=1400 audit(434.296:26210): avc: denied { egress } for pid=9450 comm="syz.9.7656" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 449.556611][ T29] audit: type=1400 audit(434.296:26211): avc: denied { sendto } for pid=9450 comm="syz.9.7656" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 449.605419][ T9453] netlink: 'syz.6.7657': attribute type 1 has an invalid length. [ 449.629768][ T9453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 449.644587][ T9453] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7657'. [ 449.663427][ T9453] bond0 (unregistering): Released all slaves [ 449.803827][ T29] audit: type=1400 audit(434.595:26212): avc: denied { read write } for pid=9524 comm="syz.9.7661" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 449.827142][ T29] audit: type=1400 audit(434.595:26213): avc: denied { open } for pid=9524 comm="syz.9.7661" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 449.856926][ T29] audit: type=1400 audit(434.642:26214): avc: denied { getopt } for pid=9524 comm="syz.9.7661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 450.007497][ T29] audit: type=1400 audit(434.782:26215): avc: denied { create } for pid=9550 comm="syz.8.7668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 450.040346][ T29] audit: type=1400 audit(434.810:26216): avc: denied { write } for pid=9554 comm="syz.6.7669" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 450.041828][ T9555] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 450.088219][ T29] audit: type=1400 audit(434.866:26217): avc: denied { ioctl } for pid=9554 comm="syz.6.7669" path="socket:[89655]" dev="sockfs" ino=89655 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 450.172758][ T9563] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7672'. [ 450.406499][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 450.433219][ T9576] loop9: detected capacity change from 0 to 512 [ 450.449090][ T9586] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7679'. [ 450.460246][ T9576] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 450.468348][ T9576] EXT4-fs (loop9): orphan cleanup on readonly fs [ 450.476528][ T9576] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #16: comm syz.9.7676: corrupted inode contents [ 450.490081][ T9576] EXT4-fs (loop9): Remounting filesystem read-only [ 450.497003][ T9576] EXT4-fs (loop9): 1 truncate cleaned up [ 450.502785][ T1739] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 450.513419][ T1739] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 450.555953][ T1739] EXT4-fs (loop9): Quota write (off=8, len=24) cancelled because transaction is not started [ 450.571522][ T9576] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 450.601295][ T9592] netlink: 'syz.1.7680': attribute type 7 has an invalid length. [ 450.609075][ T9592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7680'. [ 450.683595][ T9598] netlink: 'syz.1.7682': attribute type 1 has an invalid length. [ 450.712071][ T9598] 8021q: adding VLAN 0 to HW filter on device bond1 [ 450.727099][ T9598] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7682'. [ 450.742281][ T9598] loop1: detected capacity change from 0 to 164 [ 450.752935][ T9598] bio_check_eod: 104 callbacks suppressed [ 450.752947][ T9598] syz.1.7682: attempt to access beyond end of device [ 450.752947][ T9598] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 450.773508][ T9598] syz.1.7682: attempt to access beyond end of device [ 450.773508][ T9598] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 450.806122][ T9598] 8021q: adding VLAN 0 to HW filter on device bond1 [ 450.815004][ T9598] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 450.827070][ T9598] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 450.850767][ T3397] IPVS: starting estimator thread 0... [ 450.865879][ T9637] ip6erspan0: entered promiscuous mode [ 450.905130][ T9648] netlink: 'syz.6.7683': attribute type 1 has an invalid length. [ 450.926780][ T9648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 450.951848][ T9638] IPVS: using max 2736 ests per chain, 136800 per kthread [ 451.045904][ T9703] SELinux: Context system_u:object_r:systemd_systemctl_exec_t:s0 is not valid (left unmapped). [ 451.101859][ T9708] netlink: 'syz.8.7692': attribute type 7 has an invalid length. [ 451.109619][ T9708] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7692'. [ 451.143372][ T9714] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7691'. [ 451.226656][ T1719] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.333328][T30809] ================================================================== [ 451.341454][T30809] BUG: KCSAN: data-race in generic_fillattr / inode_add_bytes [ 451.348946][T30809] [ 451.351283][T30809] read-write to 0xffff88810430bb28 of 8 bytes by task 9738 on cpu 1: [ 451.359358][T30809] inode_add_bytes+0x47/0xe0 [ 451.363990][T30809] __dquot_alloc_space+0x180/0x8a0 [ 451.369217][T30809] shmem_inode_acct_blocks+0x129/0x240 [ 451.374719][T30809] shmem_get_folio_gfp+0x5a7/0xd60 [ 451.379950][T30809] shmem_write_begin+0xa8/0x190 [ 451.384816][T30809] generic_perform_write+0x184/0x490 [ 451.390110][T30809] shmem_file_write_iter+0xc5/0xf0 [ 451.395232][T30809] __kernel_write_iter+0x2d6/0x540 [ 451.400356][T30809] dump_user_range+0x61e/0x8f0 [ 451.405139][T30809] elf_core_dump+0x1de7/0x1f80 [ 451.409928][T30809] coredump_write+0xb12/0xe30 [ 451.414629][T30809] vfs_coredump+0x143a/0x20d0 [ 451.419347][T30809] get_signal+0xd84/0xf70 [ 451.423715][T30809] arch_do_signal_or_restart+0x96/0x440 [ 451.429276][T30809] irqentry_exit_to_user_mode+0x5b/0xa0 [ 451.434850][T30809] irqentry_exit+0x12/0x50 [ 451.439284][T30809] asm_exc_page_fault+0x26/0x30 [ 451.444138][T30809] [ 451.446458][T30809] read to 0xffff88810430bb28 of 8 bytes by task 30809 on cpu 0: [ 451.454096][T30809] generic_fillattr+0x27d/0x340 [ 451.458985][T30809] shmem_getattr+0x181/0x200 [ 451.463586][T30809] vfs_getattr_nosec+0x146/0x1e0 [ 451.468555][T30809] vfs_statx+0x113/0x390 [ 451.472818][T30809] vfs_fstatat+0x115/0x170 [ 451.477254][T30809] __se_sys_newfstatat+0x55/0x260 [ 451.482296][T30809] __x64_sys_newfstatat+0x55/0x70 [ 451.487348][T30809] x64_sys_call+0x135a/0x3000 [ 451.492037][T30809] do_syscall_64+0xd2/0x200 [ 451.496547][T30809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.502443][T30809] [ 451.504777][T30809] value changed: 0x0000000000000e58 -> 0x0000000000000e60 [ 451.511887][T30809] [ 451.514230][T30809] Reported by Kernel Concurrency Sanitizer on: [ 451.520392][T30809] CPU: 0 UID: 0 PID: 30809 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 451.527476][ T7981] hid-generic 0000:3000000:0000.0042: unknown main item tag 0x4 [ 451.531941][T30809] Tainted: [W]=WARN [ 451.531950][T30809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 451.531965][T30809] ================================================================== [ 451.539602][ T7981] hid-generic 0000:3000000:0000.0042: unknown main item tag 0x2 [ 451.604866][ T7981] hid-generic 0000:3000000:0000.0042: unknown main item tag 0x3 [ 451.620951][ T7981] hid-generic 0000:3000000:0000.0042: hidraw0: HID v0.00 Device [sy] on syz0