last executing test programs: 8m57.430600002s ago: executing program 32 (id=61): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1843, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pim6reg0\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETOWNER(r0, 0x401054d6, 0x0) 8m50.900287613s ago: executing program 33 (id=307): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000801000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8m49.976200104s ago: executing program 34 (id=333): r0 = socket(0x1e, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdb8, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f0000000200)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x43}, 0x8002}}, 0x10, 0x0}, 0x4000001) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000780)='rpc_pipefs\x00', 0x1000000, 0x0) r1 = fsopen(&(0x7f0000000280)='rpc_pipefs\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) close(0x3) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x7) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) unshare(0x28000600) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f0000000140), 0x4) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000640), 0x100, 0x0) write$binfmt_script(r3, &(0x7f00000007c0)={'#! ', './file0', [{0x20, 'usrjquota='}, {0x20, '-,*&!'}, {}, {0x20, '-##'}, {0x20, '7d.!{\''}, {0x20, '-[\\('}, {0x20, 'init_itable'}, {0x20, 'rpc_pipefs\x00'}], 0xa, "18df4f7dc94ba6c2e5aaeef21e668a94e15427456ca3b87a51eca7812e2cf8e0101bb217bbf62408912045cb665f92d0966d1ae5d75261ca8d045f37d30f89e2b208c26287588038bcf836cd190928344e90fe2d702d01d3aac22949189dd1206edeaec8da7f46b222e1bb6186caae3ceb4687b1cc7d0659f293600f517b29b45c4d92919f7e0b302e81275dd8b66abc26515826149939584c4e056861031123e09b773f9429fc11e74735a413acbacb31b63f82ea978443d368a6287d5e85588e2b1b3f9458c270f215fcaf15d285bfd77fcdb64a21a7ca8635535e20090e744f1e4d496cc48ba6539c2b92a8114f97dd31af33d163"}, 0x13b) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$key(0xf, 0x3, 0x2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/crypto\x00', 0x0, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) sendfile(r6, r5, &(0x7f0000000000)=0x9, 0x3fffff) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000800000000000061"], 0x0, 0x28}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000080000009500000010000000"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, r9, 0x8, 0x0, 0x0, 0x14, 0x0, 0x14}, 0x94) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200001b, 0x4008032, 0xffffffffffffffff, 0xd069000) mmap(&(0x7f000079d000/0x4000)=nil, 0x4000, 0x200000b, 0x4008032, 0xffffffffffffffff, 0x0) 8m49.39966552s ago: executing program 35 (id=340): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d00000085"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x4}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000540)={r2, 0x8, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff27, 0x0, 0x0}, 0x19) 8m44.248210225s ago: executing program 36 (id=401): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000440)={[{@minixdf}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@noinit_itable}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_lock}, {@jqfmt_vfsv0}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") chdir(&(0x7f0000000400)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1c0000000, 0x8004, 0x0, 0x0, 0x15, 0x7, "ef35040000003852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e676df701905b9aafa55a3f6a00400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c000000000000000005004000", [0x4]}) write$cgroup_subtree(r0, &(0x7f00000000c0), 0x0) 7m17.924168373s ago: executing program 37 (id=1804): socket$packet(0x11, 0x3, 0x300) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000300)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c6572"], 0x38}, 0x1, 0x0, 0x0, 0x24044801}, 0x20010814) close(r1) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/230, 0xe6}], 0x1, 0x5, 0x9) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r6 = socket$packet(0x11, 0x3, 0x300) r7 = timerfd_create(0x8, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000003740)=@delchain={0x1610, 0x65, 0x2, 0x70bd27, 0x25dfdbf8, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0xffffffff}, @filter_kind_options=@f_bpf={{0x8}, {0x14b4, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_POLICE={0x1420, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0xfffffffc}, @TCA_POLICE_RATE={0x404, 0x2, [0x7f, 0x3, 0x8, 0x8000, 0x10001, 0x4, 0x8000, 0x2, 0xfffffffa, 0x0, 0xfff, 0x9, 0x8, 0x2, 0x1000, 0xcf3a, 0x1, 0x5, 0x4, 0x0, 0x6ed, 0x8, 0x6, 0x9, 0xc687, 0x0, 0x3, 0x2, 0x5, 0x5, 0x0, 0x7, 0x1c9e1d46, 0xfffffffe, 0xb, 0x1c, 0x9589, 0xb, 0xd, 0x69c2, 0x4, 0xfff, 0x400, 0x6, 0x3ff, 0x4, 0x6ff, 0xd2, 0x1, 0x946, 0x8, 0xad, 0x0, 0x5, 0x9, 0xde, 0x8, 0x7f, 0x3, 0xa, 0x0, 0x5, 0xc23, 0x7, 0x1, 0x83, 0x8, 0x2, 0x7fd, 0x1d, 0xd, 0xff, 0x8000, 0x33f6, 0x88, 0x5, 0x2, 0x8, 0xc, 0x9, 0x8, 0x8, 0xfff, 0x9, 0x6, 0x5, 0x401, 0xba6b, 0x0, 0x800, 0x4, 0x6, 0x7, 0x9854, 0x400, 0x3, 0xdc1f, 0x7, 0x87, 0x101, 0x1, 0x26, 0x1, 0x6, 0x3, 0x9, 0x9, 0x7, 0x5, 0x4, 0xffffff69, 0xce, 0x5, 0x1, 0x3ff, 0x2c, 0x4, 0x8, 0x7, 0x5, 0x1, 0x5, 0xffffffff, 0x4c, 0x32, 0x72c0, 0x7fffffff, 0x1, 0x7, 0x6, 0x8, 0xc000, 0x4, 0x6, 0xf8, 0x6, 0x40, 0x3, 0x40000000, 0x200, 0x800, 0x32c7, 0x9, 0x1, 0x3, 0x1, 0x9, 0x1, 0x6, 0x79, 0x1, 0x8000, 0x10, 0x0, 0x3, 0x8, 0x5, 0x10001, 0x2, 0xb, 0x0, 0x3, 0x1, 0x2d0, 0x7, 0x8007, 0x1, 0x3, 0x4, 0x6f580908, 0x261, 0x6, 0x4, 0x4, 0x100, 0xff, 0x7, 0x0, 0x2, 0xfffff350, 0xa, 0x1ff, 0x7, 0xd, 0xffffffff, 0x5, 0x3, 0x225, 0xffffffff, 0x8001, 0x6, 0x9, 0x10000008, 0xca, 0x746, 0x3ff, 0x8, 0x10001, 0x9, 0xb826, 0x10001, 0x3, 0x0, 0x7, 0x80200, 0x1, 0xfffffff9, 0x5, 0x80000000, 0x80000001, 0x3, 0x8, 0x8001, 0x8, 0x0, 0xa, 0x0, 0x0, 0x7, 0x7, 0x1, 0x2, 0x6, 0x5, 0x4, 0x2, 0x1, 0x5, 0x1ee2000, 0x7fffffff, 0xa, 0xea, 0xf, 0x80000001, 0x3a, 0x3, 0xff, 0xef, 0x4, 0x6, 0x6, 0x8, 0x7f, 0x2, 0x2, 0x1ff, 0x4, 0x2, 0x8, 0x3, 0x4, 0xfffffff8, 0x4, 0x7, 0x3, 0x6]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7fff, 0x14, 0x0, 0x0, 0x38d6faa3, 0x400, 0xffff, 0x80, 0x4, 0x4, 0x6, 0x7, 0x7a0ced39, 0x5706ea12, 0xf0, 0x5, 0xffffff00, 0x8, 0x5, 0x1, 0x4, 0xf, 0x3ff, 0x9, 0x8, 0x18e, 0x2, 0xb66, 0x9, 0xffffffff, 0x489, 0x23, 0x3, 0xff, 0xc, 0x3, 0x7, 0x800, 0x0, 0x8, 0x8, 0x2, 0x3, 0x1, 0x1ff, 0x19d, 0x1000, 0x0, 0x9, 0x8000, 0x800, 0xbbb7, 0x10, 0x4, 0x1, 0x8, 0x8000, 0x3c4, 0x2, 0xfffffffb, 0x4, 0x7fff, 0x1, 0x2, 0xfffffff8, 0x3, 0x9, 0x6, 0x9, 0x4, 0xc4, 0x57, 0x8, 0xc, 0x2, 0x4, 0xfffffffa, 0xfffffc03, 0x44, 0xfffff7fd, 0xb, 0x10001, 0x7ff, 0xb63d, 0xfffffffe, 0xe4, 0x4, 0x5, 0x92d, 0x5, 0x400, 0x6, 0x52, 0x76, 0xffffffff, 0x8, 0x0, 0x6, 0x6, 0x2, 0x2, 0x5, 0x9a8, 0x6, 0x9a2, 0x7, 0x8001, 0x100, 0xb54, 0x2, 0x0, 0x6000000, 0x3, 0x4, 0x2, 0x2, 0xfffffff9, 0x9, 0x5, 0x79, 0xfffffff7, 0x9f7, 0x8, 0x7, 0x7, 0x2, 0x7, 0x6f95, 0x4a9, 0x112, 0x85, 0x4, 0x1, 0x101, 0x7, 0x50d6, 0x8, 0x3, 0x4, 0xffff, 0x5, 0x8f, 0x800, 0x2, 0x37, 0x8000, 0x8, 0x0, 0x3, 0x4, 0x9, 0xa, 0x5, 0x6, 0x7fff, 0x0, 0x5, 0x101, 0x4, 0x0, 0x3, 0x1, 0x919, 0x9, 0xffffffff, 0xa, 0x6, 0x200, 0x9, 0xa489, 0x1, 0x3, 0x99, 0xffffffc9, 0x4, 0x0, 0x3, 0x5, 0x6, 0x7, 0xfffffff8, 0x8, 0x748d872c, 0x800, 0x3, 0x6, 0x5158, 0x8001, 0x1, 0x8672, 0x100, 0x4, 0x5406477f, 0x6, 0x6, 0x8, 0x7f, 0x80000000, 0x2, 0x81, 0x1, 0x9, 0x0, 0x209, 0x6, 0x2, 0x0, 0xf, 0x7ff, 0x4, 0x0, 0x80, 0x1, 0x7, 0x7, 0x1, 0x0, 0x7e, 0x7, 0xb6ea, 0x0, 0x7, 0x0, 0xef6, 0x5, 0xf6, 0xd23b, 0x9, 0x7, 0xd, 0xd, 0x55, 0x9398, 0xf133, 0x4, 0x6, 0x8, 0x4, 0x4, 0xf7b8, 0x8001, 0x8, 0x7, 0x7, 0x2, 0xd, 0x5d10, 0x545, 0x9, 0xf, 0x6, 0x800, 0xfffffff7, 0x3, 0x98df, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0xe, 0x8, 0x7, 0x2, 0x8, 0x2, 0x0, 0x401, 0x0, 0x3, 0x50, 0x9, 0x9, 0x10000, 0x1, 0xc42, 0x3, 0x3, 0x2, 0x6, 0x2390, 0xffffff03, 0x988, 0x7, 0x80000000, 0x7, 0x400, 0x3, 0xce2, 0x80, 0xf3fd, 0x9, 0x7, 0x22, 0x7, 0x6, 0x674, 0x6, 0xdbd0, 0x7, 0xff, 0xff, 0x7, 0x800, 0xac17, 0x9, 0x80000001, 0x5, 0x2, 0x8, 0x4, 0xa, 0x4, 0x6, 0x3, 0x0, 0x9, 0x3, 0x100, 0x63ed, 0x5, 0x9, 0xffffffff, 0x6, 0x2, 0x5, 0x7f, 0x8, 0x100, 0x1, 0x10, 0x9, 0x2, 0xffc0, 0x0, 0xfffffff9, 0xc4c, 0xf84, 0xa1ff, 0x6, 0x38, 0x0, 0xf, 0x200, 0x9, 0x404, 0x3, 0x9, 0x5, 0xfffffff9, 0x8, 0x20009, 0x6, 0x1, 0x8, 0x7, 0x5cf2, 0x2, 0xe5, 0x4, 0x99, 0x3ff, 0x5, 0x6, 0x6, 0x101, 0x143, 0x4, 0x9, 0x7, 0x6, 0x80000001, 0x3, 0x8, 0x7, 0x9, 0x3, 0x6, 0x5, 0x0, 0x382e, 0x40, 0xfff, 0x3, 0x4, 0x9, 0x5, 0x4, 0x6, 0x7, 0xf06, 0x0, 0x0, 0xfffffff7, 0x2, 0x35, 0x10, 0x8, 0x1800000, 0x8, 0x52, 0x1, 0x8, 0x4, 0xc0e9, 0x1, 0x3, 0x3e8c, 0x6, 0x4001, 0x5, 0x2, 0xff, 0x6, 0xec04, 0x6, 0x0, 0x1e, 0x9, 0x6, 0x6, 0x3, 0x6, 0x8, 0x80000001, 0x401, 0x6, 0x2, 0x7, 0x3, 0x10001, 0x7f, 0x0, 0x33c08000, 0x101, 0x8, 0x9, 0x4, 0x7, 0x2, 0x0, 0x3, 0x9, 0xad, 0x200, 0x7be0, 0x3800, 0xb, 0x2, 0x3, 0xf, 0x7f6, 0x7, 0x0, 0x6, 0x2, 0x9, 0x8, 0x4, 0x10001, 0x34e, 0x4d, 0x4, 0x270, 0xeadb, 0x80000001, 0x101, 0x6, 0x1, 0x2, 0x6, 0x8000, 0x6, 0x2, 0xd, 0xffffffff, 0x9, 0x2, 0x2, 0xcd, 0x800, 0x73, 0xffffffff, 0xffffffff, 0x7f, 0x9, 0x20000, 0xeb, 0x3, 0x8, 0x6, 0xe3, 0x0, 0x8, 0x5, 0x5, 0xa1, 0x4, 0x3, 0xadb4, 0x8, 0x7, 0xffffffff, 0xaa8, 0x51, 0xd44b9ee, 0xd96, 0x6, 0xb8, 0x4, 0x5, 0x2, 0xc, 0x8500, 0x8de]}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x9, 0x8f, 0x4, 0x4, 0x2, 0x1000, 0x55, 0x1, 0x499, 0x81, 0x10, 0x5, 0xfffffff6, 0x7, 0x38, 0x3, 0x83, 0x2, 0xe, 0xfcd, 0x100, 0x2, 0x0, 0x2, 0xffff8e46, 0x0, 0x4c4a, 0x7, 0x9, 0x800, 0x5, 0x6c0, 0x8, 0x87e, 0x40, 0x0, 0x0, 0x1529, 0x7fff, 0x1fc9, 0x80, 0x8, 0x33, 0x101, 0x3, 0xdaa, 0x4, 0x1, 0x37, 0xc, 0x40, 0x3, 0xc, 0x0, 0x3ff, 0x3, 0x1, 0x4, 0x6, 0xffffffff, 0x8, 0x12, 0x3, 0xf60, 0x6, 0x7, 0x5, 0x0, 0x1c, 0x9, 0x1, 0xfffffc00, 0x7, 0xd6, 0x7, 0x8000, 0xfffffffc, 0x2, 0x3ff, 0x2000000, 0xf, 0x6, 0x741f8158, 0x357, 0x7ff, 0x6, 0x1, 0x1, 0x6, 0x5, 0x75b, 0x4, 0x6, 0xc, 0x6, 0x40, 0x5, 0x400, 0x0, 0xcc, 0x0, 0x5, 0x5, 0x2, 0x0, 0x4, 0x7, 0x8, 0x8, 0x5, 0x5, 0xa, 0x4, 0x4, 0x1, 0x1, 0xfff, 0x30fd8d39, 0x101, 0x8, 0x0, 0x3, 0x9, 0x80000001, 0x3, 0xff, 0x9, 0x401, 0x51, 0xd, 0xd, 0x1b, 0x7c9, 0x3, 0x0, 0x6, 0x7, 0x3, 0x7f, 0xb9c0, 0x8, 0x5, 0x30, 0xfffffff7, 0x51f, 0xb, 0x8b, 0x8, 0x9, 0x6, 0x3, 0x2, 0x200, 0xffff0faf, 0x9425, 0xa335, 0x3, 0x9e4, 0x1, 0x4, 0x8, 0x0, 0x8, 0x1, 0x5, 0x9, 0x2, 0x57af, 0x8, 0x4, 0x1b, 0x1, 0x7, 0x9, 0xbd76, 0xb, 0x2, 0x4, 0x3, 0x1800000, 0x8, 0x0, 0x2, 0x7ff, 0x2, 0x3, 0x7fff, 0x9, 0x6, 0x8, 0x7b, 0x5d, 0x6, 0x0, 0x2, 0x401, 0x9, 0x8, 0xfffffff8, 0x0, 0xffff, 0xffffffff, 0xfff, 0xb52, 0x9, 0x445, 0xffffff2a, 0xfffffffb, 0xfff, 0x8, 0x8, 0x8, 0xfffffc00, 0x3, 0x4, 0x2, 0x3, 0xff, 0x8, 0x7fff, 0x7, 0x7, 0x7fffffff, 0x80, 0x613, 0x2, 0x3, 0x101, 0x1, 0x5, 0x2, 0x92, 0x8001, 0x7, 0xa, 0x7, 0x7, 0x2, 0x5, 0x1, 0x80, 0x40000000, 0x2, 0x8, 0xaf, 0xb9, 0x1ffc0, 0xf, 0x10, 0x1, 0x0, 0x9a, 0x8, 0x18a, 0x5]}, @TCA_POLICE_RATE={0x404, 0x2, [0x101, 0x9, 0xb, 0xd, 0x101, 0x7, 0x2, 0x8, 0x9, 0x3, 0x3, 0x400, 0x8, 0x3ff, 0x10000, 0x400, 0xffff, 0x6, 0x80000000, 0x0, 0x5, 0x7, 0x28c3, 0x23b90000, 0x800, 0x2, 0x3, 0x2, 0xff, 0x1, 0xf1b, 0x3, 0x40, 0xaa, 0xe891, 0x7f, 0x0, 0x1, 0xffffff7f, 0x3a0, 0x7, 0xffffffff, 0x8, 0x6f, 0x1, 0x5, 0x4, 0x4, 0x200, 0x7ff, 0x5, 0x2, 0xf7fc, 0x6, 0x4, 0x70000000, 0x6, 0x8, 0x9, 0x9, 0xde37, 0x40, 0x4, 0x8001, 0x4, 0x81, 0xa, 0x400, 0x1415, 0x2, 0x0, 0x2, 0x8000, 0x2, 0x9, 0x3e, 0x6, 0x1000, 0x10000, 0xb, 0x7, 0x77, 0x1, 0x80, 0x200, 0x1, 0x10, 0x9, 0xfffffff7, 0x7ff, 0x100, 0x1, 0xb, 0x5, 0x5, 0x2, 0x8, 0xbae, 0x7f, 0xe44, 0x5, 0x5a6, 0x5, 0x9, 0x3, 0x1, 0x9, 0x864, 0x93e, 0x0, 0x2, 0x0, 0x6, 0x1, 0x7fff, 0xcdb, 0x1000, 0xffffffff, 0x88, 0x8, 0x7ff, 0xffff1ea5, 0xf0c, 0x9, 0x7, 0x22ec, 0x8, 0x668, 0x5, 0x8, 0x5, 0x6, 0xd3, 0x0, 0x8, 0x4, 0xfffffffe, 0xffff6e6a, 0x9, 0x8, 0x7, 0xa2, 0x80000000, 0xfff, 0x3, 0x0, 0x9, 0x6, 0x8, 0xfffffffb, 0x1, 0x5, 0x10, 0xfffffff9, 0x101, 0x1, 0x1, 0x3b0c, 0x1, 0xa, 0x6, 0x7622, 0x3699, 0x3, 0x3000, 0x0, 0x824, 0x1983, 0x1, 0x3a4c, 0x0, 0xc, 0x90, 0x0, 0x40, 0x2, 0x1, 0x6, 0x4, 0x0, 0x6, 0x6, 0xfffffffa, 0x6, 0x10001, 0x1, 0xcad, 0x9, 0x1, 0x8, 0x6ef1797f, 0x8001, 0x3, 0xc, 0x3, 0x8, 0x8, 0x8, 0x7, 0x8, 0x8, 0x8420, 0x4, 0x7df, 0x8, 0x1, 0x6, 0x7ff, 0x4, 0x41, 0x8001, 0x11c, 0x0, 0x5, 0x541, 0x1, 0x2318aac2, 0x2, 0x5, 0x6, 0x8, 0x94e, 0xc1cb, 0x4, 0x7fff, 0xfffffbff, 0x8, 0x2, 0x4a03, 0xb569, 0xffffffff, 0xfffffffe, 0x81, 0x7, 0x4, 0x9, 0x3fe, 0x9, 0x5, 0x1, 0x7, 0x2, 0x1, 0x1212, 0x8001, 0x2, 0x9, 0x8c6, 0x4, 0x8, 0xfffffff8, 0x2a, 0x4, 0x2, 0x1, 0xf47a]}]}, @TCA_BPF_ACT={0x88, 0x1, [@m_simple={0x84, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x55, 0x6, "b83be43ce3f0453fdb55a3fbb55ce131cf300b92efaf853271bbac333e650817fc6029bf8265bde8d86f1542fce993992ec472fc2cf0229c29df9308275aa845e17dc1e479ef3bdaac2b22173aa0db0c5c"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x120, 0x2, [@TCA_BPF_ACT={0x11c, 0x1, [@m_connmark={0x118, 0xa, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffe, 0x9, 0x3, 0x3, 0x1}}}]}, {0xc9, 0x6, "7d1c2f218ab42f594fe5adbe85eea4a07891f03c95b96ccd9c2cc998aa5257967475522c2ef4397c75e5cd9a15b78828602efb5bb8d8f18605fd1d4ac132fc6229edf4a2184213ba5ea94b254ee4adfe495b418382819811503deec2cd166133b7f5ce1aede8154721099eb87bbdf128c2d67d606cc26e787ce45c03fde1ba3b27d5dee1efa3eda225021429dfdbc555fa38db8cd8c88f888028d9c70ef8a8946d40da5441a39a55b3cdb62b43c2b7bc5f44599e2dcc16b860d7dbe968ccddcc329a9015e9"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}}]}, 0x1610}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r8 = socket(0x10, 0x803, 0x0) sendto(r8, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000023c0)=[{{&(0x7f00000006c0)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000002000)=[{&(0x7f0000000800)=""/172, 0xac}, {&(0x7f00000008c0)=""/75, 0x4b}, {&(0x7f0000000940)=""/250, 0xfa}, {&(0x7f0000001c00)=""/161, 0xa1}, {&(0x7f0000001cc0)=""/103, 0x67}, {&(0x7f0000001d40)=""/83, 0x53}, {&(0x7f0000001dc0)=""/128, 0x80}, {&(0x7f0000001ec0)=""/125, 0x7d}, {&(0x7f0000001f40)=""/189, 0xbd}], 0x9, &(0x7f00000020c0)=""/154, 0x9a}, 0x9}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000002180)=""/103, 0x67}, {&(0x7f0000002200)=""/235, 0xeb}, {&(0x7f0000002300)=""/160, 0xa0}], 0x3, &(0x7f0000001e40)}, 0x2}], 0x2, 0x2040000, &(0x7f0000000440)) read(r7, &(0x7f0000000380)=""/189, 0x8) timerfd_settime(r7, 0x3, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 1m41.396384443s ago: executing program 38 (id=6244): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="000000000000000000000000010000000000000085b91d6c22d9eeb2c5790db94ecbbd3611e4922cabc40000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[], 0x50) r2 = fcntl$dupfd(r1, 0x406, r0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_OCB(r2, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r3, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x20000000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000c00)=ANY=[@ANYBLOB="180000000000000000000000000000001801000009ba6c2500000000002020207b1af82100000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f0000000d00)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd60000000009c1100fe8000000000000000000000000000bbff02000000000000000000000000000100000e22009c90"], 0x0) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) recvmmsg(r5, &(0x7f0000003f40)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000080)=""/99, 0x63}, {0x0, 0x94}, {&(0x7f00000001c0)=""/66, 0x42}], 0x3}, 0x5}], 0x1, 0x40, 0x0) 1m29.448333705s ago: executing program 39 (id=6405): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x204000) (fail_nth: 5) 1m9.092859172s ago: executing program 40 (id=6690): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b703000008000040850000006900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='sys_enter\x00', r1}, 0x10) get_mempolicy(0x0, 0x0, 0x3, &(0x7f0000ffc000/0x1000)=nil, 0x3) 1m8.484240492s ago: executing program 41 (id=6701): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x25dfdbfd, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) (fail_nth: 5) 1m7.764589842s ago: executing program 3 (id=6712): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) statx(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f0000000800)) 1m7.137658304s ago: executing program 42 (id=6712): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) statx(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f0000000800)) 58.620531689s ago: executing program 43 (id=6791): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) (fail_nth: 5) 47.256512444s ago: executing program 44 (id=6935): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000140)={0x33, 0x0, 0x0, 0xdb}, 0x8) 46.492278889s ago: executing program 45 (id=6945): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xff, 0x0, 0x7ffc1ffb}]}) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000600), 0x220480) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x7}, 0x18) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000180)=ANY=[@ANYBLOB=' \x00'], 0x0) unshare(0x2020600) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000002, 0x42032, 0xffffffffffffffff, 0x80000000) 45.594330687s ago: executing program 46 (id=6957): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) socket$inet(0x2, 0x1, 0x0) mkdir(0x0, 0x0) r2 = getpid() r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x20000000000000b2, 0x1, r2}}, 0x40) prlimit64(r2, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_DISCONNECT_CLAIM(r9, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"}) ioctl$USBDEVFS_ALLOC_STREAMS(r9, 0x8008551c, &(0x7f0000000000)={0x184a, 0x1, [{0x1, 0x1}]}) syz_clone(0x60100100, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={0x0, r0}, 0x18) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="0c0100001000030400"/20, @ANYRES16=r10, @ANYBLOB="0000000000000000dc00128009000100766c616e00000000cc00028006000100000000001c0003800a000100"], 0x10c}, 0x1, 0xba01}, 0x0) 42.397044961s ago: executing program 6 (id=7001): r0 = socket$unix(0x1, 0x2, 0x0) connect$unix(r0, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e20}, 0x18) socket$tipc(0x1e, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x10) lgetxattr(&(0x7f0000000040)='./cgroup.net/cgroup.procs\x00', 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(r2, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0180000000000000000001000000000000000200", @ANYRES64=r6, @ANYBLOB="77ce23a42731011326b67db881a6aed93d84630703d4250da47ef741323433f5584bb731e644d47f012a"], 0x28}}, 0x40000) 42.377210052s ago: executing program 6 (id=7003): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0xca, &(0x7f0000000340)=[{}, {}, {}, {}], 0x20, 0x0, 0x0, &(0x7f00000003c0), 0x8, 0xda, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x60aa00, 0x0) fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10) timerfd_create(0x8, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0x3}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r7 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) flock(r7, 0x2) r8 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r8, 0x2) 41.406993558s ago: executing program 6 (id=7022): sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @remote}, 0x3, 0x4, 0x3, 0x3}}, 0x2e) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendfile(r4, r1, &(0x7f00000001c0)=0x2, 0x5) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000003880)={&(0x7f0000003800)={0x30, 0x0, 0xb, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_NAME={0x9, 0x1, 'MARK\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x30}}, 0x0) unshare(0x42000000) 40.16201115s ago: executing program 1 (id=7048): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x100000000}, 0x18) geteuid() 40.115859024s ago: executing program 1 (id=7049): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f00000002c0)={[{@errors_remount}, {@nodioread_nolock}, {@dax}]}, 0x1, 0x512, &(0x7f0000000380)="$eJzs3d9rY1kdAPDvvW1mOzNdk1WRdcF1cVc6i07Sbt3dIqLriz4tqOv7WNu0lCZNadJ1Whbt4H8ggoJPPvki+AcIwzz4B8jAgL6ID6KiiM7og6DOlSQ3TidN2rrTNp3m84HTnHPvzf2ec0NO7o/TewMYWy9FxFsRMRERr0ZEMZ+e5in2uqm93IP77y21UxJZ9s5fk0jyab11tdcxGRFX87dNRcTXvhzxzeRg3ObO7vpirVbdysuVVn2z0tzZvb5WX1ytrlY35ufn3lh4c+H1hdks90TtLPUyP/nS529/+lu/u/Hna99uV+tzH4lC9LXjJHWbXuhsi572Nto6jWAj0PvMC6OuCAAAx9Lex/9gRHyis/9fjInO3lyfiVHUDAAAADgp2Rem499JRAYAAABcWGlETEeSlvOxANORppfycwMfjitprdFsfWqlsb2x3J4XUYpCurJWq87mY4VLUUja5bl8jG2v/FpfeT4inouI7xcvd8rlpUZtecTnPgAAAGBcXO07/v9HMe3kjzbg/wQAAACA86s0tAAAAABcFA75AQAA4OLrP/6/PaJ6AAAAAKfiK2+/3U5Z7/nXy+/ubK833r2+XG2ul+vbS+WlxtZmebXRWO3cs69+1PpqjcbmZ2Jj+2alVW22Ks2d3Rv1xvZG68baY4/ABgAAAM7Qcx+/8+skIvY+e7mTIr8PIMBj/jDqCgAnaWLUFQBGxl28YXwVRl0BYOSSI+YbvAMAAE+/mY8evP7fe/6/cwNwsRnrAwDjx/V/GF8FIwBhrKUR8YFu9plhywy9/v/L40bJsoi7xf1TnF8EAICzNd1JSVrOjwOmI03L5YhnI9JSFJKVtVp1Nj8++FWx8Ey7PNd5Z3LkmGEAAAAAAAAAAAAAAAAAAAAAAAAAoCvLksgAAACACy0i/VPSuZt/xEzxlen+8wOXkn8W44954Ufv/ODmYqu1Ndee/rfOs7wuRUTrh/n014Y+PgwAAAA4acne0Fnd4/T8de5MawUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAGHhw/72lXjrLuH/5YkSUBsWfjKnO61QUIuLK35OY3Pe+JCImTiD+3q2IeH5Q/CQeZllWymvRHz+NiMunHL/U2TTD4189gfgwzu60+5+3Bn3/0nip8zr4+zeZpyc1vP9L88jPd/q5Qf3fswfWVh8Y44V7P6sMjX8r4oXJwf1Pr/9NhsR/+cDa/pVl2cEY3/j67u6w+NmPI2YG/v4kj8WqtOqblebO7vW1+uJqdbW6MT8/98bCmwuvL8xWVtZq1fzvwBjf+9jPHx7W/isD4v/2N93+97D2vzJspX3+c+/m/Q91s4VB8a+9PPD3dyqGxE/z375P5vn2/Jlefq+b3+/Fn9598bD2Lw/Z/kd9/teO2f5Xv/rd3x9zUQDgDDR3dtcXa7Xq1iGZqWMs8zRmfjF1Lqrxf2ay73Q/ufNSn/ebae+tPprSa9U5qNi+THZmsSbinDT5f5mRdksAAMApeLTTP+qaAAAAAAAAAAAAAAAAAAAAwPg6i9uJ9cfcG01TAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO9d8AAAD//yLg4A8=") socket(0x10, 0x3, 0x4) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f00000008c0)=""/235, 0x1000000, 0x1000, 0x9, 0x2}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sys_enter\x00'}, 0x10) uname(0x0) 40.002888915s ago: executing program 1 (id=7051): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x20002f7}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x100, 0x4, 0x20}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x9, &(0x7f0000000180)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x18) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000000)={0x29, 0xabe, 0x8, 0xa, 0xffffff80}) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000280)=@IORING_OP_FSYNC={0x3, 0x4d, 0x0, @fd_index=0x3}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) openat(r8, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50) faccessat(r8, &(0x7f0000000000)='./file0\x00', 0x5) 39.804741395s ago: executing program 1 (id=7052): pipe(0x0) listen(0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRES8], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file1\x00', 0x140c1, &(0x7f0000000600)=ANY=[], 0x1, 0x22d, &(0x7f0000000300)="$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") ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, &(0x7f0000000000)={0x3d, 0x101, 0x100, 0x1, 0x4, 0x18, 0x36, "e75867a0aa45de1500", "39e8799918f836f17fc65c8b001f00"}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00'}) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r4, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0xad0c24, &(0x7f00000002c0)=ANY=[], 0x1, 0x0, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000100)={0x1d, r5}, 0x10) bind$can_raw(r1, &(0x7f0000000080), 0x10) 39.733204192s ago: executing program 1 (id=7053): bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="e80b00c9"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x2, {0x1, 0xf0}, 0x1}, 0x18) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', r3, 0x0, 0x80}, 0x18) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="e80b00c9"], 0x0}, 0x94) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x2, {0x1, 0xf0}, 0x1}, 0x18) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', r3, 0x0, 0x80}, 0x18) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) 39.394373765s ago: executing program 1 (id=7059): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x80002, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000cc0)='./bus\x00', 0x0, 0x0) r4 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r5, 0x2000009) sendfile(r4, r5, 0x0, 0x6) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r6 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r7 = creat(&(0x7f0000000000)='./bus\x00', 0x0) tee(r6, r7, 0x7ffc, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000800)={'filter\x00', 0x104, 0x4, 0x3c8, 0x110, 0x110, 0x110, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@empty, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac}, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'netdevsim0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010101, 0x8, 0x1}}}, {{@arp={@loopback, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00', {}, {}, 0x0, 0x20}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x80ca, 0x8}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000005400e5012abd7000ffffffff07000000", @ANYRES32=r2, @ANYRES16=r0, @ANYRES32=r9, @ANYBLOB="00000000b3"], 0x38}}, 0x40084c0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kfree\x00', r10, 0x0, 0x2}, 0x18) recvmsg$inet_nvme(r1, &(0x7f00000002c0)={&(0x7f0000000340)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000540)=""/232, 0xe8}, {&(0x7f00000003c0)=""/167, 0xa7}, {&(0x7f0000000640)=""/122, 0x7a}, {&(0x7f00000006c0)=""/176, 0xb0}, {&(0x7f0000000780)=""/189, 0xbd}, {&(0x7f0000000840)=""/100, 0x64}, {&(0x7f00000008c0)=""/98, 0x62}, {&(0x7f0000000940)=""/160, 0xa0}, {&(0x7f0000000d00)=""/156, 0x9c}, {&(0x7f0000000ac0)=""/231, 0xe7}], 0xa, &(0x7f00000001c0)=""/14, 0xe}, 0x40002000) close_range(r3, r0, 0x2) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) ioctl$F2FS_IOC_MOVE_RANGE(r11, 0xc020f509, &(0x7f0000000c80)={r10, 0xffffffffffffffff, 0x5, 0x1}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r11}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) 39.377855707s ago: executing program 47 (id=7059): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x80002, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000cc0)='./bus\x00', 0x0, 0x0) r4 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r5, 0x2000009) sendfile(r4, r5, 0x0, 0x6) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r6 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r7 = creat(&(0x7f0000000000)='./bus\x00', 0x0) tee(r6, r7, 0x7ffc, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000800)={'filter\x00', 0x104, 0x4, 0x3c8, 0x110, 0x110, 0x110, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@empty, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac}, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'netdevsim0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010101, 0x8, 0x1}}}, {{@arp={@loopback, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00', {}, {}, 0x0, 0x20}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x80ca, 0x8}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000005400e5012abd7000ffffffff07000000", @ANYRES32=r2, @ANYRES16=r0, @ANYRES32=r9, @ANYBLOB="00000000b3"], 0x38}}, 0x40084c0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kfree\x00', r10, 0x0, 0x2}, 0x18) recvmsg$inet_nvme(r1, &(0x7f00000002c0)={&(0x7f0000000340)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000540)=""/232, 0xe8}, {&(0x7f00000003c0)=""/167, 0xa7}, {&(0x7f0000000640)=""/122, 0x7a}, {&(0x7f00000006c0)=""/176, 0xb0}, {&(0x7f0000000780)=""/189, 0xbd}, {&(0x7f0000000840)=""/100, 0x64}, {&(0x7f00000008c0)=""/98, 0x62}, {&(0x7f0000000940)=""/160, 0xa0}, {&(0x7f0000000d00)=""/156, 0x9c}, {&(0x7f0000000ac0)=""/231, 0xe7}], 0xa, &(0x7f00000001c0)=""/14, 0xe}, 0x40002000) close_range(r3, r0, 0x2) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) ioctl$F2FS_IOC_MOVE_RANGE(r11, 0xc020f509, &(0x7f0000000c80)={r10, 0xffffffffffffffff, 0x5, 0x1}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r11}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) 38.950328589s ago: executing program 6 (id=7063): pipe(0x0) listen(0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRES8], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file1\x00', 0x140c1, &(0x7f0000000600)=ANY=[], 0x1, 0x22d, &(0x7f0000000300)="$eJzs3b2KE1EYBuDP3exu2MatxWLAxiqodzDICuKAEJlCKwdWm10RZpvRKpfhNXhJXsZW6UbMhPwZbTQes/M8EOaFl8B3mpwU5yRv73+4vPh4/b799iWGwywGEZOYRpzFQRxG5878eTDLx7FqEgDAvhmPqzz1DOxWXefVUUSc/NSUX5MMBAAAAAAAAAAAwB9z/h8A+sf5/9uvrvPqdP79bZ3z/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEA607a92/7mlXo+AODvs/8DQP/Y/wGgf+z/ANA/r16/eZEXxfk4y4YRN5OmbMru2fXPnhfnj7KZs+W7bpqmPFz0j7s+W++P4nTeP9naH8fDB13/o3v6stjoT+Ji98sHAAAAAAAAAAAAAAAAAACA/8IoW9h6v380+lXfpZXfB9i4vz+Ie4N/tgwAAAAAAAAAAAAAAAAAAADYa9efPl9WV1fvakEQhEVI/ckEAAAAAAAAAAAAAAAAAAD9s7z0m3oSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEhn+f//uwup1wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0w/cAAAD//wu+k9A=") ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, &(0x7f0000000000)={0x3d, 0x101, 0x100, 0x1, 0x4, 0x18, 0x36, "e75867a0aa45de1500", "39e8799918f836f17fc65c8b001f00"}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00'}) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r4, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0xad0c24, &(0x7f00000002c0)=ANY=[], 0x1, 0x0, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000100)={0x1d, r5}, 0x10) bind$can_raw(r1, &(0x7f0000000080), 0x10) 38.816048222s ago: executing program 6 (id=7065): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYRES64=r0], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000600)=ANY=[], 0x10}], 0x1, 0x0, 0x0, 0x4000}, 0x44040) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x50) r4 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x301802, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000340), &(0x7f00000003c0)=r4}, 0x20) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_GETFSUUID(0xffffffffffffffff, 0x80111500, &(0x7f00000004c0)) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x200000d0) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000500)='kfree\x00'}, 0x18) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80040, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x32, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='rxrpc_recvmsg\x00'}, 0x18) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_flash={0x33, 0xea6, '.\x00'}}) 38.366512536s ago: executing program 6 (id=7069): setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x11, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, 0x0}, 0x108) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000540)={0x0, 0xd4bb, 0x0, 0xfffffffd}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0x10000, 0x0, 0x4) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x38, 0x20, 0x1, 0x0, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3001a}, [@FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0x8}]}, 0x38}}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000802000003c0012800b000100697036746e6c00002c000281140003002001000000000000000000000000000114000200fc020000000000000000000000000000082c84abefbca2099aff1f614b794c"], 0x5c}}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000300)=@l2tp={0x2, 0x0, @private=0xa010100, 0x2}, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x3517, 0xc2de, 0x9, 0x0, 0x0) 38.353974777s ago: executing program 48 (id=7069): setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x11, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, 0x0}, 0x108) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000540)={0x0, 0xd4bb, 0x0, 0xfffffffd}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0x10000, 0x0, 0x4) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x38, 0x20, 0x1, 0x0, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3001a}, [@FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0x8}]}, 0x38}}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000802000003c0012800b000100697036746e6c00002c000281140003002001000000000000000000000000000114000200fc020000000000000000000000000000082c84abefbca2099aff1f614b794c"], 0x5c}}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000300)=@l2tp={0x2, 0x0, @private=0xa010100, 0x2}, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x3517, 0xc2de, 0x9, 0x0, 0x0) 36.059557712s ago: executing program 3 (id=7060): capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002e40)={0x30, r3, 0xc4fc9e906872338b, 0x70bd2e, 0x0, {{0x15}, {@void, @val={0xc, 0x99, {0x4, 0x3a}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}]}]}]}]}, 0x30}}, 0x40000) syz_open_procfs(0x0, &(0x7f0000000480)='attr/fscreate\x00') setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4000804) 36.013693187s ago: executing program 3 (id=7091): r0 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0xdcb8, 0x10, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) unshare(0x20060400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000004040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x77, 0x29c780}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) io_uring_enter(r0, 0x3518, 0xaddf, 0x2, 0x0, 0x0) 35.860828642s ago: executing program 3 (id=7094): listen(0xffffffffffffffff, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRES8=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file1\x00', 0x140c1, &(0x7f0000000600)=ANY=[], 0x1, 0x22d, &(0x7f0000000300)="$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") ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, &(0x7f0000000000)={0x3d, 0x101, 0x100, 0x1, 0x4, 0x18, 0x36, "e75867a0aa45de1500", "39e8799918f836f17fc65c8b001f00"}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00'}) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) r5 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r5, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0xad0c24, &(0x7f00000002c0)=ANY=[], 0x1, 0x0, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000100)={0x1d, r6}, 0x10) bind$can_raw(r2, &(0x7f0000000080), 0x10) 35.67584852s ago: executing program 3 (id=7096): r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000640)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xff}}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x10002}}, {@dioread_lock}, {@data_err_ignore}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x100000000000000}}, {@dioread_nolock}, {@nobarrier}, {@dioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@norecovery}, {@errors_remount}, {@init_itable}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@noacl}]}, 0xfe, 0x591, &(0x7f0000001140)="$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") r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x2, &(0x7f00000001c0)=[0xee01, 0x0]) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) keyctl$chown(0x4, r1, 0xee01, r2) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x501, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x11, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c001000b7000000000000009500000000000000b7a6a3d5700801fb94514849311a0b1a7657e70f514a444df6957f7ce9f9b19fa5db7d067016512b7c303c6d9fe3f7db743032a9338d0800000000000000a7997162794b0bdf88b6a1e87dd76874e4022ce9c70c278c96b6b5c2c831c74861fe78c79ca0244cb2f5955b65c5cd3cc002f0d6e9fa610b23bdde08b6838e07c53439bd6197cf6cae4da3bac8e63804"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x22020400) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r4}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'pim6reg\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x550) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000a5"], 0x48) ioctl$PPPIOCSNPMODE(r3, 0x4008744b, &(0x7f0000000300)={0xc021, 0x3}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x24, r9, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x8, 0x2a, [@perr={0x84, 0xffffffffffffff21}]}]}, 0x24}}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES8=r9, @ANYRES32=r8, @ANYRESDEC=r9], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x18) r11 = socket$inet6_udp(0xa, 0x2, 0x0) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/meminfo\x00', 0x0, 0x0) preadv(r12, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000100)=""/123, 0x7b}], 0x2, 0x2, 0xd) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x10000000}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) 35.579911869s ago: executing program 9 (id=7098): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x100000000}, 0x18) geteuid() 35.541045773s ago: executing program 9 (id=7100): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) (fail_nth: 1) 35.156417391s ago: executing program 9 (id=7102): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000300)="359cb6", 0x3}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c"], 0x30}], 0x1, 0x0) (fail_nth: 8) 34.864997099s ago: executing program 9 (id=7105): listen(0xffffffffffffffff, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRES8=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file1\x00', 0x140c1, &(0x7f0000000600)=ANY=[], 0x1, 0x22d, &(0x7f0000000300)="$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") ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, &(0x7f0000000000)={0x3d, 0x101, 0x100, 0x1, 0x4, 0x18, 0x36, "e75867a0aa45de1500", "39e8799918f836f17fc65c8b001f00"}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00'}) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) r5 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r5, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0xad0c24, &(0x7f00000002c0)=ANY=[], 0x1, 0x0, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000100)={0x1d, r6}, 0x10) bind$can_raw(r2, &(0x7f0000000080), 0x10) 34.728558163s ago: executing program 9 (id=7107): r0 = socket$unix(0x1, 0x2, 0x0) connect$unix(r0, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e20}, 0x18) socket$tipc(0x1e, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0180000000000000000001000000000000000200", @ANYRES64=r3, @ANYBLOB="77ce23a42731011326b67db881a6aed93d84630703d4250da47ef741323433f5584bb731e644d47f012a"], 0x28}}, 0x40000) 34.472273678s ago: executing program 9 (id=7110): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r1}, 0x18) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030f0000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af03000600000000000200010000000000000000000000000002000100000000000000070c01000000030005000000000002004e21ac1e010100000000000000000200130003"], 0x78}, 0x1, 0x7}, 0x0) 34.467004369s ago: executing program 49 (id=7110): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r1}, 0x18) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030f0000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af03000600000000000200010000000000000000000000000002000100000000000000070c01000000030005000000000002004e21ac1e010100000000000000000200130003"], 0x78}, 0x1, 0x7}, 0x0) 33.603781473s ago: executing program 3 (id=7119): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r2}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) unshare(0x2c020400) r3 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r3, 0x28, 0x2, &(0x7f0000000100)=""/69, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd7000ff00df250700000008000b0004000000"], 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x20000028) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r6}, 0x38) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000c00), r0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000c80)={0x2c, r10, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x5}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x7}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40081}, 0x24040801) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18000700ed07449e000000000000000000000000f30ab233e5a6f439e96db64e3c20717aacaa0af45a587a6a8fa5b61e75cdfcce546da464683f95d1f75fa15fb8cb959033354300f49a98e2d7da97d2b4c03cb3064069a6cae00c8cd64ede68e09c37a536a85d7382ed9880a9e88a7ffca24dac3e217313aebda62504fbf8cb9edc6db1f060a2e21380", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r11}, 0x10) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffe, 0x0, 0x1) 33.603526933s ago: executing program 50 (id=7119): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r2}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) unshare(0x2c020400) r3 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r3, 0x28, 0x2, &(0x7f0000000100)=""/69, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd7000ff00df250700000008000b0004000000"], 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x20000028) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r6}, 0x38) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000c00), r0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000c80)={0x2c, r10, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x5}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x7}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40081}, 0x24040801) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18000700ed07449e000000000000000000000000f30ab233e5a6f439e96db64e3c20717aacaa0af45a587a6a8fa5b61e75cdfcce546da464683f95d1f75fa15fb8cb959033354300f49a98e2d7da97d2b4c03cb3064069a6cae00c8cd64ede68e09c37a536a85d7382ed9880a9e88a7ffca24dac3e217313aebda62504fbf8cb9edc6db1f060a2e21380", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r11}, 0x10) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffe, 0x0, 0x1) 18.420897772s ago: executing program 8 (id=7387): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sync() prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(0x0, 0x0, 0xffffffff, 0xffffffffffffffff, 0x2) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) 18.392609715s ago: executing program 8 (id=7391): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@discard}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$eJzs3d9rHNUeAPDvbJLmR3tvcuFy7+1b4EJvoHRzU2Or4EPFBxEsFPTZNmy2oWaTLdlNaULAFhF8EVR8EPSlz/6ob776A3zS/8IHaamaFis+SGR2Z5M02c2vJtloPh+YzDkzsznnO+fMzNmdYTeAQ2sw/ZOLOB4RbycR/dnyJCK6aqnOiHP17R4uLvRERCGJpaWXfkpq2zxYXCjEqtekjmaZ/0TEV29EnMytL7cyNz85VioVZ7L8cHXq6nBlbv7UlamxieJEcfrMyOjo6bNPnj2ze7H+8t38sbvvPP+/T8/99vq/b7/1dRLn4li2bnUcu2UwBrN90pXuwkc8t9uFtVnS7gqwI+mh2VE/yuN49EdHLdVC737WDADYK69FxBIAcMgkrv8AcMg0Pgd4sLhQaEzt/URif917NiJ66vE/zKb6ms7snl1P7T5o34PkkTsjSUQM7EL5gxHx4eevnOjI8mk93EsD9sONmxFxaWBw/fk/WffMwnb9f6OVS9212eCaxYft+gPt9EU6/nmq2fgvtzz+iSbjn+76sfuvxy1/8+M/d+dxy9hIOv57pv5s25rx3/JDawMdWe5vtTFfV3L5SqmYntv+HhFD0dWd5kdqmzYfuQ3d//1+q/Kz8d/H6fTzu69+lJafzle2yN3p7H70NeNj1c5vHjfwzL2b0Zcl18SfLLd/0mL8e2GLZbzw9JsftFqXxp/G25jWx7+3lm5FnGja/ittmWz4fOJwrTsMNzpFE599/35fq/JXt386peWn892PtLl7N6PWAZJkZR/U1yzHP5Csfl6zsv0yvr3V/2WrdZvH37T/jx1JXq6lj2TLro9VqzMjEUeSF9cvP73y2ka+sX0a/9B/mx//9WKb9//0PeGlLcbfeffHT3Ye/95K4x/fuP+vaf+ebPHKks0Stx9OdrQqf2vtP1pLDWVL0vbfLK6t1GtnvRkAAAAAAAAAAAAAAAAAAAAAAAAAti8XEcciyeWX07lcPl//De9/Rl+uVK5UT14uz06PR+23sgeiK9f4qsv+Vd+HOpJ9H34jf3pN/omI+EdEvNfdW8vnC+XSeLuDBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDM0Ra//5/6obvdtQMA9kxPuysAAOw7138AOHy2d/3v3bN6AAD7x/t/ADh8tnz9v7S39QAA9o/3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOyxC+fPp9PSr4sLhTQ/fm1udrJ87dR4sTKZn5ot5Avlmav5iXJ5olTMF8pTLf/RjfqsVC5fHY3p2evD1WKlOlyZm784VZ6drl68MjU2UbxY7Nq3yAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg6ypz85NjpVJx5i+RuLES2C7/5962xtV3MHbvqkRnHIhqHOhEdxyIauwwsfos0duGMxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAn8MfAQAA//94WBdi") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000080)=""/99, 0x63}, {&(0x7f0000001080)=""/140, 0x8c}, {0x0}, {&(0x7f0000000400)=""/122, 0x7a}], 0x4, 0x43, 0x80) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) write$binfmt_format(r1, &(0x7f0000000100)='0\x00', 0x2) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='sched_switch\x00', r5}, 0x18) sendto$inet6(0xffffffffffffffff, &(0x7f00000005c0), 0x0, 0x4008881, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6400000002070103000000000000000002000007240007800800024000000003080001"], 0x64}, 0x1, 0x0, 0x0, 0x440c0}, 0x4040804) write$qrtrtun(r1, &(0x7f0000000300)="ca0e808bb35b", 0x6) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x2}}, 0x40) 18.192633445s ago: executing program 8 (id=7395): syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x200408, &(0x7f0000000340)=ANY=[], 0x1, 0x1d3, &(0x7f0000001a00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfde4, 0x10, &(0x7f0000000000), 0xfe7d}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000e40)="b907ef19edfff007049e0ff0888e", 0x0, 0x6503, 0x18000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) socket$pptp(0x18, 0x1, 0x2) r1 = syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x1, 0x100002cf}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0) r4 = syz_mount_image$msdos(&(0x7f0000000940), &(0x7f0000000080)='./file0\x00', 0x2a484a8, &(0x7f0000000080)=ANY=[], 0x10, 0x0, &(0x7f0000000040)) mknodat$loop(r4, &(0x7f0000000140)='./file1/file0\x00', 0x20, 0x1) renameat2(r4, &(0x7f0000000100)='./file1/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x3) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x200408, &(0x7f0000000340)=ANY=[], 0x1, 0x1d3, &(0x7f0000001a00)="$eJzs3cFqE1EUBuAzsTapIHYniOCAG1dBfYKKRBAHRCULXSm0bhoRks3oxvoWPqAPIF11IyNmxsaWZGxjzJj0+zb5yTmTey+ESTY5eX3z3f7u+9Hbr9e/RKeTRGsnduIoie1oxS8HAQCsk6OiiG9FsdH0PgCA5ak+/8dmtHyvu94XBwBYPS9evnryIMt6z9O0E3F4kPfzfvlY1h89znp307HtyVWHed6/dFy/V9bTk/XLcSUitiLr3Z9a34w7t8fXf/5Ze/g0O1Vvx+6/Pz4AAAAAAAAAAAAAAAAAAAAAADSimx6bOt+n251VL9Nv84FOze/ZiBuGAwIAAAAAAAAAAAAAAAAAAMCZjD583H8zGOwNJ6EdESefmS8U12YuMS2kEfH3i543tGJ5a61aSP6PbZwzRDV1oqbn1mLe4c+u/qkn5nvlzYio79mqP+AiwuQe0W7m1gQAAAAAAAAAAAAAAAAAABdO9VvfZDhqeicAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Jzy//8He8N5wqeIOENztVTS8FEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABYYz8CAAD//x8yIRo=") (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="b702000024000000bfa30000000000000703000000feffff7a0af0fff8bffffd79a4f0ff00000000b7060000ffffffff2d640500000000006502040001001f000404000001007d60b7030000000000006a0a00fefdff00008500000026000000b7000000000000009500000000000000c743a0c8e3ebbadc20e5a7efcc9ac1467fb2ea80dbcf8df265e1b40e4c8afd5c0c000000008da68076774bbcdb2c769937000090af27db5b56024db96bcbbbd2cb2000ce03000000000000007e357754508535766c80114604a86fe569b05614eab9297eb290a248a120c9c6e39f403ff065fd3052aae80675eeba68562eaeaea5fecf298ca20f274233106eab63ecf772de7b265040b6c50b7420b48a93fe94c756108afcd0b2eb78040000005f02a5a6474ae549070004000000001294fba0ed5020e6474ac921fee1f6d8ad6a80c0947cd6d4a561ced21a0b4a902be6af7ec2d1ba002e57f301000000000000000000000000100000aaf25343063e6581f9e6de14ad72e5ad84309f47f96a576cd20cef7ed951a73ea73d7c7f14e306f1f1d1377e57abb1af00f0077e9d0000b93eb0f2c6f8141e350dc68147e5958128d22d586270f9dba211bfff9c3709c9b134625d3d2369f516a49eeeb1a662c8dfb875bdf5c6ba73cccdfacb202994c40d322717faff03323dce8a34ee0ca2cf61efb4b30000642735d6d482ba98d252f36c54333aab1aa736369392b9067665339820f5f1557b0bf7cc06a5a13c714e0b1a1f000000ff3283076cda3d0b1a2905cfc3d04f1db264b530abcbe44bc405f600807970727fb819afa1907228fa9e83433eedb4ac88d0285594ffb0d14c09d5c77f33702822b02488ea570204c8441ced81cacf945dcb2486c9e3600e916ae6307bd8325a442095bc9a8b0c95905979f34adddbb26f0d24425c8ab9d937d84b521914f92eed3d3e9de82942a952e86b567aff5bc2e3c1fcc00f618363df5d0d181ee8f4b8fd356c9eb365adc037e443820c05c5db16ff07a9cf471e2ebf91ab00a05f88c1cd55f8c81f5eb1f8d615ca27efb2193bb61665a1ce37f30c2efc9c3b5a4a5d95479fac471ba60fbd0e50225563cd37343d09da72472efc2b2877fbab12a891513e5f0763ae06c0610a2869747c143d75007606000000b2310e19ac58bf29d7f178d09a9f634a3ae492f54649589e3692768a0f3a082c5242c8fa7f01e0873c9c5c604108ad85950d8e08465fa1067ea8f383b3e7a7ddf5977d46f4bc38f914b4a496426d8468f9ba618b6b2218b50c8fc9efbce3ba799cf70de7e13be871aa7eb402e2b11f440361e18d4e334bfc6ae54e62e67a0338c756c544189e4519a029674e2a2bbbc7f6600000000000800000e5e30b70b198246d3a62660600000030a0af132e680510811d3ab71af5d98e2d3d928a749e8b9402d14655612bd58fb40b4625cb69bf6cea97b447f2d970d99100000000086000001b881afb2cc500003a73562af4878f75b4c98274eeb666aa1f5fcf91990cf0dcfef9540057b8a3fff2bc02c5941626d2015f414546e87835ba18e91017343e3dc6955fc6b9a25fe2a3dd8bab7f21beccba5493a164c663eceed401737c12c65804712236a9a29a43b1e27e9b6816f2328ea8423121f12b7b35aa721fef26934ccafde573bee5c33ef15309f43cbd5d61aa679a9c402d337ebf57a5eacb569401c1df7b9c45b09743c61d1db37f0000000000020000000000de00d23dd63b7761d7d6818db785d8ba13dc577fe61a68eb365de5661f43d4c789bb117a3d208ae44a38e7868dc32e132124ecf52327631b718b3157e218959156ff8e92b7e92bc275d2c9114547351a0d0f1370d13be0194b6cb68b03000000000000004f153bbc7f52861e4e5df0d19e4e40ac44cfda6f87807e5b5ed7072c04da88afd3d4b79f060e004a0e2f00b9e726ac75d2ac0691314c627e9a8a07bdd607919fd48f01ad6d2f7621d9a75b134f1bc25ed7c33d411a5baa4daa3add16afc502b2b7629541d722e91d631e5ffb9d4beb5aa5a2c4e490a5bd038c1817f0d4652a29353b05b16b3c5cf4538ba310b8cbc221af38ea842d4cb908bcd574f794459fd54b58c6a791e6df625a47bade4ba41ee014184395a479544619f749ff70088b0fd115077f7eff7c5a3315ca604d110df1c54407f191a78d8362e4dc6e1138391c2a65246779bb76c9f1daea4f085f38810edef6dd047937c231cba791a4e7713c5b3b0a0b6ba37db5016e02d114d714459d065a79609fea4efebad04eda001aac0e53dd094827453144fa419ee81823d00a90a9058ba740d2f4125377960604f521df5e325efe395a4e3b7ca8d01a8c1a7265a084e30ad10d412aee8170a7111d62473e7bd8f3d64fb7ebdd32aada331900000000000000000000000084ef49dd020000000000000000000000d9dcb285038ec38d5f4969ed0e98a71ac7bf8159a234833a5241722b2d24aa2fa4965d4eb7966fb27d118b6ef3308627e67d42f1041d5e92da28e0a7724ce715854775cbe06c5166f1dac0745f1373156a536cb6394c2c4473e2050cacf693fdf8e305080000001a901ecd90a5f53b8327a485557bc2a147b036477915e600000000034258ebbb6099b597d17ee2fc97ca850b8580b1337016a40566814594c13052b9d2b0741326825f19a244609ac04a0c29691a7c8f7a78c1a7590a293c561f304533c638ae635f5ce026f7fa034d8cfe0e11831d4829692beab26891ef583cfcb713a4d3a2d8b958c0875d7e4bdcf98802db086ebcbb9d82fa569a18f06facc2ffe1ea9ae4231e1e7a5dd7503faa2de7f898c97788c4b9c61c70ff92abdf7476cc351156d11c0ada7614f315f4c6cca119d16827d4e864f5a7a9b690272a510c451dc07f391309d02e31e53b2bf0b5f86e776b1bcfe6c85ccd7ddf8a9559d58bb5603895f265685f0400000000000000ccec1b0d45a47a89b8237cbbdab14e4ca6dc76b2c41e071b93a065c0f5aa718e1cfab29beea78a6bd9a3114f0f6f03160ec875b92be9a5862627b4bd99db2c08e4636e43f05f33535d5d1f9bb40e1fd8e5125a3d29b31dd94a6744bbc21722222b976089f073a4d3fcafc6d06518cf0c4fc6c8e3da0000000000000000000000007d3b60775243f2143d9f54804b11102cf0e4c641db1ba8bf75e46ab3a8fdece6562e7ebb3e407f3c7504dfa3da3aecbd49af3d1edeea11cc970416fadeedc8423bfdc85041ac4d8243a1130e6f4cb5bbfed9d095e18c98c7d690e4c491a7ddcd5635bc61dbed719ca28e8ca3f1fbbe588913ed057f1d6e34a79f4dc10df54d1993a5bc5f9ef6dbd339ee4b0b5764169f305e284ef82cc23e9366d4bc7eb45c7230b13433e5240657cb8eba33260147be8620b6d98cc48b000000000000000000000000c1ce872b18984f080100000000000000bd3fded92547d41809b398f36749083a147eb09ff1ed601bd36b873d3947fb223da647052528e0466cb917db7800f7c7000b593fca1903991cca1343882e3a1f60044f11c081dae4fc5bcf20efacdd2c577f4bcda2eea6f75a31dc90eebb6135b6fb824052181b0ad8a49ebf03ccf61d7e39bf6b0762d24d19796016301d1415b5110ba9df7f204aedb2a2e4e621c0553d312b309db67192f98ef7800000d629c04e216afc8fc66616bbf304e452373aa927c2ad6f5417f1b9bc322b802c1c42112a92a331cdc113b9ace3ff52ede7a853f9a89002ba070bac2f635a03db3375e5564f1a798bf9c0f8c72725d2eca9b0ec7e453d78ea20eca61530fe574299b393ca144adcb06108dfbb934065a87972739150a8752ac111c4d9062ccb95c54034fbdee131d94dfbaab1854d55665746fb7b47d25e54070b0d14c0a29c57bc4930075e1761913b036d43852c6df9f10e15105b2a18668298a3577943514db0dce953dcec62139ff3f16066efec5d8cbc0600000000007289be5883aab951ea67cf2ff691d05c1ea91dd569ed9897fe8d88a0a6977dc8955be17e8026aff11c61fa5cc76196c14233d597345253baa1537eb6962a3ce1fe5d5ab46938e8fb23fa7047bc59c4345e912585a9adb5fe2ff51b64a326321b594e3f2d339f4090bdae6b30b62064bacbc155d3c930576f506b093ca7c60957bdfdd6536baaa871cf6a603c736b78761e6463b8ac503e219cc3d98f649602ad24d5667368290ee926fba76ee482a201a03efece3b236f4ee2ffcd5d90d92a2f0c5cb2791add8279c491fa48c87f27c2f1e92988a6508c12f6b7755cc48eb10edafca92cb0260c72295a27a24846d3a2334bd60e94c0fd07e5db0a4964a7fc4e89f11a300510776934e87bb3c21394f46954a012b2a3b0760f1bad1dbd6b466e0000000000000000008e5f9004e01fe2b177c5f443d09de4ba8f72d534405f9e7807c864bbca5893376420e38cf47a3660a2ab17b20baa271aa9eaffc19b50f291f51a7cc935023382bd80d7bca313636f3aaa6b788b233097bd545d9bf9715fbf"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfde4, 0x10, &(0x7f0000000000), 0xfe7d}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000e40)="b907ef19edfff007049e0ff0888e", 0x0, 0x6503, 0x18000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) socket$pptp(0x18, 0x1, 0x2) (async) syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x1, 0x100002cf}, &(0x7f0000000000), &(0x7f0000000040)) (async) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) (async) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0) (async) syz_mount_image$msdos(&(0x7f0000000940), &(0x7f0000000080)='./file0\x00', 0x2a484a8, &(0x7f0000000080)=ANY=[], 0x10, 0x0, &(0x7f0000000040)) (async) mknodat$loop(r4, &(0x7f0000000140)='./file1/file0\x00', 0x20, 0x1) (async) renameat2(r4, &(0x7f0000000100)='./file1/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x3) (async) 18.03638809s ago: executing program 8 (id=7399): pipe(0x0) listen(0xffffffffffffffff, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRES8=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file1\x00', 0x140c1, &(0x7f0000000600)=ANY=[], 0x1, 0x22d, &(0x7f0000000300)="$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") ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, &(0x7f0000000000)={0x3d, 0x101, 0x100, 0x1, 0x4, 0x18, 0x36, "e75867a0aa45de1500", "39e8799918f836f17fc65c8b001f00"}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00'}) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r4, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0xad0c24, &(0x7f00000002c0)=ANY=[], 0x1, 0x0, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000100)={0x1d, r5}, 0x10) bind$can_raw(r1, &(0x7f0000000080), 0x10) 17.860615548s ago: executing program 8 (id=7404): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000300000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r0) 17.83127931s ago: executing program 8 (id=7406): r0 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000580)='$\x00\x19y\x01\xff\xb4\x9e\x95oQE\xc9\x1f|\bZ\xf44\x7f)\x03c\x9a\x85\x01V\xb8p+\x84\xfb\xe6?\x88\xe9\x98Y\x0e\xd5P\xa2\xcc\x01*\xcd%v!\x82\xf1\xaaB\x04-\x88\xeb-q8\x03\xadO\xa0F\xc5Z\x0f\xee\x94\xfcy\xa5\xa4L\xa1\xd7g\x9d\xd2m5r\xef\xe1\xd1\x87\x1aM\xa6\xa8\xa2\xef\xb0\x9e\xa9d\xee\xacl\x9c\xcb\x03\x17\xbbG\x15\xba3\xa5r<]T\xc6R\x03\xee#\x0f\x88\xc4\xd3\x02\xd1 @\r\x1cc\xe4|\x13H\xc2\x1fq\x88\xdd\x98\xe1~\xb0\xedK\x17x\v\x9b\xaa\xb4\a\xb6\x8b\x9e*=\x8f\x05\x8b\x88\xc9\x12\xa6\x8fs\x98\xf1\xfe\xcdX\xce,AD\xd2v\xf4\xe5\xd3\xf3\xf1TY\x1c\x8a\x98\xf8\xcf6\xc3>]l\xdaQ\xac\n{)\xc9\x95\xb4\x12j}8\x03\xba&\xe8p\xe8\xf0\xa4\xa6e\xbc\xef\x93%/x\x19\xaa\xb5\x97\x98A\\\x91\x9a \xa8\xf8a\xd8\x97\x1eR\xaf\xc8\x9f', 0x0) read$ptp(r0, &(0x7f0000000280)=""/176, 0xb0) 17.792116154s ago: executing program 51 (id=7406): r0 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000580)='$\x00\x19y\x01\xff\xb4\x9e\x95oQE\xc9\x1f|\bZ\xf44\x7f)\x03c\x9a\x85\x01V\xb8p+\x84\xfb\xe6?\x88\xe9\x98Y\x0e\xd5P\xa2\xcc\x01*\xcd%v!\x82\xf1\xaaB\x04-\x88\xeb-q8\x03\xadO\xa0F\xc5Z\x0f\xee\x94\xfcy\xa5\xa4L\xa1\xd7g\x9d\xd2m5r\xef\xe1\xd1\x87\x1aM\xa6\xa8\xa2\xef\xb0\x9e\xa9d\xee\xacl\x9c\xcb\x03\x17\xbbG\x15\xba3\xa5r<]T\xc6R\x03\xee#\x0f\x88\xc4\xd3\x02\xd1 @\r\x1cc\xe4|\x13H\xc2\x1fq\x88\xdd\x98\xe1~\xb0\xedK\x17x\v\x9b\xaa\xb4\a\xb6\x8b\x9e*=\x8f\x05\x8b\x88\xc9\x12\xa6\x8fs\x98\xf1\xfe\xcdX\xce,AD\xd2v\xf4\xe5\xd3\xf3\xf1TY\x1c\x8a\x98\xf8\xcf6\xc3>]l\xdaQ\xac\n{)\xc9\x95\xb4\x12j}8\x03\xba&\xe8p\xe8\xf0\xa4\xa6e\xbc\xef\x93%/x\x19\xaa\xb5\x97\x98A\\\x91\x9a \xa8\xf8a\xd8\x97\x1eR\xaf\xc8\x9f', 0x0) read$ptp(r0, &(0x7f0000000280)=""/176, 0xb0) 2.809173844s ago: executing program 5 (id=7664): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) close(r0) 2.75045461s ago: executing program 5 (id=7666): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000340), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r1}, 0x18) r2 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r2, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) 2.712963873s ago: executing program 5 (id=7670): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) fcntl$setlease(r0, 0x400, 0x0) fremovexattr(r0, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00') 2.662789488s ago: executing program 5 (id=7673): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000005c0)={0x154, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xe4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x93, 0x5, "b0733c33a00f9eb63171581935ca7af52b2c736c4e3d25a1abeb5ed75ee2841ef643aa834a7923183d02b5673cc254c2db82abd3d8b257471582c5dab92568bba1300a49c4dd4dafcad72187ade716fbdc28682cd60e719c5a388ea1b393061871724023af23abb66835967d3500dc7d073e2a3ddb5736238ebe5eee62002d17ee2eb226123ecfdaae82613d72639e"}, @ETHTOOL_A_BITSET_BITS={0x44, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7fffffff}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}]}]}, 0x154}}, 0x4004080) 2.662234978s ago: executing program 5 (id=7674): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000400000028"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x18) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000017c0)=@newtaction={0x898, 0x30, 0xfbed, 0x70bd29, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0xb, 0xffffffffffffffff}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, 0x0, 0x4, 0x5, 0x2, 0x4000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x5f41fde7, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x6, 0x0, 0x0, 0x7ff, 0x0, 0x4e16, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7fe6bd0, 0x6, 0x1ffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaa84911, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0xfff, 0x1, 0x0, 0x0, 0x0, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3a4f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x894e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x17a00, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400400, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffbffff, 0x0, 0x0, 0xcd9, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x319e, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0xfffffffc, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0xfffc, 0x5}, {0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) 2.614809493s ago: executing program 5 (id=7677): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000010c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f00000010c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r1, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x7) r3 = dup(r0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x3, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x80000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sys_enter\x00', r5}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="9b5800"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0008000000010000000000002000000000000000000000000000000083471f998e7d6a935ccd0bda743c46dbbf7dda1ba13b3ba0"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000880)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x24, 0x16, 0xa01, 0x0, 0x0, {}, [@typed={0x4}, @typed={0xc, 0xa, 0x0, 0x0, @u64}]}, 0x24}}, 0x0) r10 = gettid() rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x90000000, 0x0}, 0x0, 0x8, &(0x7f0000000200)) tkill(r10, 0x16) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) fsetxattr$security_selinux(r3, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) 2.317910822s ago: executing program 0 (id=7698): mkdir(0x0, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = fcntl$getown(0xffffffffffffffff, 0x9) write$P9_RGETLOCK(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="3200000037010000f2ffffffffffffff01fcffffffffffff", @ANYRES32=r2, @ANYBLOB="1400757365722e696e6366732a6da408000061746100a70f2df2562409"], 0x32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000008580)=[{{&(0x7f00000004c0)=@nfc_llcp, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000540)=""/134, 0x86}, {&(0x7f0000000600)=""/172, 0xac}, {&(0x7f0000000f80)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/227, 0xe3}, {&(0x7f00000007c0)=""/16, 0x10}, {&(0x7f0000000800)=""/209, 0xd2}, {&(0x7f0000000900)=""/97, 0x61}], 0x7, &(0x7f0000000a80)=""/150, 0x96}, 0x4}, {{0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000000b40)=""/178, 0xb2}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000000c80)=""/168, 0xa8}, {&(0x7f0000000d40)=""/104, 0x71}, {&(0x7f0000003d80)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/125, 0x7d}, {&(0x7f0000004d80)=""/4096, 0x1000}, {&(0x7f0000000e40)=""/79, 0x4f}], 0x9, &(0x7f0000002040)=""/217, 0xd9}}, {{&(0x7f0000002140)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000980)=[{&(0x7f00000021c0)=""/154, 0x9a}], 0x1}}, {{&(0x7f0000002280)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000002300)=""/240, 0xf0}], 0x1, &(0x7f0000002400)=""/244, 0xf4}, 0x4}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f0000002500)=""/128, 0x80}, {&(0x7f0000002580)=""/236, 0xec}], 0x2}, 0x5}, {{&(0x7f00000026c0)=@sco, 0x80, &(0x7f0000002c80)=[{&(0x7f0000002740)=""/71, 0x47}, {&(0x7f00000027c0)=""/19, 0x13}, {&(0x7f0000002800)=""/135, 0x87}, {&(0x7f00000028c0)=""/215, 0xd7}, {&(0x7f00000029c0)=""/157, 0x9d}, {&(0x7f0000002a80)=""/15, 0xf}, {&(0x7f0000002ac0)=""/164, 0xa4}, {&(0x7f0000002b80)=""/195, 0xc3}], 0x8, &(0x7f0000005d80)=""/157, 0xa}, 0x8}, {{&(0x7f0000005e40)=@un=@abs, 0x80, &(0x7f0000007200)=[{&(0x7f0000005ec0)=""/4096, 0x1000}, {&(0x7f0000002d00)=""/15, 0xf}, {&(0x7f0000006ec0)=""/119, 0x77}, {&(0x7f0000006f40)=""/58, 0x3a}, {&(0x7f0000006f80)=""/24, 0x18}, {&(0x7f0000006fc0)=""/108, 0x6c}, {&(0x7f0000007040)=""/232, 0xe8}, {&(0x7f0000007140)=""/185, 0xb9}], 0x8, &(0x7f0000007280)=""/193, 0xc1}, 0xffff}, {{&(0x7f0000007380)=@sco={0x1f, @none}, 0x80, &(0x7f00000084c0)=[{&(0x7f0000007400)=""/142, 0x9d}, {&(0x7f00000074c0)=""/4096, 0x1000}], 0x2, &(0x7f0000008500)=""/121, 0x79}, 0xfffffffd}], 0x8, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x3, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r8) sendmsg$ETHTOOL_MSG_TSINFO_GET(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002dbd7000fedbdf2531000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r10) request_key(&(0x7f0000000400)='cifs.idmap\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000002d40)='user.incfs.metadata\x00', 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.812870282s ago: executing program 4 (id=7708): ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYRESOCT=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a06580200ff0000000000000020ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000b0c10000000224effffffff", 0x58}], 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_io_uring_setup(0x77fd, &(0x7f0000000140)={0x0, 0x40, 0x1000, 0x4}, &(0x7f00000001c0)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x0, &(0x7f0000000080)=0xb, 0x0, 0x4) syz_io_uring_submit(r6, 0x0, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r5, 0x6e2, 0x3900, 0x3, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x0, 0x12, r8, 0x0) write$cgroup_subtree(r8, &(0x7f0000000240)=ANY=[@ANYBLOB="9cc6a6209a4b"], 0x7) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8446, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffc, 0x20000002, 0x0, 0x0, 0x40}, 0x0, 0x200000000, 0xffffffffffffffff, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r9, 0x0) 1.412416321s ago: executing program 0 (id=7711): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) sendmsg$tipc(r1, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) 1.075259144s ago: executing program 0 (id=7714): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYRES64=r0], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000600)=ANY=[], 0x10}], 0x1, 0x0, 0x0, 0x4000}, 0x44040) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x50) r4 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x301802, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000340), &(0x7f00000003c0)=r4}, 0x20) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_GETFSUUID(0xffffffffffffffff, 0x80111500, &(0x7f00000004c0)) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x200000d0) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000500)='kfree\x00'}, 0x18) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80040, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000780)=ANY=[@ANYBLOB="0180c200000200000000000008004500002400000000040ee0000001000017c10010905f7e7f582f4948c5e4000000000000"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_flash={0x33, 0xea6, '.\x00'}}) 961.935585ms ago: executing program 4 (id=7721): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000720000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0xf1c38fa000000000}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014400000000c0a01011d000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 927.723059ms ago: executing program 4 (id=7722): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000720000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0xf1c38fa000000000}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014400000000c0a01011d000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 901.301111ms ago: executing program 4 (id=7724): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000"], 0x0}, 0x94) r2 = memfd_create(&(0x7f0000000080)='%\x00', 0x3) fsetxattr$system_posix_acl(r2, &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="0a0000000100040000000000021103a2", @ANYRES32=0x0, @ANYBLOB="040000000000000010000700000000002000000000000000"], 0x4, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x0, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8) sendto$inet(r3, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a068ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) r6 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x9c, 0x24, 0xd0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x200, 0x0, 0x1]}}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x0, 0xb, 0xc}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) recvfrom$inet(r3, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r9}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x25b6, 0x4) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) 514.233329ms ago: executing program 2 (id=7738): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0180000000000000000001000000000000000200", @ANYRES64=r2, @ANYBLOB="77ce23a42731011326b67db881a6aed93d84630703d4250da47ef741323433f5584bb731e644d47f012a"], 0x28}}, 0x40000) 513.790469ms ago: executing program 2 (id=7739): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7fffffffffffffff}, 0x18) r2 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x1, 0xa, 0x3, 0x0, 0x0, {0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x8000000) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x4, [@func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x6}, {0x9, 0x3}, {0x9, 0x5}, {0xb, 0x2}, {0xd, 0x1}]}, @func={0x2}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x5c}, 0x28) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000080)=0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0x1a, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9361}]}, &(0x7f0000000180)='syzkaller\x00', 0x800, 0xfc, &(0x7f00000005c0)=""/252, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x22, r6, 0x8, &(0x7f0000000200)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0x1, 0x8001, 0x9b}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)=[r0, 0x1, r3], 0x0, 0x10, 0x3ff}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000800)={@cgroup=r3, 0x24, 0x0, 0xffff0001, &(0x7f0000000400)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000440)=[0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000840)={@cgroup=r3, r8, 0x1c, 0x0, 0x0, @void, @value=r3, @void, @void, r9}, 0x20) ptrace$ARCH_SHSTK_DISABLE(0x1e, r7, 0x2, 0x5002) 458.605884ms ago: executing program 2 (id=7740): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000140)=@RTM_DELMDB={0x38, 0x54, 0x93d, 0x0, 0xffe, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x3, 0x0, {@ip4=@broadcast, 0x86dd}}}]}, 0x38}}, 0x0) 458.299675ms ago: executing program 2 (id=7741): capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002e40)={0x24, r3, 0xc4fc9e906872338b, 0x70bd2e, 0x0, {{0x15}, {@void, @val={0xc, 0x99, {0x4, 0x3a}}}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x24}}, 0x40000) syz_open_procfs(0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010"], 0x30}}], 0x1, 0x4000804) 458.030265ms ago: executing program 2 (id=7742): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x0, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ac0)={r0, r1}, 0xc) 412.436619ms ago: executing program 7 (id=7746): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x2, &(0x7f00000001c0)=[0xee01, 0x0]) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) keyctl$chown(0x4, r1, 0xee01, r2) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x501, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x11, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c001000b7000000000000009500000000000000b7a6a3d5700801fb94514849311a0b1a7657e70f514a444df6957f7ce9f9b19fa5db7d067016512b7c303c6d9fe3f7db743032a9338d0800000000000000a7997162794b0bdf88b6a1e87dd76874e4022ce9c70c278c96b6b5c2c831c74861fe78c79ca0244cb2f5955b65c5cd3cc002f0d6e9fa610b23bdde08b6838e07c53439bd6197cf6cae4da3bac8e63804"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x22020400) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r4}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'pim6reg\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x550) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000a5"], 0x48) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$PPPIOCSNPMODE(r3, 0x4008744b, &(0x7f0000000300)={0xc021, 0x3}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x24, r10, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x8, 0x2a, [@perr={0x84, 0xffffffffffffff21}]}]}, 0x24}}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES8=r10, @ANYRES32=r8, @ANYRESDEC=r10], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x18) r12 = socket$inet6_udp(0xa, 0x2, 0x0) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/meminfo\x00', 0x0, 0x0) preadv(r13, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000100)=""/123, 0x7b}], 0x2, 0x2, 0xd) setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x10000000}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) 411.516059ms ago: executing program 2 (id=7747): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000001000000070000000c"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{r0}, &(0x7f00000005c0), &(0x7f0000000600)='%-5lx \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) socketpair(0x2c, 0x3, 0x6, &(0x7f0000000000)) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0xffffff1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r8}, 0x10) r9 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, 0x0, 0x0) 273.561743ms ago: executing program 7 (id=7748): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x11, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c001000b7000000000000009500000000000000b7a6a3d5700801fb94514849311a0b1a7657e70f514a444df6957f7ce9f9b19fa5db7d067016512b7c303c6d9fe3f7db743032a9338d0800000000000000a7997162794b0bdf88b6a1e87dd76874e4022ce9c70c278c96b6b5c2c831c74861fe78c79ca0244cb2f5955b65c5cd3cc002f0d6e9fa610b23bdde08b6838e07c53439bd6197cf6cae4da3bac8e63804"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r2}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'pim6reg\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x550) 273.006173ms ago: executing program 7 (id=7749): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0180000000000000000001000000000000000200", @ANYRES64=r2, @ANYBLOB="77ce23a42731011326b67db881a6aed93d84630703d4250da47ef741323433f5584bb731e644d47f012a"], 0x28}}, 0x40000) 257.574514ms ago: executing program 7 (id=7750): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x9, 0x3, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x84000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002000)=[{{&(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000080)=[{&(0x7f00000017c0)="a905000000017464000100000000000700e5c06417e436a10699050000003102ab85df5a", 0x24}], 0x1}}, {{&(0x7f0000001840)={0x2, 0x4e24, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x10}}], 0x10}}], 0x2, 0x40000) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x6, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) socket(0x80000000000000a, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) socket$inet6(0xa, 0x2, 0x6c5) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r4 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000740)={0x0, 0x300, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) 230.395177ms ago: executing program 7 (id=7751): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000005c0)={0x154, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xe4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x93, 0x5, "b0733c33a00f9eb63171581935ca7af52b2c736c4e3d25a1abeb5ed75ee2841ef643aa834a7923183d02b5673cc254c2db82abd3d8b257471582c5dab92568bba1300a49c4dd4dafcad72187ade716fbdc28682cd60e719c5a388ea1b393061871724023af23abb66835967d3500dc7d073e2a3ddb5736238ebe5eee62002d17ee2eb226123ecfdaae82613d72639e"}, @ETHTOOL_A_BITSET_BITS={0x44, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7fffffff}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}]}]}, 0x154}}, 0x4004080) 208.903149ms ago: executing program 7 (id=7752): socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x5, 0x0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2e, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT') r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2}, &(0x7f0000000280), &(0x7f00000002c0)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d900"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, 0x0) clock_nanosleep(0x2, 0x0, 0x0, 0x0) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r7, 0x89a2, &(0x7f0000000200)='bridge0\x00') ioctl$sock_SIOCBRDELBR(r6, 0x89a3, &(0x7f0000000200)='bridge0\x00') r8 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000680)) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00020020800000002000120065727370616a000010008280040012000800150055c70d0200000000"], 0x40}}, 0x40000c0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x6}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40080}, 0x4000c00) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r10}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x4}, 0x18) socket$nl_audit(0x10, 0x3, 0x9) 202.04786ms ago: executing program 0 (id=7753): capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002e40)={0x24, r3, 0xc4fc9e906872338b, 0x70bd2e, 0x0, {{0x15}, {@void, @val={0xc, 0x99, {0x4, 0x3a}}}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x24}}, 0x40000) syz_open_procfs(0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000"], 0x30}}], 0x1, 0x4000804) 180.814382ms ago: executing program 0 (id=7754): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xa, 0x4, &(0x7f00000004c0)=@framed={{}, [@exit]}, 0x0, 0x40, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) socket$packet(0x11, 0xa, 0x300) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xd, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LISTALL(r5, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x124, r6, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0xbc, 0xc, 0x0, 0x1, [{0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5699}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf802}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1cfc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f2c3840}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x19390bcb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5df54627}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf6b5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2d187685}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1e06}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3e84b9c7}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8152}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd458}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2dd5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf46b}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9f71}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x10086583}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x45cf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x87f7}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc7e8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x47919a1b}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x4c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0xdc0236a02fd01fa0}, {0x5, 0x3, 0x5}, {0x5}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x880}, 0x4000800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r7 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r7, 0x40044590, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="180039071494b83ff3e18643723c904ea3dce95e4836becbe3b85969ccd958208cf8094fabc5027d7175473beb48178158ee63d41a49020000000829895db0a91b7f0a59b980284336abad65401c9a4ce4db60f6da8085d0dd9fd46480fd0448e3b5876f6df8c5b3382005f20df73dba0121971de77cf500"/148, @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r10}, 0x10) fremovexattr(r8, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00') 127.654467ms ago: executing program 0 (id=7755): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) r1 = epoll_create1(0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280), 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000400)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000600)="87fc5d85da21530562070095c108", 0x0, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x40}, 0x50) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r4, 0x3) syz_emit_ethernet(0xf2, &(0x7f0000000400)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0xbc, 0x6, 0xff, @empty, @local, {[@dstopts={0x0, 0x7, '\x00', [@generic={0xda, 0x34, "3db0308624811a1d1357e038c9217577246ccbf0fbd8e546ae7877b3da9a416fccc83a1171acda3e578e380d27c8a95ca7b3229e"}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @pad1]}, @hopopts={0x3a, 0xa, '\x00', [@pad1, @calipso={0x7, 0x28, {0x2, 0x8, 0x9, 0x1624, [0x0, 0x50, 0xec, 0xffff]}}, @enc_lim={0x4, 0x1, 0xe}, @jumbo={0xc2, 0x4, 0x1}, @jumbo={0xc2, 0x4, 0x66bb}, @generic={0x7, 0xd, "a9da1abb7eeaf8f5fd4dd5a017"}, @pad1, @pad1]}], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0xc7, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604000000091060100000000000000000000000000000000fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500700009078000f7de2093fb516b5f02e4759f9e851b211e54ddfa4f2b1dd0c15d8ec22686962d28970af914c08130edfbb407ede0134e77b93f1ebe2deb664bffb44ac8b990031594e4a460139939dd85b74e9a7bfab53649ee414748297ab66cff983449d11433b45f89b0da913f4d23cf584231bd74b6c113f01c188fb927273e8ef1f"], 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x30000009}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x6, 0x3}, 0x0, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000611930000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x0, 0x0, 0x1000, 0x0, &(0x7f0000001700)=""/4096, 0x40001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$inet6_udp(0xa, 0x2, 0x0) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="73656375726974792e2d2d212d000f3b2e0bb91e85feb70004dccfd6b611a8d16860c30608abc7d4ada6fe6bdeccabe7"], &(0x7f0000000380)=""/70, 0x46) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000300)={@dev={0xfe, 0x80, '\x00', 0xe}, @dev={0xfe, 0x80, '\x00', 0x2f}, @empty, 0x8, 0x0, 0xccc5, 0x400, 0x0, 0x4d30356}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0xffffffffffffff2b) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r8) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='.\x00', 0x105680, 0x0) getdents(r9, &(0x7f0000000080)=""/43, 0x39) getdents(r9, 0x0, 0xbb) 43.297835ms ago: executing program 4 (id=7756): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0xf1c38fa000000000}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014400000000c0a01011d000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=7757): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r0, @ANYRES8=r0, @ANYRESHEX=r0, @ANYRESDEC, @ANYRES64=0x0, @ANYBLOB="702bfa51113483e5a9184df20315128b899094c74147bc7c68112ee9ba9c5b0f35bde1ea7630a3e3ac22c54cfc72ac22d4eb9867756038369f1e22254768a01bcdf9117141da0255554c3945accf21410961d9c4bd65d3473f1c889ea01cfd9ff2e9a39c8a0670d2cbf81a73673dd30ef902d8ac403982175584728e9c41dd478c4e8ad87aebbe1a670367ee17325a30e27cad3794347bd64268f87aedbacc59fa2de09008b73e62f76fe6acc98f282cfcf08045ccfed1031f5a3cd493bc8900", @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) close(0xffffffffffffffff) kernel console output (not intermixed with test programs): 835706][T25828] infiniband syz2: added lo [ 529.852711][T25804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 529.859782][T25804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 529.885751][T25804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 529.900925][T11160] lo speed is unknown, defaulting to 1000 [ 529.907457][T25828] RDS/IB: syz2: added [ 529.915448][T25828] smc: adding ib device syz2 with port count 1 [ 529.922166][T25828] smc: ib device syz2 port 1 has no pnetid [ 529.936220][T25804] hsr_slave_0: entered promiscuous mode [ 529.942427][T25804] hsr_slave_1: entered promiscuous mode [ 529.948515][ T23] lo speed is unknown, defaulting to 1000 [ 529.956206][T25828] lo speed is unknown, defaulting to 1000 [ 529.968018][T25852] futex_wake_op: syz.9.7072 tries to shift op by 144; fix this program [ 529.994634][T25852] netlink: 5452 bytes leftover after parsing attributes in process `syz.9.7072'. [ 530.045461][T25840] lo speed is unknown, defaulting to 1000 [ 530.054256][T25828] lo speed is unknown, defaulting to 1000 [ 530.108775][T25828] lo speed is unknown, defaulting to 1000 [ 530.145036][ T298] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.156729][T25828] lo speed is unknown, defaulting to 1000 [ 530.189759][T25840] lo speed is unknown, defaulting to 1000 [ 530.222506][T25828] lo speed is unknown, defaulting to 1000 [ 530.292879][T25828] lo speed is unknown, defaulting to 1000 [ 530.312265][T25840] chnl_net:caif_netlink_parms(): no params data found [ 530.338340][T25828] lo speed is unknown, defaulting to 1000 [ 530.365024][T25840] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.372195][T25840] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.380205][T25856] rdma_rxe: rxe_newlink: failed to add lo [ 530.386565][T25840] bridge_slave_0: entered allmulticast mode [ 530.393496][T25840] bridge_slave_0: entered promiscuous mode [ 530.402602][T25840] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.409686][T25840] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.418063][T25840] bridge_slave_1: entered allmulticast mode [ 530.425105][T25840] bridge_slave_1: entered promiscuous mode [ 530.434817][ T298] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.466084][T25840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 530.479414][ T298] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.493632][T25840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 530.519172][T25840] team0: Port device team_slave_0 added [ 530.539850][T25840] team0: Port device team_slave_1 added [ 530.569136][ T298] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.597132][T25840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 530.604230][T25840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 530.630256][T25840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 530.642869][T25804] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 530.651921][T25874] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 530.659558][T25804] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 530.668497][T25804] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 530.679475][T25840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 530.686535][T25840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 530.712629][T25840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 530.730250][T25804] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 530.744634][T25873] lo speed is unknown, defaulting to 1000 [ 530.760441][T25840] hsr_slave_0: entered promiscuous mode [ 530.766737][T25840] hsr_slave_1: entered promiscuous mode [ 530.772927][T25840] debugfs: 'hsr0' already exists in 'hsr' [ 530.778670][T25840] Cannot create hsr debugfs directory [ 530.793348][T25873] lo speed is unknown, defaulting to 1000 [ 530.828079][ T298] bridge_slave_1: left allmulticast mode [ 530.834001][ T298] bridge_slave_1: left promiscuous mode [ 530.838285][T25884] netlink: 64 bytes leftover after parsing attributes in process `syz.9.7079'. [ 530.839741][ T298] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.857080][ T298] bridge_slave_0: left allmulticast mode [ 530.862887][ T298] bridge_slave_0: left promiscuous mode [ 530.868620][ T298] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.953198][ T298] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 530.963415][ T298] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 530.973607][ T298] bond0 (unregistering): Released all slaves [ 531.112812][ T298] hsr_slave_0: left promiscuous mode [ 531.125413][ T298] hsr_slave_1: left promiscuous mode [ 531.139661][ T298] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 531.147520][ T298] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 531.155718][ T298] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 531.163122][ T298] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 531.174061][ T298] veth1_macvtap: left promiscuous mode [ 531.179624][ T298] veth0_macvtap: left promiscuous mode [ 531.185337][ T298] veth1_vlan: left promiscuous mode [ 531.190604][ T298] veth0_vlan: left promiscuous mode [ 531.269038][ T298] team0 (unregistering): Port device team_slave_1 removed [ 531.278788][ T298] team0 (unregistering): Port device team_slave_0 removed [ 531.354255][T25895] pim6reg: entered allmulticast mode [ 531.361010][T25897] pim6reg: left allmulticast mode [ 531.378014][T25804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.390418][T25804] 8021q: adding VLAN 0 to HW filter on device team0 [ 531.400067][ T6213] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.407200][ T6213] bridge0: port 1(bridge_slave_0) entered forwarding state [ 531.423913][ T3463] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.431250][ T3463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 531.470084][T25804] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 531.480646][T25804] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 531.512615][T25899] netlink: 'syz.4.7085': attribute type 39 has an invalid length. [ 531.552827][T25804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 531.563273][T25888] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7081'. [ 531.609930][T25911] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7087'. [ 531.627012][T25914] loop9: detected capacity change from 0 to 512 [ 531.636326][T25914] EXT4-fs: Ignoring removed nobh option [ 531.648149][T25911] loop5: detected capacity change from 0 to 2048 [ 531.649758][T25914] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 531.667626][T25914] EXT4-fs (loop9): 1 truncate cleaned up [ 531.675233][T25914] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 531.680571][T25804] veth0_vlan: entered promiscuous mode [ 531.694322][T25911] loop5: p1 < > p4 [ 531.698691][T25911] loop5: p4 size 8388608 extends beyond EOD, truncated [ 531.704090][T25804] veth1_vlan: entered promiscuous mode [ 531.721231][T25804] veth0_macvtap: entered promiscuous mode [ 531.728415][T25804] veth1_macvtap: entered promiscuous mode [ 531.740121][T25804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 531.750618][T25804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 531.771627][ T41] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.824723][ T41] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.835395][T25840] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 531.863367][ T41] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.875239][T25840] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 531.894097][T25840] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 531.907937][ T6213] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.917093][T25840] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 531.937575][T25463] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.968048][T25925] lo speed is unknown, defaulting to 1000 [ 532.042062][T25840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 532.070881][T25942] loop9: detected capacity change from 0 to 164 [ 532.083610][T25840] 8021q: adding VLAN 0 to HW filter on device team0 [ 532.100622][T25944] loop3: detected capacity change from 0 to 512 [ 532.102032][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.114434][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 532.129884][T25944] tmpfs: Unknown parameter 'msdos' [ 532.132421][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.142156][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 532.142169][T25942] RIP_1991A [ 532.160952][T25925] lo speed is unknown, defaulting to 1000 [ 532.161565][T25840] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 532.232971][T25942] tipc: Started in network mode [ 532.237882][T25942] tipc: Node identity 4, cluster identity 4711 [ 532.244184][T25942] tipc: Node number set to 4 [ 532.297958][T25840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 532.410537][T25964] FAULT_INJECTION: forcing a failure. [ 532.410537][T25964] name failslab, interval 1, probability 0, space 0, times 0 [ 532.423604][T25964] CPU: 1 UID: 0 PID: 25964 Comm: syz.9.7100 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 532.423812][T25964] Tainted: [W]=WARN [ 532.423819][T25964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 532.423832][T25964] Call Trace: [ 532.423838][T25964] [ 532.423845][T25964] __dump_stack+0x1d/0x30 [ 532.423909][T25964] dump_stack_lvl+0xe8/0x140 [ 532.423927][T25964] dump_stack+0x15/0x1b [ 532.424003][T25964] should_fail_ex+0x265/0x280 [ 532.424023][T25964] ? kobject_uevent_env+0x1c0/0x570 [ 532.424047][T25964] should_failslab+0x8c/0xb0 [ 532.424074][T25964] __kmalloc_cache_noprof+0x4c/0x4a0 [ 532.424161][T25964] kobject_uevent_env+0x1c0/0x570 [ 532.424187][T25964] ? device_pm_check_callbacks+0x683/0x6a0 [ 532.424282][T25964] kobject_uevent+0x1d/0x30 [ 532.424308][T25964] device_del+0x710/0x790 [ 532.424328][T25964] device_unregister+0x15/0x40 [ 532.424345][T25964] bdi_unregister+0x307/0x3a0 [ 532.424371][T25964] __del_gendisk+0x2c3/0x570 [ 532.424427][T25964] del_gendisk+0xac/0xf0 [ 532.424478][T25964] loop_remove+0x26/0x80 [ 532.424505][T25964] loop_control_ioctl+0x3b3/0x3f0 [ 532.424593][T25964] ? __pfx_loop_control_ioctl+0x10/0x10 [ 532.424622][T25964] __se_sys_ioctl+0xce/0x140 [ 532.424686][T25964] __x64_sys_ioctl+0x43/0x50 [ 532.424747][T25964] x64_sys_call+0x1816/0x3000 [ 532.424808][T25964] do_syscall_64+0xd2/0x200 [ 532.424823][T25964] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 532.424848][T25964] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 532.424951][T25964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.424970][T25964] RIP: 0033:0x7f5883b7efc9 [ 532.425004][T25964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 532.425019][T25964] RSP: 002b:00007f58825e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 532.425036][T25964] RAX: ffffffffffffffda RBX: 00007f5883dd5fa0 RCX: 00007f5883b7efc9 [ 532.425066][T25964] RDX: 0000000000000005 RSI: 0000000000004c81 RDI: 0000000000000005 [ 532.425077][T25964] RBP: 00007f58825e7090 R08: 0000000000000000 R09: 0000000000000000 [ 532.425087][T25964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 532.425098][T25964] R13: 00007f5883dd6038 R14: 00007f5883dd5fa0 R15: 00007fffef53def8 [ 532.425114][T25964] [ 532.796678][T25973] FAULT_INJECTION: forcing a failure. [ 532.796678][T25973] name failslab, interval 1, probability 0, space 0, times 0 [ 532.809435][T25973] CPU: 1 UID: 0 PID: 25973 Comm: syz.9.7102 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 532.809510][T25973] Tainted: [W]=WARN [ 532.809516][T25973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 532.809536][T25973] Call Trace: [ 532.809573][T25973] [ 532.809581][T25973] __dump_stack+0x1d/0x30 [ 532.809604][T25973] dump_stack_lvl+0xe8/0x140 [ 532.809662][T25973] dump_stack+0x15/0x1b [ 532.809679][T25973] should_fail_ex+0x265/0x280 [ 532.809697][T25973] should_failslab+0x8c/0xb0 [ 532.809769][T25973] __kmalloc_noprof+0xa5/0x570 [ 532.809796][T25973] ? sctp_make_abort_user+0x17b/0x3a0 [ 532.809865][T25973] sctp_make_abort_user+0x17b/0x3a0 [ 532.809924][T25973] sctp_sendmsg_check_sflags+0x17e/0x1e0 [ 532.809978][T25973] sctp_sendmsg+0x75f/0x18d0 [ 532.810005][T25973] ? __pfx_sctp_sendmsg+0x10/0x10 [ 532.810025][T25973] inet_sendmsg+0xc5/0xd0 [ 532.810048][T25973] __sock_sendmsg+0x102/0x180 [ 532.810128][T25973] ____sys_sendmsg+0x345/0x4e0 [ 532.810166][T25973] ___sys_sendmsg+0x17b/0x1d0 [ 532.810209][T25973] __sys_sendmmsg+0x178/0x300 [ 532.810233][T25973] __x64_sys_sendmmsg+0x57/0x70 [ 532.810265][T25973] x64_sys_call+0x1c4a/0x3000 [ 532.810285][T25973] do_syscall_64+0xd2/0x200 [ 532.810304][T25973] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 532.810332][T25973] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 532.810441][T25973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.810497][T25973] RIP: 0033:0x7f5883b7efc9 [ 532.810514][T25973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 532.810563][T25973] RSP: 002b:00007f58825e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 532.810584][T25973] RAX: ffffffffffffffda RBX: 00007f5883dd5fa0 RCX: 00007f5883b7efc9 [ 532.810598][T25973] RDX: 0000000000000001 RSI: 00002000000032c0 RDI: 0000000000000003 [ 532.810612][T25973] RBP: 00007f58825e7090 R08: 0000000000000000 R09: 0000000000000000 [ 532.810626][T25973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 532.810700][T25973] R13: 00007f5883dd6038 R14: 00007f5883dd5fa0 R15: 00007fffef53def8 [ 532.810716][T25973] [ 533.073789][T25840] veth0_vlan: entered promiscuous mode [ 533.085179][T25982] loop9: detected capacity change from 0 to 512 [ 533.101292][T25982] tmpfs: Unknown parameter 'msdos' [ 533.133609][T25840] veth1_vlan: entered promiscuous mode [ 533.167658][T25840] veth0_macvtap: entered promiscuous mode [ 533.176158][T25840] veth1_macvtap: entered promiscuous mode [ 533.187435][T25840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 533.202833][T25840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 533.221430][ T298] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.230350][ T298] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.246809][ T298] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.267700][ T3463] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.337715][T25988] lo speed is unknown, defaulting to 1000 [ 533.378570][T25988] lo speed is unknown, defaulting to 1000 [ 533.390924][T25991] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7106'. [ 533.482756][ T298] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.623917][ T298] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.637623][T25998] lo speed is unknown, defaulting to 1000 [ 533.654055][ T29] kauditd_printk_skb: 466 callbacks suppressed [ 533.654143][ T29] audit: type=1326 audit(1761474175.316:60101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25977 comm="syz.5.7104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6a10b15e67 code=0x7ffc0000 [ 533.668888][T25998] lo speed is unknown, defaulting to 1000 [ 533.684390][ T29] audit: type=1326 audit(1761474175.346:60102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25977 comm="syz.5.7104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6a10abb099 code=0x7ffc0000 [ 533.713158][ T29] audit: type=1326 audit(1761474175.346:60103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25977 comm="syz.5.7104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6a10b15e67 code=0x7ffc0000 [ 533.736789][ T29] audit: type=1326 audit(1761474175.346:60104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25977 comm="syz.5.7104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6a10abb099 code=0x7ffc0000 [ 533.760716][ T29] audit: type=1326 audit(1761474175.346:60105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25977 comm="syz.5.7104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f6a10b1efc9 code=0x7ffc0000 [ 533.787880][T26008] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7112'. [ 533.827411][ T29] audit: type=1326 audit(1761474175.466:60106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25977 comm="syz.5.7104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6a10b15e67 code=0x7ffc0000 [ 533.851473][ T29] audit: type=1326 audit(1761474175.466:60107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25977 comm="syz.5.7104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6a10abb099 code=0x7ffc0000 [ 533.875071][ T29] audit: type=1326 audit(1761474175.466:60108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25977 comm="syz.5.7104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f6a10b1efc9 code=0x7ffc0000 [ 533.898695][ T29] audit: type=1326 audit(1761474175.486:60109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25977 comm="syz.5.7104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6a10b15e67 code=0x7ffc0000 [ 533.922373][ T29] audit: type=1326 audit(1761474175.486:60110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25977 comm="syz.5.7104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6a10abb099 code=0x7ffc0000 [ 533.997477][ T298] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.069907][ T298] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.118959][T25998] chnl_net:caif_netlink_parms(): no params data found [ 534.188674][T25998] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.195833][T25998] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.213149][T25998] bridge_slave_0: entered allmulticast mode [ 534.219982][T25998] bridge_slave_0: entered promiscuous mode [ 534.229224][T25998] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.236406][T25998] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.243978][T25998] bridge_slave_1: entered allmulticast mode [ 534.250689][T25998] bridge_slave_1: entered promiscuous mode [ 534.260130][ T298] bridge_slave_1: left allmulticast mode [ 534.265906][ T298] bridge_slave_1: left promiscuous mode [ 534.271615][ T298] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.321630][ T298] bridge_slave_0: left allmulticast mode [ 534.327304][ T298] bridge_slave_0: left promiscuous mode [ 534.333108][ T298] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.504054][ T298] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 534.514548][ T298] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 534.524212][ T298] bond0 (unregistering): Released all slaves [ 534.557457][T25998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 534.584380][ T298] tipc: Left network mode [ 534.600218][T25998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 534.613026][T26041] pim6reg: entered allmulticast mode [ 534.637612][T26041] pim6reg: left allmulticast mode [ 534.662391][T25998] team0: Port device team_slave_0 added [ 534.669077][T25998] team0: Port device team_slave_1 added [ 534.688048][ T298] hsr_slave_0: left promiscuous mode [ 534.694248][ T298] hsr_slave_1: left promiscuous mode [ 534.700352][ T298] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 534.707815][ T298] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 534.717383][ T298] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 534.725180][ T298] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 534.737948][ T298] veth1_macvtap: left promiscuous mode [ 534.743848][ T298] veth0_macvtap: left promiscuous mode [ 534.749397][ T298] veth1_vlan: left promiscuous mode [ 534.754929][ T298] veth0_vlan: left promiscuous mode [ 534.828789][ T298] team0 (unregistering): Port device team_slave_1 removed [ 534.841471][ T298] team0 (unregistering): Port device team_slave_0 removed [ 534.889184][T26032] lo speed is unknown, defaulting to 1000 [ 534.914413][T25998] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 534.921482][T25998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 534.947638][T25998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 534.965131][T26066] netlink: 40 bytes leftover after parsing attributes in process `syz.7.7132'. [ 534.977956][T25998] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 534.984929][T25998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 535.010958][T25998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 535.025875][T26032] lo speed is unknown, defaulting to 1000 [ 535.052053][T25998] hsr_slave_0: entered promiscuous mode [ 535.060481][T25998] hsr_slave_1: entered promiscuous mode [ 535.066627][T25998] debugfs: 'hsr0' already exists in 'hsr' [ 535.072395][T25998] Cannot create hsr debugfs directory [ 535.216625][T26032] chnl_net:caif_netlink_parms(): no params data found [ 535.255756][T26032] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.262940][T26032] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.270396][T26032] bridge_slave_0: entered allmulticast mode [ 535.277063][T26032] bridge_slave_0: entered promiscuous mode [ 535.285881][T26032] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.293184][T26032] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.300492][T26032] bridge_slave_1: entered allmulticast mode [ 535.307054][T26032] bridge_slave_1: entered promiscuous mode [ 535.334426][T26032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 535.347654][T26090] pim6reg: entered allmulticast mode [ 535.354568][T26032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 535.369156][T26090] pim6reg: left allmulticast mode [ 535.384100][T26032] team0: Port device team_slave_0 added [ 535.390560][T26032] team0: Port device team_slave_1 added [ 535.406697][T26032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 535.413728][T26032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 535.440420][T26032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 535.451896][T26032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 535.459009][T26032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 535.484964][T26032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 535.503838][ T298] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.514796][T26092] FAULT_INJECTION: forcing a failure. [ 535.514796][T26092] name failslab, interval 1, probability 0, space 0, times 0 [ 535.527501][T26092] CPU: 1 UID: 0 PID: 26092 Comm: syz.5.7141 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 535.527534][T26092] Tainted: [W]=WARN [ 535.527541][T26092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 535.527555][T26092] Call Trace: [ 535.527582][T26092] [ 535.527590][T26092] __dump_stack+0x1d/0x30 [ 535.527663][T26092] dump_stack_lvl+0xe8/0x140 [ 535.527684][T26092] dump_stack+0x15/0x1b [ 535.527702][T26092] should_fail_ex+0x265/0x280 [ 535.527725][T26092] should_failslab+0x8c/0xb0 [ 535.527758][T26092] kmem_cache_alloc_noprof+0x50/0x480 [ 535.527835][T26092] ? security_file_alloc+0x32/0x100 [ 535.527862][T26092] security_file_alloc+0x32/0x100 [ 535.527966][T26092] init_file+0x5c/0x1d0 [ 535.527985][T26092] alloc_empty_file+0x8b/0x200 [ 535.528104][T26092] path_openat+0x68/0x2170 [ 535.528131][T26092] ? _parse_integer_limit+0x170/0x190 [ 535.528168][T26092] ? kstrtouint+0x76/0xc0 [ 535.528199][T26092] ? kstrtouint+0x76/0xc0 [ 535.528235][T26092] do_filp_open+0x109/0x230 [ 535.528284][T26092] do_sys_openat2+0xa6/0x110 [ 535.528303][T26092] __x64_sys_creat+0x65/0x90 [ 535.528321][T26092] x64_sys_call+0x2da3/0x3000 [ 535.528345][T26092] do_syscall_64+0xd2/0x200 [ 535.528381][T26092] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 535.528407][T26092] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 535.528436][T26092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.528491][T26092] RIP: 0033:0x7f6a10b1efc9 [ 535.528507][T26092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 535.528539][T26092] RSP: 002b:00007f6a0f587038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 535.528584][T26092] RAX: ffffffffffffffda RBX: 00007f6a10d75fa0 RCX: 00007f6a10b1efc9 [ 535.528595][T26092] RDX: 0000000000000000 RSI: 0000000000000182 RDI: 00002000000000c0 [ 535.528609][T26092] RBP: 00007f6a0f587090 R08: 0000000000000000 R09: 0000000000000000 [ 535.528629][T26092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 535.528642][T26092] R13: 00007f6a10d76038 R14: 00007f6a10d75fa0 R15: 00007ffebd283f18 [ 535.528662][T26092] [ 535.756862][T26032] hsr_slave_0: entered promiscuous mode [ 535.763428][T26032] hsr_slave_1: entered promiscuous mode [ 535.769317][T26032] debugfs: 'hsr0' already exists in 'hsr' [ 535.775078][T26032] Cannot create hsr debugfs directory [ 535.802993][T25998] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 535.820732][T25998] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 535.834584][T25998] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 535.844260][T25998] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 535.946976][T25998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 535.966809][T25998] 8021q: adding VLAN 0 to HW filter on device team0 [ 535.990892][ T6213] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.997989][ T6213] bridge0: port 1(bridge_slave_0) entered forwarding state [ 536.008362][ T6213] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.015610][ T6213] bridge0: port 2(bridge_slave_1) entered forwarding state [ 536.143988][T26117] vcan0: tx drop: invalid sa for name 0xffffffffffffffff [ 536.152098][T26117] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7147'. [ 536.182110][ T298] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.210658][T25998] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 536.248774][T26113] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7148'. [ 536.274580][ T298] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.332020][ T298] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.355710][T26032] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 536.363025][T26144] 9pnet_fd: p9_fd_create_unix (26144): problem connecting socket: ./file0: -2 [ 536.375788][T26032] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 536.383013][T26144] netlink: 'syz.5.7153': attribute type 4 has an invalid length. [ 536.398119][T26144] netlink: 'syz.5.7153': attribute type 4 has an invalid length. [ 536.402172][T26032] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 536.415834][T26032] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 536.457566][T25998] veth0_vlan: entered promiscuous mode [ 536.481156][T25998] veth1_vlan: entered promiscuous mode [ 536.487536][ T298] bridge_slave_1: left allmulticast mode [ 536.493848][ T298] bridge_slave_1: left promiscuous mode [ 536.499709][ T298] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.507596][ T298] bridge_slave_0: left allmulticast mode [ 536.513338][ T298] bridge_slave_0: left promiscuous mode [ 536.519011][ T298] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.623447][ T298] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 536.633702][ T298] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 536.643831][ T298] bond0 (unregistering): Released all slaves [ 536.685075][T25998] veth0_macvtap: entered promiscuous mode [ 536.699108][T25998] veth1_macvtap: entered promiscuous mode [ 536.707666][T26032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 536.724329][T25998] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 536.744061][T25998] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 536.754088][T26032] 8021q: adding VLAN 0 to HW filter on device team0 [ 536.779168][ T41] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.789682][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.796850][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 536.807806][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.814911][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 536.827429][ T41] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.838078][ T298] hsr_slave_0: left promiscuous mode [ 536.852228][ T298] hsr_slave_1: left promiscuous mode [ 536.858070][ T298] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 536.865535][ T298] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 536.874202][ T298] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 536.881942][ T298] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 536.888683][T26172] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 536.905604][ T298] veth1_macvtap: left promiscuous mode [ 536.911775][ T298] veth0_macvtap: left promiscuous mode [ 536.917448][ T298] veth1_vlan: left promiscuous mode [ 536.922927][ T298] veth0_vlan: left promiscuous mode [ 536.961123][T26178] 9pnet_fd: p9_fd_create_unix (26178): problem connecting socket: ./file0: -2 [ 536.993644][ T298] team0 (unregistering): Port device team_slave_1 removed [ 537.003659][ T298] team0 (unregistering): Port device team_slave_0 removed [ 537.024586][T26179] netlink: 'syz.4.7165': attribute type 4 has an invalid length. [ 537.038634][ T41] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.049040][ T41] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.118977][T26185] futex_wake_op: syz.4.7166 tries to shift op by 144; fix this program [ 537.129092][T26185] netlink: 5452 bytes leftover after parsing attributes in process `syz.4.7166'. [ 537.130491][T26032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 537.188917][T26196] tipc: Started in network mode [ 537.194127][T26196] tipc: Node identity 1ec2e72c70ac, cluster identity 4711 [ 537.201537][T26196] tipc: Enabled bearer , priority 0 [ 537.210017][T26196] tipc: Disabling bearer [ 537.225220][T26197] syz2: rxe_newlink: already configured on lo [ 537.240142][T26032] veth0_vlan: entered promiscuous mode [ 537.248933][T26032] veth1_vlan: entered promiscuous mode [ 537.264951][T26032] veth0_macvtap: entered promiscuous mode [ 537.272572][T26032] veth1_macvtap: entered promiscuous mode [ 537.284081][T26032] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 537.298782][T26032] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 537.316678][ T4893] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.333910][ T4893] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.380214][T26206] pim6reg: entered allmulticast mode [ 537.388169][T26206] pim6reg: left allmulticast mode [ 537.405189][ T4893] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.432497][ T4893] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.444726][T26211] tmpfs: Unknown parameter 'msdos' [ 537.505936][T26226] FAULT_INJECTION: forcing a failure. [ 537.505936][T26226] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 537.519207][T26226] CPU: 0 UID: 0 PID: 26226 Comm: syz.5.7176 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 537.519241][T26226] Tainted: [W]=WARN [ 537.519247][T26226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 537.519259][T26226] Call Trace: [ 537.519265][T26226] [ 537.519273][T26226] __dump_stack+0x1d/0x30 [ 537.519353][T26226] dump_stack_lvl+0xe8/0x140 [ 537.519373][T26226] dump_stack+0x15/0x1b [ 537.519468][T26226] should_fail_ex+0x265/0x280 [ 537.519487][T26226] should_fail+0xb/0x20 [ 537.519501][T26226] should_fail_usercopy+0x1a/0x20 [ 537.519520][T26226] _copy_from_user+0x1c/0xb0 [ 537.519562][T26226] ___sys_recvmsg+0xaa/0x370 [ 537.519582][T26226] ? _parse_integer+0x27/0x40 [ 537.519620][T26226] do_recvmmsg+0x1ef/0x540 [ 537.519644][T26226] ? fput+0x8f/0xc0 [ 537.519660][T26226] __x64_sys_recvmmsg+0xe5/0x170 [ 537.519739][T26226] x64_sys_call+0x27aa/0x3000 [ 537.519763][T26226] do_syscall_64+0xd2/0x200 [ 537.519860][T26226] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 537.519887][T26226] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 537.519969][T26226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.520034][T26226] RIP: 0033:0x7f6a10b1efc9 [ 537.520099][T26226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 537.520115][T26226] RSP: 002b:00007f6a0f587038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 537.520132][T26226] RAX: ffffffffffffffda RBX: 00007f6a10d75fa0 RCX: 00007f6a10b1efc9 [ 537.520144][T26226] RDX: 0000000000000001 RSI: 0000200000002780 RDI: 0000000000000005 [ 537.520157][T26226] RBP: 00007f6a0f587090 R08: 0000000000000000 R09: 0000000000000000 [ 537.520168][T26226] R10: 0000000000002140 R11: 0000000000000246 R12: 0000000000000001 [ 537.520189][T26226] R13: 00007f6a10d76038 R14: 00007f6a10d75fa0 R15: 00007ffebd283f18 [ 537.520207][T26226] [ 538.022944][T26243] netlink: 20 bytes leftover after parsing attributes in process `syz.8.7181'. [ 538.168326][T26251] FAULT_INJECTION: forcing a failure. [ 538.168326][T26251] name failslab, interval 1, probability 0, space 0, times 0 [ 538.181157][T26251] CPU: 1 UID: 0 PID: 26251 Comm: syz.8.7185 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 538.181190][T26251] Tainted: [W]=WARN [ 538.181197][T26251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 538.181211][T26251] Call Trace: [ 538.181217][T26251] [ 538.181225][T26251] __dump_stack+0x1d/0x30 [ 538.181262][T26251] dump_stack_lvl+0xe8/0x140 [ 538.181280][T26251] dump_stack+0x15/0x1b [ 538.181303][T26251] should_fail_ex+0x265/0x280 [ 538.181320][T26251] ? fl_init+0x33/0x130 [ 538.181415][T26251] should_failslab+0x8c/0xb0 [ 538.181446][T26251] __kmalloc_cache_noprof+0x4c/0x4a0 [ 538.181479][T26251] ? __pfx_fl_reoffload+0x10/0x10 [ 538.181504][T26251] fl_init+0x33/0x130 [ 538.181572][T26251] tcf_proto_create+0x130/0x1a0 [ 538.181591][T26251] tc_new_tfilter+0x95c/0x10a0 [ 538.181614][T26251] ? __rcu_read_unlock+0x4f/0x70 [ 538.181669][T26251] ? ns_capable+0x7d/0xb0 [ 538.181695][T26251] ? __pfx_tc_new_tfilter+0x10/0x10 [ 538.181719][T26251] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 538.181745][T26251] netlink_rcv_skb+0x123/0x220 [ 538.181825][T26251] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 538.181850][T26251] rtnetlink_rcv+0x1c/0x30 [ 538.181871][T26251] netlink_unicast+0x5c0/0x690 [ 538.181914][T26251] netlink_sendmsg+0x58b/0x6b0 [ 538.181983][T26251] ? __pfx_netlink_sendmsg+0x10/0x10 [ 538.182000][T26251] __sock_sendmsg+0x145/0x180 [ 538.182022][T26251] ____sys_sendmsg+0x31e/0x4e0 [ 538.182059][T26251] ___sys_sendmsg+0x17b/0x1d0 [ 538.182120][T26251] __x64_sys_sendmsg+0xd4/0x160 [ 538.182152][T26251] x64_sys_call+0x191e/0x3000 [ 538.182175][T26251] do_syscall_64+0xd2/0x200 [ 538.182195][T26251] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 538.182332][T26251] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 538.182375][T26251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.182397][T26251] RIP: 0033:0x7f3b419befc9 [ 538.182411][T26251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 538.182427][T26251] RSP: 002b:00007f3b40427038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 538.182445][T26251] RAX: ffffffffffffffda RBX: 00007f3b41c15fa0 RCX: 00007f3b419befc9 [ 538.182465][T26251] RDX: 0000000024044094 RSI: 0000200000000000 RDI: 0000000000000004 [ 538.182524][T26251] RBP: 00007f3b40427090 R08: 0000000000000000 R09: 0000000000000000 [ 538.182539][T26251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 538.182552][T26251] R13: 00007f3b41c16038 R14: 00007f3b41c15fa0 R15: 00007ffc424175a8 [ 538.182571][T26251] [ 538.473284][T26256] 9pnet_fd: p9_fd_create_unix (26256): problem connecting socket: ./file0: -2 [ 538.483986][T26256] netlink: 'syz.7.7187': attribute type 4 has an invalid length. [ 538.498474][T26256] netlink: 'syz.7.7187': attribute type 4 has an invalid length. [ 538.538334][T26265] random: crng reseeded on system resumption [ 538.548916][T26267] netlink: 20 bytes leftover after parsing attributes in process `syz.8.7192'. [ 538.672750][T26281] lo speed is unknown, defaulting to 1000 [ 538.726987][T26281] lo speed is unknown, defaulting to 1000 [ 538.742882][ T29] kauditd_printk_skb: 1302 callbacks suppressed [ 538.742932][ T29] audit: type=1326 audit(1761474180.316:61413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26282 comm="syz.5.7199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6a10b1efc9 code=0x7ffc0000 [ 538.773010][ T29] audit: type=1326 audit(1761474180.316:61414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26282 comm="syz.5.7199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a10b1efc9 code=0x7ffc0000 [ 538.796967][ T29] audit: type=1326 audit(1761474180.316:61415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26282 comm="syz.5.7199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6a10b1efc9 code=0x7ffc0000 [ 538.820559][ T29] audit: type=1326 audit(1761474180.316:61416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26282 comm="syz.5.7199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a10b1efc9 code=0x7ffc0000 [ 538.845146][ T29] audit: type=1326 audit(1761474180.316:61417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26282 comm="syz.5.7199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6a10b1efc9 code=0x7ffc0000 [ 538.859506][T26290] lo speed is unknown, defaulting to 1000 [ 538.868783][ T29] audit: type=1326 audit(1761474180.316:61418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26282 comm="syz.5.7199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a10b1efc9 code=0x7ffc0000 [ 538.898229][ T29] audit: type=1326 audit(1761474180.316:61419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26282 comm="syz.5.7199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6a10b1efc9 code=0x7ffc0000 [ 538.901998][T26290] lo speed is unknown, defaulting to 1000 [ 538.921844][ T29] audit: type=1326 audit(1761474180.316:61420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26282 comm="syz.5.7199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a10b1efc9 code=0x7ffc0000 [ 538.951194][ T29] audit: type=1326 audit(1761474180.316:61421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26282 comm="syz.5.7199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6a10b1efc9 code=0x7ffc0000 [ 538.974974][ T29] audit: type=1326 audit(1761474180.316:61422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26282 comm="syz.5.7199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a10b1efc9 code=0x7ffc0000 [ 539.139864][T26303] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7206'. [ 539.307416][T26316] xt_CT: You must specify a L4 protocol and not use inversions on it [ 539.503797][T26331] loop8: detected capacity change from 0 to 2048 [ 539.510949][T26331] EXT4-fs: Ignoring removed bh option [ 539.538336][T26331] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 539.564602][T26331] EXT4-fs error (device loop8): ext4_iget_extra_inode:5075: inode #12: comm syz.8.7217: corrupted in-inode xattr: e_name out of bounds [ 539.579955][T26331] EXT4-fs error (device loop8): ext4_iget_extra_inode:5075: inode #12: comm syz.8.7217: corrupted in-inode xattr: e_name out of bounds [ 539.600820][T26338] loop2: detected capacity change from 0 to 1024 [ 539.608068][T26338] ext3: Bad value for 'mb_optimize_scan' [ 539.689318][T26338] xt_hashlimit: max too large, truncated to 1048576 [ 539.735945][T26342] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7220'. [ 539.776716][T25998] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.797896][T26344] netlink: 'syz.5.7221': attribute type 10 has an invalid length. [ 539.806588][T26344] ipvlan0: entered allmulticast mode [ 539.811990][T26344] veth0_vlan: entered allmulticast mode [ 539.818898][T26348] loop2: detected capacity change from 0 to 2048 [ 539.820772][T26344] team0: Device ipvlan0 failed to register rx_handler [ 539.827105][T26348] EXT4-fs: Ignoring removed bh option [ 539.863235][T26348] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 539.887495][T26348] EXT4-fs error (device loop2): ext4_iget_extra_inode:5075: inode #12: comm syz.2.7223: corrupted in-inode xattr: e_name out of bounds [ 539.903771][T26348] EXT4-fs error (device loop2): ext4_iget_extra_inode:5075: inode #12: comm syz.2.7223: corrupted in-inode xattr: e_name out of bounds [ 539.931638][T26348] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7223'. [ 539.941157][T26348] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7223'. [ 539.952137][T26348] EXT4-fs error (device loop2): ext4_iget_extra_inode:5075: inode #12: comm syz.2.7223: corrupted in-inode xattr: e_name out of bounds [ 539.985979][T26032] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 540.004938][T26364] futex_wake_op: syz.8.7231 tries to shift op by 144; fix this program [ 540.015967][T26364] netlink: 5452 bytes leftover after parsing attributes in process `syz.8.7231'. [ 540.023465][T26366] loop2: detected capacity change from 0 to 2048 [ 540.031994][T26366] EXT4-fs: Ignoring removed bh option [ 540.045159][T26366] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 540.060643][T26366] EXT4-fs error (device loop2): ext4_iget_extra_inode:5075: inode #12: comm syz.2.7230: corrupted in-inode xattr: e_name out of bounds [ 540.075910][T26366] EXT4-fs error (device loop2): ext4_iget_extra_inode:5075: inode #12: comm syz.2.7230: corrupted in-inode xattr: e_name out of bounds [ 540.093172][T26366] EXT4-fs error (device loop2): ext4_iget_extra_inode:5075: inode #12: comm syz.2.7230: corrupted in-inode xattr: e_name out of bounds [ 540.109888][T26372] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 540.114301][T26371] rdma_rxe: rxe_newlink: failed to add lo [ 540.118477][T26372] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 540.141576][T26032] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 540.161709][T26374] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7233'. [ 540.194410][T26376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7235'. [ 540.314974][T11145] kernel write not supported for file /39/gid_map (pid: 11145 comm: kworker/1:13) [ 540.325342][T11145] kernel write not supported for file /39/gid_map (pid: 11145 comm: kworker/1:13) [ 540.343345][T11145] kernel write not supported for file /39/gid_map (pid: 11145 comm: kworker/1:13) [ 540.361728][T11151] kernel write not supported for file /39/gid_map (pid: 11151 comm: kworker/1:15) [ 540.371501][T11151] kernel write not supported for file /39/gid_map (pid: 11151 comm: kworker/1:15) [ 540.385300][T11151] kernel write not supported for file /39/gid_map (pid: 11151 comm: kworker/1:15) [ 540.401756][T11145] kernel write not supported for file /39/gid_map (pid: 11145 comm: kworker/1:13) [ 540.414570][T11145] kernel write not supported for file /39/gid_map (pid: 11145 comm: kworker/1:13) [ 540.431305][T11145] kernel write not supported for file /39/gid_map (pid: 11145 comm: kworker/1:13) [ 540.450438][T11145] kernel write not supported for file /39/gid_map (pid: 11145 comm: kworker/1:13) [ 540.502843][T26408] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7247'. [ 540.664836][T26423] lo speed is unknown, defaulting to 1000 [ 540.720053][T26423] lo speed is unknown, defaulting to 1000 [ 541.025020][T26439] loop8: detected capacity change from 0 to 1024 [ 541.034519][T26439] ext3: Bad value for 'mb_optimize_scan' [ 541.143478][T26439] xt_hashlimit: max too large, truncated to 1048576 [ 541.198848][T26445] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7260'. [ 541.377420][T26454] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 541.433675][T26456] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 541.442034][T26456] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 541.471814][T26458] loop2: detected capacity change from 0 to 512 [ 541.480644][T26458] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 541.490169][T26458] EXT4-fs (loop2): 1 truncate cleaned up [ 541.504353][T26458] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 541.543572][T26458] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 541.599584][T26032] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.845165][T26468] lo speed is unknown, defaulting to 1000 [ 541.934384][T26468] lo speed is unknown, defaulting to 1000 [ 542.295716][T26496] pim6reg: entered allmulticast mode [ 542.434824][T26498] loop8: detected capacity change from 0 to 512 [ 542.442564][T26497] pim6reg: left allmulticast mode [ 542.468905][T26498] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 542.477893][T26498] EXT4-fs (loop8): 1 truncate cleaned up [ 542.484426][T26498] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 542.508907][T26498] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000. [ 542.564166][T25998] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.653047][T26505] lo speed is unknown, defaulting to 1000 [ 542.720595][T26512] ref_ctr increment failed for inode: 0x20e offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88811940bf40 [ 542.733778][T26505] lo speed is unknown, defaulting to 1000 [ 542.742581][T26517] netdevsim netdevsim8: loading /lib/firmware/. failed with error -22 [ 542.750778][T26517] netdevsim netdevsim8: Direct firmware load for . failed with error -22 [ 542.872608][T26524] FAULT_INJECTION: forcing a failure. [ 542.872608][T26524] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 542.885857][T26524] CPU: 1 UID: 0 PID: 26524 Comm: syz.5.7290 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 542.885886][T26524] Tainted: [W]=WARN [ 542.885892][T26524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 542.885937][T26524] Call Trace: [ 542.885985][T26524] [ 542.885992][T26524] __dump_stack+0x1d/0x30 [ 542.886013][T26524] dump_stack_lvl+0xe8/0x140 [ 542.886035][T26524] dump_stack+0x15/0x1b [ 542.886173][T26524] should_fail_ex+0x265/0x280 [ 542.886195][T26524] should_fail+0xb/0x20 [ 542.886214][T26524] should_fail_usercopy+0x1a/0x20 [ 542.886238][T26524] strncpy_from_user+0x25/0x230 [ 542.886303][T26524] ? kmem_cache_alloc_noprof+0x242/0x480 [ 542.886333][T26524] ? getname_flags+0x80/0x3b0 [ 542.886367][T26524] getname_flags+0xae/0x3b0 [ 542.886517][T26524] user_path_at+0x28/0x130 [ 542.886535][T26524] __se_sys_mount+0x25b/0x2e0 [ 542.886595][T26524] ? fput+0x8f/0xc0 [ 542.886615][T26524] __x64_sys_mount+0x67/0x80 [ 542.886637][T26524] x64_sys_call+0x2b51/0x3000 [ 542.886658][T26524] do_syscall_64+0xd2/0x200 [ 542.886675][T26524] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 542.886768][T26524] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 542.886848][T26524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.886868][T26524] RIP: 0033:0x7f6a10b1efc9 [ 542.886882][T26524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 542.886915][T26524] RSP: 002b:00007f6a0f587038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 542.886936][T26524] RAX: ffffffffffffffda RBX: 00007f6a10d75fa0 RCX: 00007f6a10b1efc9 [ 542.886949][T26524] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000200000000080 [ 542.886962][T26524] RBP: 00007f6a0f587090 R08: 0000000000000000 R09: 0000000000000000 [ 542.886979][T26524] R10: 0000000000a0a008 R11: 0000000000000246 R12: 0000000000000001 [ 542.886990][T26524] R13: 00007f6a10d76038 R14: 00007f6a10d75fa0 R15: 00007ffebd283f18 [ 542.887008][T26524] [ 543.379861][T26553] lo speed is unknown, defaulting to 1000 [ 543.479199][T26553] lo speed is unknown, defaulting to 1000 [ 543.516405][T26564] loop8: detected capacity change from 0 to 512 [ 543.555055][T26564] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 543.567748][T26564] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 543.592296][T25998] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.625266][T26574] __nla_validate_parse: 8 callbacks suppressed [ 543.625281][T26574] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7312'. [ 543.678900][T26576] lo speed is unknown, defaulting to 1000 [ 543.740808][T26576] lo speed is unknown, defaulting to 1000 [ 543.845824][ T29] kauditd_printk_skb: 1027 callbacks suppressed [ 543.845838][ T29] audit: type=1400 audit(1761474185.506:62450): avc: denied { accept } for pid=26578 comm="syz.5.7314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 543.921543][T26582] netlink: 'syz.5.7315': attribute type 10 has an invalid length. [ 543.930803][T26582] team0: Device ipvlan0 failed to register rx_handler [ 544.015443][ T29] audit: type=1400 audit(1761474185.676:62451): avc: denied { create } for pid=26583 comm="syz.8.7311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ipx_socket permissive=1 [ 544.238783][T26596] FAULT_INJECTION: forcing a failure. [ 544.238783][T26596] name failslab, interval 1, probability 0, space 0, times 0 [ 544.251635][T26596] CPU: 0 UID: 0 PID: 26596 Comm: syz.8.7320 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 544.251689][T26596] Tainted: [W]=WARN [ 544.251695][T26596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 544.251709][T26596] Call Trace: [ 544.251722][T26596] [ 544.251731][T26596] __dump_stack+0x1d/0x30 [ 544.251757][T26596] dump_stack_lvl+0xe8/0x140 [ 544.251775][T26596] dump_stack+0x15/0x1b [ 544.251802][T26596] should_fail_ex+0x265/0x280 [ 544.251819][T26596] should_failslab+0x8c/0xb0 [ 544.251867][T26596] __kmalloc_noprof+0xa5/0x570 [ 544.251897][T26596] ? lwtunnel_state_alloc+0x1d/0x30 [ 544.251950][T26596] ? __nla_parse+0x40/0x60 [ 544.251973][T26596] lwtunnel_state_alloc+0x1d/0x30 [ 544.251999][T26596] ip6_tun_build_state+0xc5/0x3e0 [ 544.252092][T26596] lwtunnel_build_state+0x127/0x200 [ 544.252116][T26596] fib_nh_common_init+0xaa/0x260 [ 544.252143][T26596] fib_nh_init+0x67/0x1a0 [ 544.252164][T26596] rtm_new_nexthop+0x1e32/0x45f0 [ 544.252190][T26596] ? bpf_trace_run3+0x12c/0x1d0 [ 544.252267][T26596] ? strlen+0x19/0x40 [ 544.252327][T26596] ? perf_trace_kmem_cache_free+0x55/0x160 [ 544.252396][T26596] ? ns_capable+0x7d/0xb0 [ 544.252439][T26596] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 544.252498][T26596] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 544.252522][T26596] netlink_rcv_skb+0x123/0x220 [ 544.252554][T26596] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 544.252581][T26596] rtnetlink_rcv+0x1c/0x30 [ 544.252690][T26596] netlink_unicast+0x5c0/0x690 [ 544.252722][T26596] netlink_sendmsg+0x58b/0x6b0 [ 544.252745][T26596] ? __pfx_netlink_sendmsg+0x10/0x10 [ 544.252843][T26596] __sock_sendmsg+0x145/0x180 [ 544.252906][T26596] ____sys_sendmsg+0x31e/0x4e0 [ 544.252951][T26596] ___sys_sendmsg+0x17b/0x1d0 [ 544.252995][T26596] __x64_sys_sendmsg+0xd4/0x160 [ 544.253027][T26596] x64_sys_call+0x191e/0x3000 [ 544.253136][T26596] do_syscall_64+0xd2/0x200 [ 544.253153][T26596] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 544.253180][T26596] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 544.253237][T26596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.253256][T26596] RIP: 0033:0x7f3b419befc9 [ 544.253272][T26596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 544.253292][T26596] RSP: 002b:00007f3b40427038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 544.253309][T26596] RAX: ffffffffffffffda RBX: 00007f3b41c15fa0 RCX: 00007f3b419befc9 [ 544.253321][T26596] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 544.253390][T26596] RBP: 00007f3b40427090 R08: 0000000000000000 R09: 0000000000000000 [ 544.253404][T26596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 544.253418][T26596] R13: 00007f3b41c16038 R14: 00007f3b41c15fa0 R15: 00007ffc424175a8 [ 544.253435][T26596] [ 544.556631][T26602] FAULT_INJECTION: forcing a failure. [ 544.556631][T26602] name failslab, interval 1, probability 0, space 0, times 0 [ 544.569357][T26602] CPU: 0 UID: 0 PID: 26602 Comm: syz.2.7322 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 544.569388][T26602] Tainted: [W]=WARN [ 544.569394][T26602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 544.569419][T26602] Call Trace: [ 544.569425][T26602] [ 544.569433][T26602] __dump_stack+0x1d/0x30 [ 544.569455][T26602] dump_stack_lvl+0xe8/0x140 [ 544.569474][T26602] dump_stack+0x15/0x1b [ 544.569505][T26602] should_fail_ex+0x265/0x280 [ 544.569525][T26602] should_failslab+0x8c/0xb0 [ 544.569552][T26602] __kmalloc_node_noprof+0xaa/0x580 [ 544.569638][T26602] ? qdisc_alloc+0x65/0x440 [ 544.569670][T26602] qdisc_alloc+0x65/0x440 [ 544.569696][T26602] ? nla_strcmp+0xc3/0xe0 [ 544.569741][T26602] qdisc_create+0xf5/0x9e0 [ 544.569770][T26602] tc_modify_qdisc+0xa03/0x1420 [ 544.569805][T26602] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 544.569834][T26602] rtnetlink_rcv_msg+0x65a/0x6d0 [ 544.569930][T26602] netlink_rcv_skb+0x123/0x220 [ 544.569960][T26602] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 544.570007][T26602] rtnetlink_rcv+0x1c/0x30 [ 544.570094][T26602] netlink_unicast+0x5c0/0x690 [ 544.570123][T26602] netlink_sendmsg+0x58b/0x6b0 [ 544.570212][T26602] ? __pfx_netlink_sendmsg+0x10/0x10 [ 544.570231][T26602] __sock_sendmsg+0x145/0x180 [ 544.570255][T26602] ____sys_sendmsg+0x31e/0x4e0 [ 544.570287][T26602] ___sys_sendmsg+0x17b/0x1d0 [ 544.570355][T26602] __x64_sys_sendmsg+0xd4/0x160 [ 544.570536][T26602] x64_sys_call+0x191e/0x3000 [ 544.570557][T26602] do_syscall_64+0xd2/0x200 [ 544.570581][T26602] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 544.570613][T26602] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 544.570712][T26602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.570731][T26602] RIP: 0033:0x7f4d00b1efc9 [ 544.570748][T26602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 544.570767][T26602] RSP: 002b:00007f4cff57f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 544.570854][T26602] RAX: ffffffffffffffda RBX: 00007f4d00d75fa0 RCX: 00007f4d00b1efc9 [ 544.570883][T26602] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000005 [ 544.570894][T26602] RBP: 00007f4cff57f090 R08: 0000000000000000 R09: 0000000000000000 [ 544.570910][T26602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 544.570986][T26602] R13: 00007f4d00d76038 R14: 00007f4d00d75fa0 R15: 00007ffd2d4650d8 [ 544.571007][T26602] [ 544.821636][T26600] hub 1-0:1.0: USB hub found [ 544.826430][T26600] hub 1-0:1.0: 8 ports detected [ 544.845599][T26600] lo speed is unknown, defaulting to 1000 [ 544.877294][T26604] random: crng reseeded on system resumption [ 544.913559][T26587] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7316'. [ 544.944598][T26600] lo speed is unknown, defaulting to 1000 [ 544.994386][T26614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7325'. [ 545.124909][T26622] loop2: detected capacity change from 0 to 1024 [ 545.142650][T26620] lo speed is unknown, defaulting to 1000 [ 545.161749][T26622] ext3: Bad value for 'mb_optimize_scan' [ 545.242709][T26629] xt_hashlimit: max too large, truncated to 1048576 [ 545.334899][T26620] lo speed is unknown, defaulting to 1000 [ 545.493827][T26639] FAULT_INJECTION: forcing a failure. [ 545.493827][T26639] name failslab, interval 1, probability 0, space 0, times 0 [ 545.506634][T26639] CPU: 0 UID: 0 PID: 26639 Comm: syz.2.7333 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 545.506711][T26639] Tainted: [W]=WARN [ 545.506719][T26639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 545.506733][T26639] Call Trace: [ 545.506738][T26639] [ 545.506776][T26639] __dump_stack+0x1d/0x30 [ 545.506797][T26639] dump_stack_lvl+0xe8/0x140 [ 545.506820][T26639] dump_stack+0x15/0x1b [ 545.506845][T26639] should_fail_ex+0x265/0x280 [ 545.506865][T26639] should_failslab+0x8c/0xb0 [ 545.506891][T26639] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 545.506918][T26639] ? __alloc_skb+0x101/0x320 [ 545.507048][T26639] __alloc_skb+0x101/0x320 [ 545.507072][T26639] ? audit_log_start+0x342/0x720 [ 545.507172][T26639] audit_log_start+0x3a0/0x720 [ 545.507246][T26639] audit_seccomp+0x48/0x100 [ 545.507285][T26639] ? __seccomp_filter+0x82d/0x1250 [ 545.507440][T26639] __seccomp_filter+0x83e/0x1250 [ 545.507470][T26639] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 545.507542][T26639] ? radix_tree_lookup+0x12d/0x140 [ 545.507571][T26639] ? idr_find+0x2d/0x40 [ 545.507586][T26639] ? __rcu_read_unlock+0x4f/0x70 [ 545.507614][T26639] __secure_computing+0x82/0x150 [ 545.507783][T26639] syscall_trace_enter+0xcf/0x1e0 [ 545.507852][T26639] do_syscall_64+0xac/0x200 [ 545.507869][T26639] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 545.507894][T26639] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 545.507939][T26639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.508027][T26639] RIP: 0033:0x7f4d00b1d9dc [ 545.508041][T26639] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 545.508057][T26639] RSP: 002b:00007f4cff55e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 545.508074][T26639] RAX: ffffffffffffffda RBX: 00007f4d00d76090 RCX: 00007f4d00b1d9dc [ 545.508088][T26639] RDX: 000000000000000f RSI: 00007f4cff55e0a0 RDI: 0000000000000009 [ 545.508102][T26639] RBP: 00007f4cff55e090 R08: 0000000000000000 R09: 0000000000000000 [ 545.508155][T26639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 545.508166][T26639] R13: 00007f4d00d76128 R14: 00007f4d00d76090 R15: 00007ffd2d4650d8 [ 545.508184][T26639] [ 545.508193][T26639] audit: audit_lost=5 audit_rate_limit=0 audit_backlog_limit=64 [ 545.546910][ T29] audit: type=1326 audit(1761474187.156:62452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26634 comm="syz.2.7333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d00b1efc9 code=0x7ffc0000 [ 545.548972][T26639] audit: out of memory in audit_log_start [ 545.553141][ T29] audit: type=1326 audit(1761474187.156:62453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26634 comm="syz.2.7333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4d00b1d810 code=0x7ffc0000 [ 545.626924][T26640] lo speed is unknown, defaulting to 1000 [ 545.627057][ T29] audit: type=1326 audit(1761474187.156:62454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26634 comm="syz.2.7333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4d00b1da7f code=0x7ffc0000 [ 545.821172][ T29] audit: type=1326 audit(1761474187.156:62455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26634 comm="syz.2.7333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f4d00b1efc9 code=0x7ffc0000 [ 545.826313][T26640] lo speed is unknown, defaulting to 1000 [ 545.845165][ T29] audit: type=1326 audit(1761474187.276:62456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26634 comm="syz.2.7333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4d00b1da7f code=0x7ffc0000 [ 545.874703][ T29] audit: type=1326 audit(1761474187.276:62457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26634 comm="syz.2.7333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f4d00b1dc2a code=0x7ffc0000 [ 545.945303][T26645] lo speed is unknown, defaulting to 1000 [ 545.996027][T26645] lo speed is unknown, defaulting to 1000 [ 546.359505][T26653] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7338'. [ 546.534011][T26659] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7340'. [ 546.551162][T26659] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7340'. [ 546.561138][T26659] ref_ctr increment failed for inode: 0xb2d offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888109d078c0 [ 546.601193][T26648] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7337'. [ 546.732855][T26664] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7342'. [ 546.742214][T26662] 9pnet_fd: Insufficient options for proto=fd [ 546.910842][T26684] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 546.918373][T26684] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 546.931548][T26684] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 546.939045][T26684] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 546.963804][T26689] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7349'. [ 547.077634][T26698] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 547.085908][T26698] tipc: Enabled bearer , priority 10 [ 547.206931][T26693] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7352'. [ 547.240073][T26706] loop8: detected capacity change from 0 to 1024 [ 547.247180][T26706] ext3: Bad value for 'mb_optimize_scan' [ 547.270418][T26708] loop7: detected capacity change from 0 to 1024 [ 547.277407][T26708] ext3: Bad value for 'mb_optimize_scan' [ 547.308928][T26706] xt_hashlimit: max too large, truncated to 1048576 [ 547.355993][T26708] xt_hashlimit: max too large, truncated to 1048576 [ 547.651714][T26719] loop8: detected capacity change from 0 to 512 [ 547.673455][T26719] EXT4-fs (loop8): blocks per group (95) and clusters per group (32768) inconsistent [ 548.081076][T11145] tipc: Node number set to 1852761900 [ 548.099218][T26731] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 548.933789][ T29] kauditd_printk_skb: 278 callbacks suppressed [ 548.933803][ T29] audit: type=1326 audit(1761474190.596:62736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26745 comm="syz.7.7372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e3e33efc9 code=0x7ffc0000 [ 548.963588][ T29] audit: type=1326 audit(1761474190.596:62737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26745 comm="syz.7.7372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4e3e33efc9 code=0x7ffc0000 [ 548.987159][ T29] audit: type=1326 audit(1761474190.596:62738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26745 comm="syz.7.7372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e3e33efc9 code=0x7ffc0000 [ 549.051651][ T29] audit: type=1326 audit(1761474190.676:62739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26745 comm="syz.7.7372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4e3e33efc9 code=0x7ffc0000 [ 549.075423][ T29] audit: type=1326 audit(1761474190.676:62740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26745 comm="syz.7.7372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e3e33efc9 code=0x7ffc0000 [ 549.099150][ T29] audit: type=1326 audit(1761474190.676:62741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26745 comm="syz.7.7372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e3e33efc9 code=0x7ffc0000 [ 549.122869][ T29] audit: type=1326 audit(1761474190.676:62742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26745 comm="syz.7.7372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f4e3e33efc9 code=0x7ffc0000 [ 549.128030][T26752] __nla_validate_parse: 3 callbacks suppressed [ 549.128046][T26752] netlink: 44 bytes leftover after parsing attributes in process `syz.5.7375'. [ 549.146788][ T29] audit: type=1326 audit(1761474190.676:62743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26745 comm="syz.7.7372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e3e33efc9 code=0x7ffc0000 [ 549.186038][ T29] audit: type=1326 audit(1761474190.676:62744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26745 comm="syz.7.7372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f4e3e33efc9 code=0x7ffc0000 [ 549.198497][T26752] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7375'. [ 549.209638][ T29] audit: type=1326 audit(1761474190.676:62745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26745 comm="syz.7.7372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e3e33efc9 code=0x7ffc0000 [ 549.406826][T26777] macsec1: entered promiscuous mode [ 549.412095][T26777] bridge0: entered promiscuous mode [ 549.426828][T26777] bridge0: port 1(macsec1) entered blocking state [ 549.430114][T26751] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7368'. [ 549.433383][T26777] bridge0: port 1(macsec1) entered disabled state [ 549.449133][T26777] macsec1: entered allmulticast mode [ 549.455307][T26777] bridge0: entered allmulticast mode [ 549.466476][T26777] macsec1: left allmulticast mode [ 549.471677][T26777] bridge0: left allmulticast mode [ 549.477776][T26770] xt_hashlimit: max too large, truncated to 1048576 [ 549.485658][T26777] bridge0: left promiscuous mode [ 549.563591][T26792] loop8: detected capacity change from 0 to 2048 [ 549.574285][T26792] EXT4-fs: Ignoring removed bh option [ 549.586743][T26797] loop2: detected capacity change from 0 to 512 [ 549.596663][T26792] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 549.611541][T26792] EXT4-fs error (device loop8): ext4_iget_extra_inode:5075: inode #12: comm syz.8.7391: corrupted in-inode xattr: e_name out of bounds [ 549.625293][T26797] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.7394: error while reading EA inode 32 err=-116 [ 549.625466][T26797] EXT4-fs (loop2): Remounting filesystem read-only [ 549.645000][T26792] EXT4-fs error (device loop8): ext4_iget_extra_inode:5075: inode #12: comm syz.8.7391: corrupted in-inode xattr: e_name out of bounds [ 549.661151][T26797] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 549.671775][T26792] netlink: 44 bytes leftover after parsing attributes in process `syz.8.7391'. [ 549.680716][T26792] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7391'. [ 549.690177][T26792] EXT4-fs error (device loop8): ext4_iget_extra_inode:5075: inode #12: comm syz.8.7391: corrupted in-inode xattr: e_name out of bounds [ 549.731086][T26797] EXT4-fs (loop2): 1 orphan inode deleted [ 549.737606][T26797] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 549.751703][T25998] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 549.788915][T26797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 549.802341][T26789] wg1: entered promiscuous mode [ 549.807227][T26789] wg1: entered allmulticast mode [ 549.814887][T26809] loop8: detected capacity change from 0 to 256 [ 549.889663][T26820] loop8: detected capacity change from 0 to 512 [ 549.905029][T26820] tmpfs: Unknown parameter 'msdos' [ 550.014612][T26830] xt_hashlimit: max too large, truncated to 1048576 [ 550.125619][ T4893] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.184324][ T4893] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.254279][ T4893] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.314230][ T4893] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.325225][T26821] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7400'. [ 550.401801][ T4893] bridge_slave_1: left allmulticast mode [ 550.407489][ T4893] bridge_slave_1: left promiscuous mode [ 550.413442][ T4893] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.452081][ T4893] bridge_slave_0: left allmulticast mode [ 550.457779][ T4893] bridge_slave_0: left promiscuous mode [ 550.463596][ T4893] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.499045][T26856] FAULT_INJECTION: forcing a failure. [ 550.499045][T26856] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 550.512161][T26856] CPU: 1 UID: 0 PID: 26856 Comm: syz.5.7411 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 550.512242][T26856] Tainted: [W]=WARN [ 550.512293][T26856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 550.512305][T26856] Call Trace: [ 550.512311][T26856] [ 550.512318][T26856] __dump_stack+0x1d/0x30 [ 550.512342][T26856] dump_stack_lvl+0xe8/0x140 [ 550.512370][T26856] dump_stack+0x15/0x1b [ 550.512463][T26856] should_fail_ex+0x265/0x280 [ 550.512484][T26856] should_fail+0xb/0x20 [ 550.512501][T26856] should_fail_usercopy+0x1a/0x20 [ 550.512602][T26856] _copy_from_user+0x1c/0xb0 [ 550.512632][T26856] ___sys_sendmsg+0xc1/0x1d0 [ 550.512675][T26856] __x64_sys_sendmsg+0xd4/0x160 [ 550.512726][T26856] x64_sys_call+0x191e/0x3000 [ 550.512749][T26856] do_syscall_64+0xd2/0x200 [ 550.512768][T26856] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 550.512861][T26856] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 550.512970][T26856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.512994][T26856] RIP: 0033:0x7f6a10b1efc9 [ 550.513070][T26856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 550.513089][T26856] RSP: 002b:00007f6a0f587038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 550.513107][T26856] RAX: ffffffffffffffda RBX: 00007f6a10d75fa0 RCX: 00007f6a10b1efc9 [ 550.513148][T26856] RDX: 00000000240008c4 RSI: 0000200000000000 RDI: 000000000000000c [ 550.513162][T26856] RBP: 00007f6a0f587090 R08: 0000000000000000 R09: 0000000000000000 [ 550.513249][T26856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 550.513262][T26856] R13: 00007f6a10d76038 R14: 00007f6a10d75fa0 R15: 00007ffebd283f18 [ 550.513280][T26856] [ 550.792218][T26866] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7415'. [ 550.799097][ T4893] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 550.871455][ T4893] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 550.892081][ T4893] bond0 (unregistering): Released all slaves [ 550.926069][T26835] lo speed is unknown, defaulting to 1000 [ 551.121187][T26854] net_ratelimit: 17 callbacks suppressed [ 551.121202][T26854] Set syz1 is full, maxelem 65536 reached [ 551.133205][ T4893] tipc: Disabling bearer [ 551.138467][ T4893] tipc: Left network mode [ 551.138468][T26835] lo speed is unknown, defaulting to 1000 [ 551.207994][T26878] random: crng reseeded on system resumption [ 551.225108][T26882] loop2: detected capacity change from 0 to 512 [ 551.237389][T26882] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 551.278804][ T4893] hsr_slave_0: left promiscuous mode [ 551.285624][T26882] EXT4-fs (loop2): 1 truncate cleaned up [ 551.291823][ T4893] hsr_slave_1: left promiscuous mode [ 551.297668][T26882] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 551.313765][ T4893] veth1_macvtap: left promiscuous mode [ 551.319290][ T4893] veth0_macvtap: left promiscuous mode [ 551.325018][ T4893] veth1_vlan: left promiscuous mode [ 551.330289][ T4893] veth0_vlan: left promiscuous mode [ 551.355914][T26032] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 551.422976][T26889] random: crng reseeded on system resumption [ 551.467381][T26896] futex_wake_op: syz.7.7426 tries to shift op by 144; fix this program [ 551.477052][T26896] netlink: 5452 bytes leftover after parsing attributes in process `syz.7.7426'. [ 551.529702][ T4893] team0 (unregistering): Port device team_slave_1 removed [ 551.545256][T26907] rdma_rxe: rxe_newlink: failed to add lo [ 551.562436][ T4893] team0 (unregistering): Port device team_slave_0 removed [ 551.662409][T26835] chnl_net:caif_netlink_parms(): no params data found [ 551.732785][T26835] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.739966][T26835] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.747970][T26835] bridge_slave_0: entered allmulticast mode [ 551.758564][T26835] bridge_slave_0: entered promiscuous mode [ 551.769586][T26927] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 551.771488][T26925] loop2: detected capacity change from 0 to 4096 [ 551.777085][T26927] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 551.792348][T26927] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 551.792630][T26925] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 551.799818][T26927] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 551.824363][T26835] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.831544][T26835] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.838821][T26835] bridge_slave_1: entered allmulticast mode [ 551.845465][T26835] bridge_slave_1: entered promiscuous mode [ 551.851903][T26925] netlink: 96 bytes leftover after parsing attributes in process `syz.2.7433'. [ 551.883229][T26835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 551.901523][T26835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 551.937922][T26835] team0: Port device team_slave_0 added [ 551.939127][T26931] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7435'. [ 551.945179][T26835] team0: Port device team_slave_1 added [ 552.012817][T26835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 552.019908][T26835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 552.046027][T26835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 552.057562][T26835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 552.064666][T26835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 552.091454][T26835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 552.102525][T26032] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 552.126209][T26835] hsr_slave_0: entered promiscuous mode [ 552.137699][T26835] hsr_slave_1: entered promiscuous mode [ 552.221725][T26948] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 552.229931][T26948] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 553.310951][T26956] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=26956 comm=syz.7.7445 [ 553.495443][T26835] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 553.515875][T26967] xt_hashlimit: max too large, truncated to 1048576 [ 553.534738][T26835] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 553.550914][T26835] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 553.903312][T26993] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 553.908268][T26985] lo speed is unknown, defaulting to 1000 [ 553.911565][T26993] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 553.943771][T26985] lo speed is unknown, defaulting to 1000 [ 553.992644][T26835] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 554.045698][T26835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 554.059339][T26835] 8021q: adding VLAN 0 to HW filter on device team0 [ 554.069277][ T4893] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.076546][ T4893] bridge0: port 1(bridge_slave_0) entered forwarding state [ 554.113315][ T4893] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.120417][ T4893] bridge0: port 2(bridge_slave_1) entered forwarding state [ 554.198160][T26835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 554.459268][T26835] veth0_vlan: entered promiscuous mode [ 554.478754][T26835] veth1_vlan: entered promiscuous mode [ 554.499378][T26835] veth0_macvtap: entered promiscuous mode [ 554.507751][T26835] veth1_macvtap: entered promiscuous mode [ 554.526751][T26835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 554.542942][T26835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 554.579292][ T41] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.588858][ T4893] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.604348][ T4893] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.621455][ T4893] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.724879][T27032] IPv6: sit1: Disabled Multicast RS [ 554.731494][T27032] sit1: entered allmulticast mode [ 555.352949][T27034] random: crng reseeded on system resumption [ 555.529401][T27041] tmpfs: Unknown parameter 'msdos' [ 555.611470][T27047] netlink: 'syz.5.7465': attribute type 10 has an invalid length. [ 555.630771][T27047] team0: Device ipvlan0 failed to register rx_handler [ 556.029179][T27060] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 556.037445][T27060] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 556.106087][T27059] 9pnet: Could not find request transport: fd [ 559.064805][T27209] __dump_stack+0x1d/0x30 [ 559.064872][T27209] dump_stack_lvl+0xe8/0x140 [ 559.064926][T27209] dump_stack+0x15/0x1b [ 559.064945][T27209] should_fail_ex+0x265/0x280 [ 559.064965][T27209] should_fail+0xb/0x20 [ 559.065021][T27209] should_fail_usercopy+0x1a/0x20 [ 559.065042][T27209] _copy_to_user+0x20/0xa0 [ 559.065070][T27209] simple_read_from_buffer+0xb5/0x130 [ 559.065108][T27209] proc_fail_nth_read+0x10e/0x150 [ 559.065175][T27209] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 559.065207][T27209] vfs_read+0x1a8/0x770 [ 559.065231][T27209] ? __rcu_read_unlock+0x4f/0x70 [ 559.065254][T27209] ? __fget_files+0x184/0x1c0 [ 559.065307][T27209] ksys_read+0xda/0x1a0 [ 559.065411][T27209] __x64_sys_read+0x40/0x50 [ 559.065439][T27209] x64_sys_call+0x27c0/0x3000 [ 559.065463][T27209] do_syscall_64+0xd2/0x200 [ 559.065482][T27209] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 559.065547][T27209] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 559.065580][T27209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.065611][T27209] RIP: 0033:0x7f6a10b1d9dc [ 559.065626][T27209] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 559.065671][T27209] RSP: 002b:00007f6a0f587030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 559.065691][T27209] RAX: ffffffffffffffda RBX: 00007f6a10d75fa0 RCX: 00007f6a10b1d9dc [ 559.065705][T27209] RDX: 000000000000000f RSI: 00007f6a0f5870a0 RDI: 0000000000000004 [ 559.065767][T27209] RBP: 00007f6a0f587090 R08: 0000000000000000 R09: 0000000000000000 [ 559.065780][T27209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 559.065790][T27209] R13: 00007f6a10d76038 R14: 00007f6a10d75fa0 R15: 00007ffebd283f18 [ 559.065807][T27209] [ 559.275403][T27203] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.282636][T27203] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.338306][T27203] bridge_slave_0: left allmulticast mode [ 559.344540][T27203] bridge_slave_0: left promiscuous mode [ 559.350310][T27203] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.374884][T27203] bridge_slave_1: left allmulticast mode [ 559.380598][T27203] bridge_slave_1: left promiscuous mode [ 559.386387][T27203] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.409007][T27203] bond0: (slave bond_slave_0): Releasing backup interface [ 559.430646][T27203] bond0: (slave bond_slave_1): Releasing backup interface [ 559.454248][T27203] team0: Port device team_slave_0 removed [ 559.502481][T27174] loop2: detected capacity change from 0 to 512 [ 559.502516][T27203] team0: Port device team_slave_1 removed [ 559.516124][T27174] EXT4-fs error (device loop2): __ext4_fill_super:5512: inode #2: comm syz.2.7514: invalid fast symlink length 39 [ 559.551224][T27174] EXT4-fs (loop2): get root inode failed [ 559.557132][T27174] EXT4-fs (loop2): mount failed [ 559.571659][T27203] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 559.580679][T27203] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 559.592971][T27203] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 559.601946][T27203] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 559.614180][T27211] ipvlan0: entered allmulticast mode [ 559.619593][T27211] veth0_vlan: entered allmulticast mode [ 559.627318][T27211] team0: Device ipvlan0 failed to register rx_handler [ 559.835863][T27245] FAULT_INJECTION: forcing a failure. [ 559.835863][T27245] name failslab, interval 1, probability 0, space 0, times 0 [ 559.848808][T27245] CPU: 0 UID: 0 PID: 27245 Comm: syz.7.7547 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 559.848838][T27245] Tainted: [W]=WARN [ 559.848844][T27245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 559.848855][T27245] Call Trace: [ 559.848860][T27245] [ 559.848867][T27245] __dump_stack+0x1d/0x30 [ 559.848890][T27245] dump_stack_lvl+0xe8/0x140 [ 559.848917][T27245] dump_stack+0x15/0x1b [ 559.848936][T27245] should_fail_ex+0x265/0x280 [ 559.848958][T27245] should_failslab+0x8c/0xb0 [ 559.849022][T27245] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 559.849118][T27245] ? v9fs_session_init+0x4b/0xde0 [ 559.849153][T27245] kstrdup+0x3e/0xd0 [ 559.849179][T27245] v9fs_session_init+0x4b/0xde0 [ 559.849287][T27245] ? __rcu_read_unlock+0x4f/0x70 [ 559.849315][T27245] ? avc_has_perm_noaudit+0x1b1/0x200 [ 559.849337][T27245] ? should_fail_ex+0xdb/0x280 [ 559.849357][T27245] ? v9fs_mount+0x51/0x5c0 [ 559.849379][T27245] ? should_failslab+0x8c/0xb0 [ 559.849485][T27245] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 559.849513][T27245] v9fs_mount+0x67/0x5c0 [ 559.849594][T27245] ? selinux_capable+0x31/0x40 [ 559.849691][T27245] ? __pfx_v9fs_mount+0x10/0x10 [ 559.849714][T27245] legacy_get_tree+0x78/0xd0 [ 559.849739][T27245] vfs_get_tree+0x57/0x1d0 [ 559.849769][T27245] do_new_mount+0x24d/0x660 [ 559.849795][T27245] ? security_capable+0x83/0x90 [ 559.849839][T27245] path_mount+0x4a5/0xb70 [ 559.849897][T27245] ? user_path_at+0x109/0x130 [ 559.849918][T27245] __se_sys_mount+0x28c/0x2e0 [ 559.849939][T27245] ? fput+0x8f/0xc0 [ 559.849956][T27245] __x64_sys_mount+0x67/0x80 [ 559.850013][T27245] x64_sys_call+0x2b51/0x3000 [ 559.850038][T27245] do_syscall_64+0xd2/0x200 [ 559.850057][T27245] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 559.850087][T27245] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 559.850120][T27245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.850175][T27245] RIP: 0033:0x7f4e3e33efc9 [ 559.850195][T27245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 559.850214][T27245] RSP: 002b:00007f4e3cda7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 559.850235][T27245] RAX: ffffffffffffffda RBX: 00007f4e3e595fa0 RCX: 00007f4e3e33efc9 [ 559.850249][T27245] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 0000000000000000 [ 559.850260][T27245] RBP: 00007f4e3cda7090 R08: 0000200000000040 R09: 0000000000000000 [ 559.850271][T27245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 559.850328][T27245] R13: 00007f4e3e596038 R14: 00007f4e3e595fa0 R15: 00007ffd57cadb78 [ 559.850392][T27245] [ 560.111904][T27251] random: crng reseeded on system resumption [ 560.200106][T27256] netlink: 'syz.7.7550': attribute type 10 has an invalid length. [ 560.211940][T27256] team0: Device ipvlan0 failed to register rx_handler [ 560.239641][T27248] lo speed is unknown, defaulting to 1000 [ 560.284747][T27248] lo speed is unknown, defaulting to 1000 [ 560.438795][T27276] tmpfs: Unknown parameter 'msdos' [ 560.480471][T27285] loop0: detected capacity change from 0 to 2048 [ 560.487890][T27287] xt_hashlimit: max too large, truncated to 1048576 [ 560.518627][T27285] EXT4-fs: Ignoring removed bh option [ 560.576441][T27285] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 560.668123][T27285] EXT4-fs error (device loop0): ext4_iget_extra_inode:5075: inode #12: comm syz.0.7562: corrupted in-inode xattr: e_name out of bounds [ 560.761180][T27285] EXT4-fs error (device loop0): ext4_iget_extra_inode:5075: inode #12: comm syz.0.7562: corrupted in-inode xattr: e_name out of bounds [ 560.825382][T27316] EXT4-fs error (device loop0): ext4_iget_extra_inode:5075: inode #12: comm syz.0.7562: corrupted in-inode xattr: e_name out of bounds [ 560.862703][T27299] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 560.904451][T27321] tmpfs: Unknown parameter 'msdos' [ 560.936249][T26835] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 560.986966][T27327] loop0: detected capacity change from 0 to 1024 [ 561.041457][T27327] ext3: Bad value for 'mb_optimize_scan' [ 561.128541][T27331] xt_hashlimit: max too large, truncated to 1048576 [ 561.233816][ T29] kauditd_printk_skb: 347 callbacks suppressed [ 561.233873][ T29] audit: type=1326 audit(1761474202.896:63375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27322 comm="syz.2.7577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4d00b15e67 code=0x7ffc0000 [ 561.388783][ T29] audit: type=1326 audit(1761474202.916:63376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27322 comm="syz.2.7577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4d00abb099 code=0x7ffc0000 [ 561.412390][ T29] audit: type=1326 audit(1761474202.916:63377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27322 comm="syz.2.7577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f4d00b1efc9 code=0x7ffc0000 [ 561.435982][ T29] audit: type=1326 audit(1761474202.926:63378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27322 comm="syz.2.7577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4d00b15e67 code=0x7ffc0000 [ 561.459558][ T29] audit: type=1326 audit(1761474202.926:63379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27322 comm="syz.2.7577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4d00abb099 code=0x7ffc0000 [ 561.483107][ T29] audit: type=1326 audit(1761474202.926:63380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27322 comm="syz.2.7577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f4d00b1efc9 code=0x7ffc0000 [ 561.492947][T27344] random: crng reseeded on system resumption [ 561.506773][ T29] audit: type=1326 audit(1761474202.936:63381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27322 comm="syz.2.7577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4d00b15e67 code=0x7ffc0000 [ 561.536329][ T29] audit: type=1326 audit(1761474202.936:63382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27322 comm="syz.2.7577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4d00abb099 code=0x7ffc0000 [ 561.559827][ T29] audit: type=1326 audit(1761474202.936:63383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27322 comm="syz.2.7577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f4d00b1efc9 code=0x7ffc0000 [ 561.583398][ T29] audit: type=1326 audit(1761474202.946:63384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27322 comm="syz.2.7577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4d00b15e67 code=0x7ffc0000 [ 561.760137][T27349] netlink: 'syz.4.7584': attribute type 3 has an invalid length. [ 561.776049][T27353] futex_wake_op: syz.0.7586 tries to shift op by 144; fix this program [ 561.829471][T27359] loop2: detected capacity change from 0 to 1024 [ 561.842454][T27361] rdma_rxe: rxe_newlink: failed to add lo [ 561.856425][T27359] ext3: Bad value for 'mb_optimize_scan' [ 561.909011][T27365] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 561.917268][T27365] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 561.928144][T27359] xt_hashlimit: max too large, truncated to 1048576 [ 561.977652][T27367] loop2: detected capacity change from 0 to 2048 [ 561.989239][T27367] EXT4-fs: Ignoring removed bh option [ 562.005630][T27367] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 562.025225][T27367] EXT4-fs error (device loop2): ext4_iget_extra_inode:5075: inode #12: comm syz.2.7591: corrupted in-inode xattr: e_name out of bounds [ 562.040595][T27367] EXT4-fs error (device loop2): ext4_iget_extra_inode:5075: inode #12: comm syz.2.7591: corrupted in-inode xattr: e_name out of bounds [ 562.061572][T27367] EXT4-fs error (device loop2): ext4_iget_extra_inode:5075: inode #12: comm syz.2.7591: corrupted in-inode xattr: e_name out of bounds [ 562.088793][T27376] warn_unsupported: 55 callbacks suppressed [ 562.088807][T27376] kernel read not supported for file /!selinuxwk1m9ɞ*T#jYmVvm(p-QZ#{ (pid: 27376 comm: syz.7.7594) [ 562.109775][T26032] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.130184][T27376] netlink: 'syz.7.7594': attribute type 10 has an invalid length. [ 562.154582][T27376] team0: Device ipvlan0 failed to register rx_handler [ 562.252755][T27389] netlink: 'syz.7.7600': attribute type 10 has an invalid length. [ 562.262331][T27389] team0: Device ipvlan0 failed to register rx_handler [ 562.440209][T27396] loop2: detected capacity change from 0 to 1024 [ 562.447626][T27396] ext3: Bad value for 'mb_optimize_scan' [ 562.508954][T27396] xt_hashlimit: max too large, truncated to 1048576 [ 562.577302][T27403] loop2: detected capacity change from 0 to 2048 [ 562.584060][T27403] EXT4-fs: Ignoring removed bh option [ 562.592443][T27403] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 562.617524][T27403] EXT4-fs error (device loop2): ext4_iget_extra_inode:5075: inode #12: comm syz.2.7605: corrupted in-inode xattr: e_name out of bounds [ 562.641154][T27403] EXT4-fs error (device loop2): ext4_iget_extra_inode:5075: inode #12: comm syz.2.7605: corrupted in-inode xattr: e_name out of bounds [ 562.660621][T27403] EXT4-fs error (device loop2): ext4_iget_extra_inode:5075: inode #12: comm syz.2.7605: corrupted in-inode xattr: e_name out of bounds [ 562.705897][T26032] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.824563][T27420] loop2: detected capacity change from 0 to 512 [ 562.855214][T27409] lo speed is unknown, defaulting to 1000 [ 562.865899][T27420] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 562.889108][T27409] lo speed is unknown, defaulting to 1000 [ 562.896302][T27420] EXT4-fs (loop2): invalid journal inode [ 562.910168][T27420] EXT4-fs (loop2): can't get journal size [ 562.923357][T27426] netlink: 'syz.5.7614': attribute type 3 has an invalid length. [ 562.931926][T27420] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 562.940987][T27420] System zones: 1-12, 13-13 [ 562.946275][T27420] EXT4-fs (loop2): 1 truncate cleaned up [ 562.955654][T27420] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 563.045163][T27439] futex_wake_op: syz.5.7616 tries to shift op by 144; fix this program [ 563.071287][T27439] __nla_validate_parse: 10 callbacks suppressed [ 563.071304][T27439] netlink: 5452 bytes leftover after parsing attributes in process `syz.5.7616'. [ 563.104682][T27421] lo speed is unknown, defaulting to 1000 [ 563.178062][T26032] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 563.290259][T27451] loop2: detected capacity change from 0 to 1024 [ 563.297016][T27451] EXT4-fs: Ignoring removed orlov option [ 563.302808][T27451] EXT4-fs: Ignoring removed nomblk_io_submit option [ 563.310740][ T4893] bond0 (unregistering): Released all slaves [ 563.318847][T27421] lo speed is unknown, defaulting to 1000 [ 563.328222][T27451] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 563.352399][T27443] rdma_rxe: rxe_newlink: failed to add lo [ 563.364036][ T4893] tipc: Left network mode [ 563.417230][ T4893] hsr_slave_0: left promiscuous mode [ 563.477451][ T58] smc: removing ib device syz2 [ 563.500835][T26032] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 563.526135][T27421] chnl_net:caif_netlink_parms(): no params data found [ 563.559208][T27460] FAULT_INJECTION: forcing a failure. [ 563.559208][T27460] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 563.572480][T27460] CPU: 0 UID: 0 PID: 27460 Comm: syz.2.7620 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 563.572515][T27460] Tainted: [W]=WARN [ 563.572523][T27460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 563.572537][T27460] Call Trace: [ 563.572544][T27460] [ 563.572595][T27460] __dump_stack+0x1d/0x30 [ 563.572616][T27460] dump_stack_lvl+0xe8/0x140 [ 563.572638][T27460] dump_stack+0x15/0x1b [ 563.572658][T27460] should_fail_ex+0x265/0x280 [ 563.572679][T27460] should_fail+0xb/0x20 [ 563.572695][T27460] should_fail_usercopy+0x1a/0x20 [ 563.572836][T27460] _copy_to_user+0x20/0xa0 [ 563.572859][T27460] simple_read_from_buffer+0xb5/0x130 [ 563.572948][T27460] proc_fail_nth_read+0x10e/0x150 [ 563.572983][T27460] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 563.573012][T27460] vfs_read+0x1a8/0x770 [ 563.573075][T27460] ? raw_connect+0x9/0x20 [ 563.573102][T27460] ? ieee802154_sock_connect+0x8f/0xc0 [ 563.573142][T27460] ? __pfx_ieee802154_sock_connect+0x10/0x10 [ 563.573236][T27460] ? __sys_connect+0x20b/0x2b0 [ 563.573269][T27460] ksys_read+0xda/0x1a0 [ 563.573295][T27460] __x64_sys_read+0x40/0x50 [ 563.573317][T27460] x64_sys_call+0x27c0/0x3000 [ 563.573344][T27460] do_syscall_64+0xd2/0x200 [ 563.573364][T27460] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 563.573437][T27460] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 563.573505][T27460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.573599][T27460] RIP: 0033:0x7f4d00b1d9dc [ 563.573616][T27460] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 563.573633][T27460] RSP: 002b:00007f4cff57f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 563.573650][T27460] RAX: ffffffffffffffda RBX: 00007f4d00d75fa0 RCX: 00007f4d00b1d9dc [ 563.573661][T27460] RDX: 000000000000000f RSI: 00007f4cff57f0a0 RDI: 0000000000000004 [ 563.573673][T27460] RBP: 00007f4cff57f090 R08: 0000000000000000 R09: 0000000000000000 [ 563.573687][T27460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 563.573714][T27460] R13: 00007f4d00d76038 R14: 00007f4d00d75fa0 R15: 00007ffd2d4650d8 [ 563.573733][T27460] [ 563.840462][T27421] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.847674][T27421] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.855891][T27421] bridge_slave_0: entered allmulticast mode [ 563.862653][T27421] bridge_slave_0: entered promiscuous mode [ 563.871429][T27421] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.878547][T27421] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.895676][T27421] bridge_slave_1: entered allmulticast mode [ 563.902342][T27421] bridge_slave_1: entered promiscuous mode [ 563.922868][T27473] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7626'. [ 563.942789][T27421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 563.954607][T27421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 564.006347][T27479] xt_connbytes: Forcing CT accounting to be enabled [ 564.024342][T27421] team0: Port device team_slave_0 added [ 564.030710][T27421] team0: Port device team_slave_1 added [ 564.053224][T27486] xt_hashlimit: max too large, truncated to 1048576 [ 564.095828][T27421] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 564.102826][T27421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 564.113144][T27495] futex_wake_op: syz.7.7635 tries to shift op by 144; fix this program [ 564.128891][T27421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 564.156939][T27421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 564.164354][T27421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 564.190574][T27421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 564.201315][T27495] netlink: 5452 bytes leftover after parsing attributes in process `syz.7.7635'. [ 564.229977][T27421] hsr_slave_0: entered promiscuous mode [ 564.236928][T27421] hsr_slave_1: entered promiscuous mode [ 564.243672][T27421] debugfs: 'hsr0' already exists in 'hsr' [ 564.249428][T27421] Cannot create hsr debugfs directory [ 564.268533][T27504] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 564.271395][T27502] rdma_rxe: rxe_newlink: failed to add lo [ 564.286656][T27506] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7639'. [ 564.503341][T27519] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7644'. [ 564.560524][T27421] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 564.570475][T27421] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 564.579900][T27421] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 564.591289][T27421] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 564.638770][T27421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 564.658519][T27421] 8021q: adding VLAN 0 to HW filter on device team0 [ 564.671817][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.678968][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 564.692368][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.699548][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 564.715190][T27537] xt_hashlimit: max too large, truncated to 1048576 [ 564.775646][T27421] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 564.872309][T27421] veth0_vlan: entered promiscuous mode [ 564.879778][T27421] veth1_vlan: entered promiscuous mode [ 564.894646][T27421] veth0_macvtap: entered promiscuous mode [ 564.902142][T27421] veth1_macvtap: entered promiscuous mode [ 564.913037][T27421] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 564.924704][T27421] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 564.935758][ T6213] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.944616][ T6213] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.964421][ T6213] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.980806][T27566] netlink: 48 bytes leftover after parsing attributes in process `syz.7.7654'. [ 564.987284][ T6213] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.080097][T27581] loop2: detected capacity change from 0 to 2048 [ 565.087122][T27581] EXT4-fs: Ignoring removed bh option [ 565.114784][T27581] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 565.137498][T27581] EXT4-fs error (device loop2): ext4_iget_extra_inode:5075: inode #12: comm syz.2.7660: corrupted in-inode xattr: e_name out of bounds [ 565.157605][T27590] xt_hashlimit: max too large, truncated to 1048576 [ 565.166743][T27581] EXT4-fs error (device loop2): ext4_iget_extra_inode:5075: inode #12: comm syz.2.7660: corrupted in-inode xattr: e_name out of bounds [ 565.212189][T27581] EXT4-fs error (device loop2): ext4_iget_extra_inode:5075: inode #12: comm syz.2.7660: corrupted in-inode xattr: e_name out of bounds [ 565.242987][T27604] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7668'. [ 565.252714][T26032] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.285891][T27608] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7672'. [ 565.295043][T27610] loop2: detected capacity change from 0 to 1024 [ 565.301969][T27610] EXT4-fs: Ignoring removed orlov option [ 565.307856][T27610] ext4: Unknown parameter 'dont_measure' [ 565.342487][T27610] netlink: 'syz.2.7671': attribute type 3 has an invalid length. [ 565.382709][T27622] loop4: detected capacity change from 0 to 1024 [ 565.405478][T27622] ext3: Bad value for 'mb_optimize_scan' [ 565.414224][T27629] xt_hashlimit: max too large, truncated to 1048576 [ 565.462803][T27635] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7685'. [ 565.511818][T27622] xt_hashlimit: max too large, truncated to 1048576 [ 565.545410][T27648] loop0: detected capacity change from 0 to 1024 [ 565.553255][T27648] EXT4-fs: Ignoring removed orlov option [ 565.558989][T27648] ext4: Unknown parameter 'dont_measure' [ 565.575545][T27648] netlink: 'syz.0.7690': attribute type 3 has an invalid length. [ 565.586812][T27654] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7694'. [ 565.640560][T27661] kernel read not supported for file /!selinuxwk1m9ɞ*T#jYmVvm(p-QZ#{ (pid: 27661 comm: syz.4.7696) [ 565.654802][T27661] netlink: 'syz.4.7696': attribute type 10 has an invalid length. [ 565.663133][T27661] ipvlan0: entered allmulticast mode [ 565.668491][T27661] veth0_vlan: entered allmulticast mode [ 565.675296][T27661] team0: Device ipvlan0 failed to register rx_handler [ 565.714404][T27667] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 565.748646][T27670] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 565.777304][T27674] loop4: detected capacity change from 0 to 2048 [ 565.784109][T27674] EXT4-fs: Ignoring removed bh option [ 565.794901][T27674] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 565.810703][T27674] EXT4-fs error (device loop4): ext4_iget_extra_inode:5075: inode #12: comm syz.4.7702: corrupted in-inode xattr: e_name out of bounds [ 565.825859][T27674] EXT4-fs error (device loop4): ext4_iget_extra_inode:5075: inode #12: comm syz.4.7702: corrupted in-inode xattr: e_name out of bounds [ 565.840473][T27678] FAULT_INJECTION: forcing a failure. [ 565.840473][T27678] name failslab, interval 1, probability 0, space 0, times 0 [ 565.843059][T27674] EXT4-fs error (device loop4): ext4_iget_extra_inode:5075: inode #12: comm syz.4.7702: corrupted in-inode xattr: e_name out of bounds [ 565.853314][T27678] CPU: 0 UID: 0 PID: 27678 Comm: syz.7.7703 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 565.853344][T27678] Tainted: [W]=WARN [ 565.853351][T27678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 565.853424][T27678] Call Trace: [ 565.853432][T27678] [ 565.853440][T27678] __dump_stack+0x1d/0x30 [ 565.853464][T27678] dump_stack_lvl+0xe8/0x140 [ 565.853485][T27678] dump_stack+0x15/0x1b [ 565.853562][T27678] should_fail_ex+0x265/0x280 [ 565.853581][T27678] should_failslab+0x8c/0xb0 [ 565.853609][T27678] kmem_cache_alloc_lru_noprof+0x55/0x490 [ 565.853750][T27678] ? __d_alloc+0x3d/0x340 [ 565.853782][T27678] __d_alloc+0x3d/0x340 [ 565.853811][T27678] ? mpol_shared_policy_init+0xbd/0x4c0 [ 565.853855][T27678] d_alloc_pseudo+0x1e/0x80 [ 565.853886][T27678] alloc_file_pseudo+0x71/0x160 [ 565.853909][T27678] __shmem_file_setup+0x1de/0x210 [ 565.853929][T27678] shmem_file_setup+0x3b/0x50 [ 565.853948][T27678] __se_sys_memfd_create+0x2c3/0x590 [ 565.854040][T27678] __x64_sys_memfd_create+0x31/0x40 [ 565.854064][T27678] x64_sys_call+0x2ac2/0x3000 [ 565.854152][T27678] do_syscall_64+0xd2/0x200 [ 565.854172][T27678] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 565.854200][T27678] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 565.854239][T27678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.854339][T27678] RIP: 0033:0x7f4e3e33efc9 [ 565.854415][T27678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 565.854434][T27678] RSP: 002b:00007f4e3cda6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 565.854453][T27678] RAX: ffffffffffffffda RBX: 00000000000007f4 RCX: 00007f4e3e33efc9 [ 565.854466][T27678] RDX: 00007f4e3cda6ef0 RSI: 0000000000000000 RDI: 00007f4e3e3c2960 [ 565.854479][T27678] RBP: 0000200000000d80 R08: 00007f4e3cda6bb7 R09: 00007f4e3cda6e40 [ 565.854491][T27678] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000180 [ 565.854504][T27678] R13: 00007f4e3cda6ef0 R14: 00007f4e3cda6eb0 R15: 0000200000000500 [ 565.854564][T27678] [ 566.096940][T27421] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 566.247510][ T29] kauditd_printk_skb: 1222 callbacks suppressed [ 566.247523][ T29] audit: type=1326 audit(1761474207.906:64607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27651 comm="syz.2.7693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4d00b15e67 code=0x7ffc0000 [ 566.277481][ T29] audit: type=1326 audit(1761474207.906:64608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27651 comm="syz.2.7693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4d00abb099 code=0x7ffc0000 [ 566.301085][ T29] audit: type=1326 audit(1761474207.906:64609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27651 comm="syz.2.7693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f4d00b1efc9 code=0x7ffc0000 [ 566.324678][ T29] audit: type=1326 audit(1761474207.916:64610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27651 comm="syz.2.7693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4d00b15e67 code=0x7ffc0000 [ 566.348154][ T29] audit: type=1326 audit(1761474207.916:64611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27651 comm="syz.2.7693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4d00abb099 code=0x7ffc0000 [ 566.371705][ T29] audit: type=1326 audit(1761474207.916:64612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27651 comm="syz.2.7693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f4d00b1efc9 code=0x7ffc0000 [ 566.395222][ T29] audit: type=1326 audit(1761474207.926:64613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27651 comm="syz.2.7693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4d00b15e67 code=0x7ffc0000 [ 566.418751][ T29] audit: type=1326 audit(1761474207.926:64614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27651 comm="syz.2.7693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4d00abb099 code=0x7ffc0000 [ 566.442267][ T29] audit: type=1326 audit(1761474207.926:64615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27651 comm="syz.2.7693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f4d00b1efc9 code=0x7ffc0000 [ 566.505532][ T29] audit: type=1326 audit(1761474207.936:64616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27651 comm="syz.2.7693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4d00b15e67 code=0x7ffc0000 [ 566.536290][T27699] FAULT_INJECTION: forcing a failure. [ 566.536290][T27699] name failslab, interval 1, probability 0, space 0, times 0 [ 566.548978][T27699] CPU: 1 UID: 0 PID: 27699 Comm: syz.2.7712 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 566.549008][T27699] Tainted: [W]=WARN [ 566.549015][T27699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 566.549027][T27699] Call Trace: [ 566.549034][T27699] [ 566.549042][T27699] __dump_stack+0x1d/0x30 [ 566.549064][T27699] dump_stack_lvl+0xe8/0x140 [ 566.549141][T27699] dump_stack+0x15/0x1b [ 566.549156][T27699] should_fail_ex+0x265/0x280 [ 566.549221][T27699] should_failslab+0x8c/0xb0 [ 566.549246][T27699] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 566.549273][T27699] ? __alloc_skb+0x101/0x320 [ 566.549369][T27699] __alloc_skb+0x101/0x320 [ 566.549393][T27699] tca_action_gd+0x77d/0x1290 [ 566.549430][T27699] ? __nla_validate_parse+0x1652/0x1d00 [ 566.549481][T27699] ? __nla_parse+0x40/0x60 [ 566.549500][T27699] tc_ctl_action+0x208/0x830 [ 566.549575][T27699] ? kmem_cache_free+0xe4/0x3d0 [ 566.549653][T27699] ? __kfree_skb+0x109/0x150 [ 566.549678][T27699] ? nlmon_xmit+0x4f/0x60 [ 566.549698][T27699] ? consume_skb+0x49/0x150 [ 566.549802][T27699] ? nlmon_xmit+0x4f/0x60 [ 566.549823][T27699] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 566.549935][T27699] ? __dev_queue_xmit+0x1200/0x2000 [ 566.549963][T27699] ? __dev_queue_xmit+0x182/0x2000 [ 566.550026][T27699] ? __pfx_tc_ctl_action+0x10/0x10 [ 566.550057][T27699] rtnetlink_rcv_msg+0x65a/0x6d0 [ 566.550079][T27699] netlink_rcv_skb+0x123/0x220 [ 566.550315][T27699] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 566.550339][T27699] rtnetlink_rcv+0x1c/0x30 [ 566.550356][T27699] netlink_unicast+0x5c0/0x690 [ 566.550423][T27699] netlink_sendmsg+0x58b/0x6b0 [ 566.550440][T27699] ? __pfx_netlink_sendmsg+0x10/0x10 [ 566.550457][T27699] __sock_sendmsg+0x145/0x180 [ 566.550478][T27699] ____sys_sendmsg+0x31e/0x4e0 [ 566.550586][T27699] ___sys_sendmsg+0x17b/0x1d0 [ 566.550622][T27699] __x64_sys_sendmsg+0xd4/0x160 [ 566.550653][T27699] x64_sys_call+0x191e/0x3000 [ 566.550708][T27699] do_syscall_64+0xd2/0x200 [ 566.550750][T27699] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 566.550775][T27699] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 566.550802][T27699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.550884][T27699] RIP: 0033:0x7f4d00b1efc9 [ 566.550897][T27699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 566.550918][T27699] RSP: 002b:00007f4cff57f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 566.550935][T27699] RAX: ffffffffffffffda RBX: 00007f4d00d75fa0 RCX: 00007f4d00b1efc9 [ 566.550946][T27699] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 566.550995][T27699] RBP: 00007f4cff57f090 R08: 0000000000000000 R09: 0000000000000000 [ 566.551005][T27699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 566.551022][T27699] R13: 00007f4d00d76038 R14: 00007f4d00d75fa0 R15: 00007ffd2d4650d8 [ 566.551099][T27699] [ 566.899727][T27709] kernel read not supported for file /!selinuxwk1m9ɞ*T#jYmVvm(p-QZ#{ (pid: 27709 comm: syz.2.7717) [ 566.916323][T27709] netlink: 'syz.2.7717': attribute type 10 has an invalid length. [ 566.924510][T27709] ipvlan0: entered allmulticast mode [ 566.929824][T27709] veth0_vlan: entered allmulticast mode [ 566.936966][T27709] team0: Device ipvlan0 failed to register rx_handler [ 566.947635][T27712] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 566.955891][T27712] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 566.985857][T27714] netlink: 'syz.7.7719': attribute type 4 has an invalid length. [ 567.006452][T27718] loop2: detected capacity change from 0 to 2048 [ 567.023987][T27718] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 567.128159][T27736] lo speed is unknown, defaulting to 1000 [ 567.270323][T26032] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.359753][T27756] xt_hashlimit: max too large, truncated to 1048576 [ 567.632056][T27784] xt_hashlimit: max too large, truncated to 1048576 [ 567.653896][T27786] xt_hashlimit: max too large, truncated to 1048576 [ 567.805862][T27797] lo speed is unknown, defaulting to 1000 [ 567.820895][T27803] bridge0: port 3(gretap0) entered blocking state [ 567.827622][T27803] bridge0: port 3(gretap0) entered disabled state [ 567.868903][T27803] gretap0: entered allmulticast mode [ 567.892034][T27803] gretap0: entered promiscuous mode [ 567.910284][T27803] bridge0: port 3(gretap0) entered blocking state [ 567.916799][T27803] bridge0: port 3(gretap0) entered forwarding state [ 567.958520][T27803] netlink: 'syz.7.7752': attribute type 13 has an invalid length. [ 567.958548][T27805] gretap0: left allmulticast mode [ 567.958563][T27805] gretap0: left promiscuous mode [ 567.958688][T27805] bridge0: port 3(gretap0) entered disabled state [ 568.008303][T27810] netlink: 'syz.4.7757': attribute type 4 has an invalid length. [ 568.142012][T27803] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.149276][T27803] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.161228][ T10] ================================================================== [ 568.169403][ T10] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 568.176407][ T10] [ 568.178735][ T10] read-write to 0xffff888237d29de4 of 4 bytes by task 11151 on cpu 1: [ 568.186873][ T10] wq_worker_running+0x95/0x120 [ 568.191702][ T10] schedule_timeout+0xb7/0x170 [ 568.196551][ T10] msleep+0x50/0x90 [ 568.200345][ T10] nsim_fib_event_work+0x42e6/0x4790 [ 568.205616][ T10] process_scheduled_works+0x4ce/0x9d0 [ 568.211092][ T10] worker_thread+0x582/0x770 [ 568.215670][ T10] kthread+0x489/0x510 [ 568.219813][ T10] ret_from_fork+0x122/0x1b0 [ 568.224382][ T10] ret_from_fork_asm+0x1a/0x30 [ 568.229297][ T10] [ 568.231654][ T10] read to 0xffff888237d29de4 of 4 bytes by task 10 on cpu 0: [ 568.238998][ T10] kick_pool+0x49/0x2d0 [ 568.243227][ T10] __queue_work+0x8cb/0xb50 [ 568.247722][ T10] queue_work_on+0xd1/0x160 [ 568.252319][ T10] wg_packet_encrypt_worker+0xc0a/0xe10 [ 568.257871][ T10] process_scheduled_works+0x4ce/0x9d0 [ 568.263335][ T10] worker_thread+0x582/0x770 [ 568.267933][ T10] kthread+0x489/0x510 [ 568.271986][ T10] ret_from_fork+0x122/0x1b0 [ 568.276560][ T10] ret_from_fork_asm+0x1a/0x30 [ 568.281418][ T10] [ 568.283717][ T10] value changed: 0x00000000 -> 0x00000001 [ 568.289407][ T10] [ 568.291708][ T10] Reported by Kernel Concurrency Sanitizer on: [ 568.297835][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 568.309105][ T10] Tainted: [W]=WARN [ 568.312889][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 568.322920][ T10] Workqueue: wg-crypt-wg0 wg_packet_encrypt_worker [ 568.329405][ T10] ================================================================== [ 568.448350][T27803] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 568.464146][T27803] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 568.520126][ T52] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.548539][ T52] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.565695][ T52] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.584960][ T52] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0