last executing test programs: 7m1.416267929s ago: executing program 3 (id=205): syz_open_procfs(0x0, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket(0xa, 0x3, 0x3a) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000005900000095"], 0x0, 0x8, 0x40}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x18) r4 = fsopen(&(0x7f00000018c0)='rpc_pipefs\x00', 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fspick(r5, &(0x7f00000002c0)='.\x00', 0x0) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0x3, r6, 0x1}, 0xc) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, &(0x7f0000000540), 0xc) 7m1.36488993s ago: executing program 3 (id=206): r0 = socket(0x18, 0x0, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x4, @random="45e3f364e554", 'sit0\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0xc, @remote, 'ip6tnl0\x00'}}, 0x1e) close(0x3) r2 = perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) r3 = msgget(0x1, 0x2b0) msgrcv(r3, 0x0, 0x0, 0x2, 0x2000) r4 = syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) pwritev2(r5, 0x0, 0x0, 0xfffffffd, 0x1ff, 0xe) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000580)=@abs, 0x6e, &(0x7f0000000d00)=[{0x0}, {&(0x7f0000000700)=""/67, 0x43}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002940)=""/4096, 0x1000}, {&(0x7f0000000780)=""/118, 0x76}, {0x0}, {&(0x7f00000008c0)=""/127, 0x7f}, {&(0x7f0000000ac0)=""/219, 0xdb}], 0x8}, 0x102) r6 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/address_bits', 0x2a100, 0x4) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) msgctl$IPC_RMID(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r8, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES16=r6, @ANYRES64=r8, @ANYRESHEX=r2, @ANYRES8, @ANYRES32=r4, @ANYRESDEC=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) r10 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r10, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r10, 0x29, 0x16, &(0x7f0000fcb000)=0x80, 0x4) mkdir(&(0x7f00000003c0)='./file0\x00', 0x12e) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) 7m1.186340613s ago: executing program 3 (id=207): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000180)=@ethtool_drvinfo={0x3, "38b3ed12800a19e80e38c02bb1e78a1634af48239adc5997120f0e65e74419d3", "5f82843bb1f920d0cdbe9568721d6aa53df3f608da3091731dc5a451c1d8bcca", "bee5ed853974c4d747fdfc99b792e624d20b7c3bdf8c0e2365fa2df81b923af6", "309c9c4cfee5d5aa56f78667449dd17c127b2b72c3d7b7b207e60350e104a694", "b3c3bba0ea32ee2e0800417af8dbc3008a57c0e438528d49d7e166f9b43a78e4", "2c61cb8bc71f136397d06040", 0x2, 0xfff, 0xffffffff, 0x2, 0x1}}) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000040)={'rose0\x00', {0x2, 0x0, @dev}}) 7m1.135210114s ago: executing program 3 (id=209): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000840)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000340)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007bc}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@data_err_ignore}, {@bh}, {@errors_continue}]}, 0x1, 0x553, &(0x7f0000000a40)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x91511, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x6dd0, 0x2}, 0x5c70, 0x7, 0x0, 0x1, 0x8, 0x6, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r3}, 0x10) setitimer(0x1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe80, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x4300, {}, [{0xe6c, 0x1, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x0, 0x0, 0x0, 0xd}, 0x4, 0x0, [{}]}, [{}, {0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {0x0, 0x20000000, 0x7fffffff, 0x0, 0x3}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0xfffffff9, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x3}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffd}, {0x100000, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x4000}, {0xfffffffe}, {0x1, 0x8}, {0xd5}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x7}, {0x2000000}, {}, {0x0, 0x9}, {}, {0x0, 0x10}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4, 0x6}, {0x0, 0x9, 0x0, 0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe, 0x10}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7fff}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, {0x0, 0x0, 0x4}, {0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {0x0, 0x9, 0x0, 0x0, 0x2, 0xfffffffd}, {}, {0x4, 0x4, 0x0, 0x0, 0x0, 0xfffffffc}, {0x4, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffeffffd}, {}, {0x0, 0x400000}, {0x814, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x4}, {0x3, 0x0, 0x0, 0xfffffff9}, {}, {0x0, 0x0, 0x0, 0x100, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x8001}, {}, {}, {}, {0x4c1d5a53}, {0x0, 0x0, 0x0, 0x10000}, {0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, {0x0, 0x0, 0x1, 0x0, 0xd}], [{0x5}, {0x6}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x7}, {0x0, 0x1}, {0x7, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x4}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x3, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe80}}, 0x0) 7m0.843528528s ago: executing program 3 (id=214): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00'}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r1}, 0x10) openat2(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x101000, 0x8, 0x2}, 0x18) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 7m0.203648519s ago: executing program 3 (id=220): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffbfffc, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) creat(&(0x7f0000000140)='./file0\x00', 0x14) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f00000004c0)='./file0\x00', 0x80000000) (async) inotify_add_watch(r2, &(0x7f00000004c0)='./file0\x00', 0x80000000) inotify_add_watch(r2, &(0x7f0000000080)='./file0\x00', 0x10000100) (async) inotify_add_watch(r2, &(0x7f0000000080)='./file0\x00', 0x10000100) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) (async) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) (async) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r7}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r9}, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) 7m0.203268099s ago: executing program 32 (id=220): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffbfffc, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) creat(&(0x7f0000000140)='./file0\x00', 0x14) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f00000004c0)='./file0\x00', 0x80000000) (async) inotify_add_watch(r2, &(0x7f00000004c0)='./file0\x00', 0x80000000) inotify_add_watch(r2, &(0x7f0000000080)='./file0\x00', 0x10000100) (async) inotify_add_watch(r2, &(0x7f0000000080)='./file0\x00', 0x10000100) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) (async) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) (async) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r7}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r9}, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) 5m20.294255282s ago: executing program 1 (id=2234): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4008030) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_read_part_table(0x5c3, &(0x7f00000005c0)="$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") getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000340)=[@in={0x2, 0x4e20, @loopback}]}, &(0x7f0000000040)=0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r8}, 0x18) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r9}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000f6000000006debff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r10}, 0x10) get_robust_list(0x0, &(0x7f0000000500)=0x0, &(0x7f0000000580)) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000240)={r6, 0x20, "d656c9a61490b7e8773ca55437fa234c0170c8cbe5ebdd2be9"}, &(0x7f0000000180)=0xfc86) r11 = open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x49) preadv2(r11, 0x0, 0x0, 0x0, 0x0, 0x0) 5m19.256919949s ago: executing program 1 (id=2252): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200000004000085000000860000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000380)="06", 0x1}], 0x1}}], 0x1, 0x3404c8d4) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xb0, 0x0, 0x0, 0xfe, 0x0, 0xb, 0x3449, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xe}, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) syz_clone(0x42100000, 0x0, 0x0, 0x0, 0x0, 0x0) link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') 5m16.579162374s ago: executing program 1 (id=2274): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300030f000000000700000000000005000900e000000001d78771b90bd8a3b4914783c58777003d5b9538a9d03e6e9bfdac550000000003000600000000000200000000000000000000000000000002000100000000000000020d000000000300050000000000020000"], 0x78}, 0x1, 0x7}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @local}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 5m16.401705357s ago: executing program 1 (id=2277): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x800042, &(0x7f0000000000), 0xfc, 0x575, &(0x7f0000000180)="$eJzs3e9rJGcdAPDvbHbz4y6aqH1RhdbDFu6KXnLp2TaI9E4Q3xWU6usz5PZCuE32yG7aSyiSwz9AENGCb/SVbwT/AEHuTyhCwb4XK8qhVwWLaEfmR+6SdKfZpNldm3w+8GSenXlmvt9ndzM7O/MkE8CZdSEirkfEWEQ8FxEz5fxaWWKnKFm79x6+sZyVJNL01b8lkZTzsmZJWTLny9Umi8l+U8Wks7V9e6nVam6Us+e7a3fmO1vbl1fXllaaK831q1cXXlx8afGFxSsn0s+sXy9/888//dGvvvXy777y+h9v/PXSD7J8p8vlu/04acVz0siei0fqEbExiGAjMFb2599poaLZxJDTAgCgQnaM/9mI+FJ+/D8TY/nRXLXxPfVk4NkBAAAAJyG9Nh3/SSLSI2oceQ0AAABgVGr5GNikNleOBZiOWm1urhjD+0Scq7Xane6Xb7U3128WY2Vno1G7tdpqXsnH1E5ERCPJHi88OqNQPH4+b5uVZN8Y4J/MTOXL55bbrZujOOEBAAAAZ9D5A9///zlTfP8HAAAATpnZcnpuxHkAAAAAgzM76gQAAACAgTvG9//xQeQBAAAADMS3X3klK+nu/a9vvra1ebv92uWbzc7tubXN5bnl9saduZV2e6WVTkSsHba9Vrt956uxvnl3vtvsdOc7W9s31tqb690bq/tugQ0AAAAM0We+eP+dJCJ2vjaVl9i9tj9WsYK/FYBTo9ZnuzT78e5gcwGGq+pjHjj96h+92DBfOMUaxSQZdR7A6By2A5isavHWscI5rgAAgBG4+Pn776TJh6//1x+fGwBOqX6v/wOnT8X1/3Rm2IkAQ1d5/f+QgQHAJ1/DCEA48w6//l/hrXzR9cMjpOmh2wIAAAZqOi9Jba68FjgdtffTQsxGI7m12mpeiYhPR8QfZhoT2eOFfM3EHw0AAAAAAAAAAAAAAAAAAAAAAAAAQJ/SNIn0GOrHWgsAAAAYhYjaX5LyPsAXZ56dPnh+YDx5P78V8Adpmr7+81d/dnep291YyOb/PZ8/HhHdN7P546M4fQEAAADssXuX//z7+/ONEWcDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwGn13sM3lnfLMOM++EZEzPaKX4/JfDoZjYg4948k6nvWSyJi7ATi79yLiCd7xU+ytGK2zOJg/FpETOVZDDz+U2ma9ox//mNHh7Ptfrb/ud7r968WF/Jp79//elGufdz41fu/2qP939jB+PVi//epPmN84e3fzO95+L3H1Ylieb33/mc3flKx/32mV7D6h2d9/7vb21W5pb+MuNjz8yfZF2u+u3ZnvrO1fXl1bWmludJcv3p14cXFlxZfWLwyf2u11Sx/9ozx46d++0FV/AcXIs6V8cd3cyo/WGaLydeTR6mM78vp2azSqNryY/99++7DzxXVva3zrT64F3Hpmd6v/5P5tOfz/4t/pbn8cyBbfrH8TEh2inpE+faNiKd//funK/t/b7KsHf31v3R413PPfeeHf+qzKQAwBJ2t7dtLrVZzY+CVN9M07a9xdlTa/5aTiJ2Di7IDuBPuxVREVCzaH2uqfFaj3y0/UZnqu1MRQ3p1jlq5dpTG6cSR3mzJzv9BB89wZTx/Q456zwQAAJy0x0f/o84EAAAAAAAAAAAAAAAAAAAAzq5h/F+xgzF3RtNVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICP9L8AAAD//6zP1vE=") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0), 0xfc, 0x574, &(0x7f0000001980)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x400000, 0x1db) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r4}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000001f00)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYBLOB="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"/402, @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11fc1) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x4) dup2(r5, r0) writev(r1, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x63f00}], 0x1) 5m16.148933641s ago: executing program 1 (id=2281): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1f, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) tkill(0x0, 0x12) r3 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x1c0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0xc}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) 5m15.765158347s ago: executing program 1 (id=2288): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300030f000000000700000000000005000900e000000001d78771b90bd8a3b4914783c58777003d5b9538a9d03e6e9bfdac550000000003000600000000000200000000000000000000000000000002000100000000000000020d000000000300050000000000020000"], 0x78}, 0x1, 0x7}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @local}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 5m15.679951599s ago: executing program 33 (id=2288): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300030f000000000700000000000005000900e000000001d78771b90bd8a3b4914783c58777003d5b9538a9d03e6e9bfdac550000000003000600000000000200000000000000000000000000000002000100000000000000020d000000000300050000000000020000"], 0x78}, 0x1, 0x7}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @local}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 3m10.747520129s ago: executing program 6 (id=3975): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000b40)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="36000000a0ee5329", @ANYRES32, @ANYBLOB="4b0eefda1b46439466fa67a9824e9bf267b36ef555453bb4c8af1eebfd86f18e4ecb98a3f3257afee34904032e1e3524ba5ea1b9186bbcd199d5590dd1dc259f26ee9edbd36491e8f4c5e4165d9c458dabcd1e5a5fc5a22effbccaf7f963ba38089fef647feb11049bfecd6642afda229ed09694275adf6a4c57b70a083ac5253bde890202fe83d39ee350080f3f44631bf77a9e68cab1a08ab772273e", @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r1) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x0) r3 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000080), &(0x7f0000000780)={'syz', 0x2}, &(0x7f00000007c0)="ae", 0x1, r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r4, 0x1, 0x12, 0x0, 0x0) sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) r5 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x106, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x2, @perf_config_ext={0x0, 0x10000}, 0x1320, 0xfffffffd, 0x3, 0x7, 0x4, 0x1088f105, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002380)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x3}, 0x94) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x62a40) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x1000003, 0x3000ff, 0x0, 'queue1\x00', 0xffffffff}) r8 = dup(r7) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[], 0x50) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r8, 0x40605346, &(0x7f0000001280)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0xf963}}) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80082, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r9, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, {0x2, 0x4e20, @remote}, {0x2, 0x0, @local}, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffd, 0x200}) ioctl$sock_inet_SIOCADDRT(r9, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x4, 0x0, @private=0xa010102}, {0x2, 0x0, @remote}, 0x184, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)='lo\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x7}, 0x94) 3m10.263616427s ago: executing program 6 (id=3981): r0 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, 0x0, 0x8800) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x100, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xf}, 0x0, 0x10000, 0x0, 0x9, 0x8, 0x20045, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newtaction={0x14, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20048840}, 0x4001000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0x20000038, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r4}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x1ff, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x48) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) 3m10.141833439s ago: executing program 6 (id=3984): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x844, &(0x7f0000000bc0)=ANY=[], 0x5, 0x267, &(0x7f0000000740)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000540)={'gretap0\x00', r3, 0x0, 0x8, 0x8, 0x6e, {{0x3b, 0x4, 0x1, 0x36, 0xec, 0x64, 0x0, 0x2, 0x2f, 0x0, @empty, @broadcast, {[@timestamp_prespec={0x44, 0xc, 0x26, 0x3, 0x4, [{@multicast1, 0x7}]}, @rr={0x7, 0xb, 0x4f, [@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x20}]}, @rr={0x7, 0x1b, 0x92, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @dev={0xac, 0x14, 0x14, 0x32}, @rand_addr=0x64010100, @local]}, @timestamp_prespec={0x44, 0x2c, 0x7f, 0x3, 0x1, [{@dev={0xac, 0x14, 0x14, 0x23}, 0xfffffffa}, {@broadcast, 0x5}, {@broadcast, 0x101}, {@multicast1, 0x4}, {@broadcast, 0x18f}]}, @ra={0x94, 0x4}, @rr={0x7, 0x1b, 0x5d, [@local, @empty, @broadcast, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x42}]}, @cipso={0x86, 0x25, 0x0, [{0x2, 0x8, "0fda9cc17c9a"}, {0x0, 0x7, "c5fbd23937"}, {0x0, 0xa, "c58beb823cbcc58d"}, {0x2, 0x6, "62d96156"}]}, @noop, @timestamp_addr={0x44, 0x34, 0xf, 0x1, 0x2, [{@rand_addr=0x64010100, 0x7}, {@local, 0x2}, {@broadcast, 0x40}, {@local, 0xfc29}, {@multicast2, 0x5}, {@multicast2, 0x3}]}]}}}}}) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x81101) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r6, 0x20, &(0x7f00000002c0)={&(0x7f0000000180)=""/75, 0x4b, 0x0, &(0x7f0000000200)=""/1, 0x1}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x20, 0xa, &(0x7f0000000340)=@raw=[@alu={0x0, 0x0, 0x1, 0x2, 0x2, 0xfffffffffffffffe, 0xfffffffffffffff0}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x4}, @map_val={0x18, 0xb, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xfffffeff}, @cb_func={0x18, 0x5}, @jmp={0x5, 0x1, 0x5, 0x9, 0x9, 0x50, 0xfffffffffffffff0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @jmp={0x5, 0x1, 0xb, 0x2, 0x4, 0xc}], &(0x7f0000000040)='GPL\x00', 0xfffffff7, 0xae, &(0x7f0000000480)=""/174, 0x41100, 0x16, '\x00', r5, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x5, 0xc, 0x9, 0xffffff00}, 0x10, r7, r1, 0x3, &(0x7f00000003c0)=[r0, r0, r0, r0, r0, r0, r0, r0], &(0x7f0000000400)=[{0x2, 0x5, 0x3, 0xb}, {0x1, 0x4, 0x2}, {0x0, 0x3, 0x9, 0x1}], 0x10, 0x3bc}, 0x94) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000580080002"], 0x3c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r8 = semget(0x1, 0x6, 0x0) semctl$IPC_INFO(r8, 0x0, 0x3, &(0x7f0000000a00)=""/176) 3m9.475056291s ago: executing program 6 (id=3988): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) socket$rds(0x15, 0x5, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x6aa5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x2000006, &(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB=',obj_role=,hash,\x00'], 0x25, 0x34f, &(0x7f00000004c0)="$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") open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) listen(r2, 0x0) syz_emit_ethernet(0x62, &(0x7f0000000a80)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8900f9", 0x2c, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0xc2, 0x9, 0x0, 0x0, {[@mptcp=@capable={0x1e, 0xc, 0x0, 0x8, 0xc, 0x2}, @mptcp=@ack={0x1e, 0x9, 0x76a, 0x4, "b0282dc626"}]}}}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) rt_sigsuspend(&(0x7f0000000180)={[0x80000000]}, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3}, &(0x7f0000000400), &(0x7f00000003c0)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc3, 0xc3, 0x4, [@func={0xb, 0x0, 0x0, 0xc, 0x2}, @struct={0xa, 0x8, 0x0, 0x4, 0x0, 0x7, [{0x3, 0x4, 0x4}, {0xd, 0x4, 0x5}, {0xd, 0x1, 0x4}, {0x8, 0x4, 0x3ff}, {0x1, 0x5, 0x800}, {0x4, 0x4, 0x6c}, {0x3, 0x0, 0xa3}, {0x3, 0x0, 0x4}]}, @datasec={0x2, 0x2, 0x0, 0xf, 0x3, [{0x4, 0x8001, 0x8}, {0xfffffff9, 0x4, 0x400}], "c04b98"}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0xa, 0x9}, {0x10, 0x52a6}, {0x7, 0x3c000}]}]}, {0x0, [0x30, 0x61]}}, &(0x7f0000000680)=""/133, 0xe0, 0x85, 0x1, 0x4}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7b}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x3}, @map_fd={0x18, 0x7, 0x1, 0x0, r3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000000200)='GPL\x00', 0x10001, 0x1d, &(0x7f0000000340)=""/29, 0x41000, 0x10, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000000740)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000780)={0x1, 0xa, 0x3eb5, 0x4ee}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f00000007c0)=[{0x1, 0x5, 0x1, 0x5}, {0x0, 0x5, 0x9, 0xb}, {0x0, 0x5, 0x9, 0xa}, {0x0, 0x3, 0x8, 0xa}, {0x4, 0x2, 0x6, 0x3}], 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x18) clock_adjtime(0x0, &(0x7f0000000000)={0x3fd, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0x100, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/../file0\x00', 0x110) signalfd4(r7, &(0x7f00000001c0)={[0x80000001]}, 0x8, 0x0) set_tid_address(0x0) 3m8.484147817s ago: executing program 6 (id=3996): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000800)={0x0, 0x80, 0xc, 0x0, 0x0, 0x0, 0x0, 0xa6b, 0x405e, 0xd, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x10001, 0x3}, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x8, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f0000000080)=ANY=[@ANYRES8=r3]) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0xc, 0x20005, 0x2b, 0x0, 0x1, 0x0, 0xffffffffffffff7f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00'}, 0x18) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = dup(r7) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}}, 0x0) 3m8.259766271s ago: executing program 6 (id=4001): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) (async, rerun: 64) statx(0xffffffffffffff9c, 0x0, 0x100, 0xff8c, 0x0) (async, rerun: 64) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) (async) lsm_get_self_attr(0x68, 0x0, &(0x7f0000000100), 0x0) (async) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) read$msr(r2, 0x0, 0x0) (async) r3 = socket(0xa, 0x3, 0x3a) fcntl$dupfd(r0, 0x0, r2) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) (async) setsockopt$MRT6_INIT(r3, 0x29, 0xc8, &(0x7f0000000340), 0x4) (async, rerun: 32) lsm_get_self_attr(0x68, &(0x7f0000000140)={0x0, 0x0, 0xa9, 0x89, ""/137}, &(0x7f0000000000)=0xa9, 0x1) (rerun: 32) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f00000000c0)={0x4, 0x1, 0x78, 0x0, 0xfffffff8}, 0xc) (async, rerun: 64) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) (rerun: 64) 3m8.259151511s ago: executing program 34 (id=4001): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) (async, rerun: 64) statx(0xffffffffffffff9c, 0x0, 0x100, 0xff8c, 0x0) (async, rerun: 64) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) (async) lsm_get_self_attr(0x68, 0x0, &(0x7f0000000100), 0x0) (async) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) read$msr(r2, 0x0, 0x0) (async) r3 = socket(0xa, 0x3, 0x3a) fcntl$dupfd(r0, 0x0, r2) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) (async) setsockopt$MRT6_INIT(r3, 0x29, 0xc8, &(0x7f0000000340), 0x4) (async, rerun: 32) lsm_get_self_attr(0x68, &(0x7f0000000140)={0x0, 0x0, 0xa9, 0x89, ""/137}, &(0x7f0000000000)=0xa9, 0x1) (rerun: 32) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f00000000c0)={0x4, 0x1, 0x78, 0x0, 0xfffffff8}, 0xc) (async, rerun: 64) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) (rerun: 64) 1m54.695653092s ago: executing program 4 (id=5317): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20008844) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0xe) ioctl$sock_x25_SIOCADDRT(r1, 0x890b, &(0x7f00000005c0)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}, 0xd, 'team0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) (fail_nth: 16) sendfile(r1, r0, 0x0, 0x7ffff000) 1m54.574489383s ago: executing program 4 (id=5321): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getrlimit(0xc, &(0x7f0000000040)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x1, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffbfffc, 0x2, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x18) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 1m54.350037437s ago: executing program 4 (id=5323): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080), &(0x7f0000000180)='%ps \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f0000000080), &(0x7f00000002c0)=0x30) 1m54.294767538s ago: executing program 4 (id=5325): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r1, &(0x7f0000000200)={0xa, 0xfffc, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "0000004a650600", "af193cff4810ba5ac120d096eb00000052095b4285514ca312c52e3a08756735", '8\x00', "bc3a20b10f4ad11e"}, 0x38) close(r1) 1m54.139733681s ago: executing program 4 (id=5327): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200000006c8b, 0x37}, 0x7, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f00000003c0), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r3}, &(0x7f0000000440), &(0x7f0000000480)='%ps \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4, 0x0, 0x2}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./bus\x00', 0xe, &(0x7f0000000680)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@lazytime}, {@noload}]}, 0x3, 0x461, &(0x7f0000000f00)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6, 0x0, 0x1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6000, 0x1) mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f0000000240)=""/25) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f00000002c0)=[{0x6}]}, 0x10) write$binfmt_misc(r7, &(0x7f0000001280), 0x6) 1m53.921407444s ago: executing program 4 (id=5329): syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r1}, 0x18) r2 = accept4$inet(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000340)=0x10, 0x800) shutdown(r2, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) unshare(0x48050380) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000100000118110010", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fdatasync(r3) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r9}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r10, 0x890c, &(0x7f0000000080)={0x0, {0x2, 0x200, @multicast1}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, {0x2, 0x4e21, @rand_addr=0x64010101}, 0xab852ebbeefbd455, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7, 0xe316, 0xffff}) 1m37.747668935s ago: executing program 35 (id=5329): syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r1}, 0x18) r2 = accept4$inet(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000340)=0x10, 0x800) shutdown(r2, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) unshare(0x48050380) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000100000118110010", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fdatasync(r3) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r9}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r10, 0x890c, &(0x7f0000000080)={0x0, {0x2, 0x200, @multicast1}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, {0x2, 0x4e21, @rand_addr=0x64010101}, 0xab852ebbeefbd455, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7, 0xe316, 0xffff}) 1m12.067465365s ago: executing program 8 (id=5960): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(0x0, r0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010326bd6000000000002d"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20040814) 1m12.035961955s ago: executing program 8 (id=5962): msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)) msgsnd(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="03"], 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r0, &(0x7f0000000280), 0x0, 0x12020, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x170}, 0x0, 0x0, 0x800000000000000, 0x6, 0xffffffffffffffff, 0x0, 0x3, 0xe8, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x1}, 0x0, 0x0, 0x800000000000000, 0x7, 0x2, 0x0, 0x3, 0xe8, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 1m11.713448231s ago: executing program 8 (id=5964): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYRES16=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r2}, 0x18) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r0}, 0x18) listen(0xffffffffffffffff, 0x5) socket(0x28, 0x5, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0xff, 0x4a6, &(0x7f0000000980)="$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") r3 = creat(0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x6000) io_setup(0x200, &(0x7f0000000140)=0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={0x0, &(0x7f00000000c0)=""/220, 0x0, 0xdc}, 0x20) io_submit(r4, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r3, &(0x7f0000000000), 0x4000}]) 1m11.358090996s ago: executing program 8 (id=5966): prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000540)={0x1, &(0x7f0000000400)=[{0x200000000006, 0xa4, 0x3, 0x7ffc9ffe}]}) shutdown(0xffffffffffffffff, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f0000000080)={0x0, 0x8, 0x2, 0x7, @vifc_lcl_ifindex, @empty}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x51f, &(0x7f0000000700)="$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") sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x40400) read(r1, &(0x7f0000000240)=""/195, 0xc3) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.events\x00', 0x275a, 0x0) r3 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_buf(r3, 0x29, 0x10000000000030, &(0x7f0000000d40)=""/144, &(0x7f0000e5f000)=0x90) fadvise64(r2, 0x7, 0x4, 0x4) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r4, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) read$qrtrtun(0xffffffffffffffff, &(0x7f0000000c40)=""/215, 0xd7) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="20000000cd000000fbffffff0900000001000000", @ANYRES32, @ANYBLOB="ffffffff0000000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1d, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ff}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0xffffff11, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r7}, 0x10) socket(0x10, 0x3, 0x9) connect$netlink(r5, &(0x7f00000003c0)=@kern={0x10, 0x0, 0x0, 0x40000}, 0xfffffffffffffeb6) 1m10.961208993s ago: executing program 8 (id=5969): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xae}], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2a}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x300, 0x4}, 0x80, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000440)="63f805d7649496db7295", 0xa}], 0x2}, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000fce000)=@abs={0x0, 0x0, 0x4e24}, 0x6e) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x60}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) get_mempolicy(&(0x7f0000000140), 0x0, 0x7fff, &(0x7f0000ffb000/0x3000)=nil, 0x4) r4 = semget$private(0x0, 0x6, 0x3b1) semop(r4, &(0x7f00000000c0)=[{0x0, 0xfffc}], 0x1) semctl$IPC_RMID(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x10008, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES64, @ANYRES8, @ANYRESHEX], 0x1, 0x29f, &(0x7f0000000100)="$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") r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b0002000020deffffe5ffffffff040000000000", @ANYRES32=0x0, @ANYBLOB="008000"/20, @ANYRES32=0x0, @ANYRES32=0x0], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b700000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x3e, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x100000000000027b}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000005c0)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x617fd0fed20a7c3f}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m10.111580707s ago: executing program 8 (id=5983): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00'}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r3, {0x10, 0x9}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 1m10.111212078s ago: executing program 36 (id=5983): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00'}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r3, {0x10, 0x9}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 5.064942786s ago: executing program 7 (id=6863): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@delqdisc={0x24, 0x25, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x7, 0xb}, {0xffff, 0x9}, {0xfff2, 0x2}}}, 0x24}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001a80)={'ip6gre0\x00', &(0x7f0000001a00)={'syztnl0\x00', 0x0, 0x2f, 0x8, 0x5, 0x6, 0x30, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x1, 0xff, 0xfffffffd}}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f0000000280)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f00000008c0)=[{&(0x7f00000002c0)="3d20b4b53d82fda82e0a68c4020e137132225f409b5116a94fb23c4ea17c88a08a1a67d88f4eddfec5732a06ce4a1c85179e2800eaef021cce4577cdd9f73975157dac466b16258f4a120caa2ed755fee846d445ac9c1a0125ae66379eb8217cfc576bf39f8954ab4f4615e53f91386c7553ab7d", 0x74}, {&(0x7f0000000640)="6b2aa92c9b9e4bcd88a4c6704541881ffdf91e5c92170bb16b47a98636eab4449251299661a7945834379bfb4c11cdb3f997732b3db5069e47a03ac6ccbde1809cfa5d34beb95b5eb227d04c685caf5502b64371f21f4c6da372f1e3c515dfd72255306cde5f9443a446d361305b5a99769f9dbbca91bac9b31a14fd09a8725f9099243379b3d1318ea34a367a214b590f16897938e46d31fb2a4791c49bffe1ddc004d9f6390cb25e7c4f9f7edb9cdca85a05f6afcf1d621fcf3eed7612955cfdebfe8a099330b8bda45b678a88537e4685062a8f372e6d48dcd895213f2e", 0xdf}, {&(0x7f00000004c0)="7ff24ff29a46164e2a788412198f1756a2cc685374622fd2eb629c0615d00eb63032fcc1722caed14cdaef9ce6bc2cbd2a03ea0b0418c1507d27738617f0f05b784991b42ec3b92e676ef69521c4c722537892d2d4b8fe351c6ec5", 0x5b}, {&(0x7f0000000780)="2a4e3fe023392f32c9e1a37ab6d1b05ab9759d147aebdd9d5c3bedf180c453032fced88d73bab782e567d44b5168a0557f562f5b34b35808a998c949880a8ddb12b77a3532427ca128227789466e5b95f04d5a8e1eb333cf6dc5311ae099aa7e85b7f5d99505861584a6f0", 0x6b}, {&(0x7f0000000800)="ab752087486c971cbf6d81aa206919899b0892c516e4f5f5bedbdf772ac109a546095a38fa0f5a6c262ccf2ed386bed76f98521e9181d93dcba2ab68918ed3a33cd71279c344f55e050c7839ae6b13d628c3dec993f16ee4db14ec4a3ac3f2ebe3139682e1360146def8444dfa4cc5df9f028a7135f7dde145792d3ffdc39289aba73a0367237868092cac0002ac1a93b022ea7588", 0x95}, {&(0x7f0000000a00)="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", 0x1000}, {&(0x7f0000000380)="4b1bf3949c0ffb1ff11a898cf33170caae6e47559f62f5d17ae892e3336dd3eccf2c2ce32e4d3bd2831bdf9331", 0x2d}, {&(0x7f0000000400)="986bd14c3e3757b7a19f20e65eec2c545a677ef5ea7f46f54b24b23ce216c9001cc51dff8cadb7dd", 0x28}], 0x8, &(0x7f0000001ac0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xa8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @empty}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x78}, 0x4040044) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=0xffffffffffffffff, @ANYBLOB="000000000000000000000000000000000097c440", @ANYRES32=0x0, @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r7}, 0x18) r8 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="9f49fdde70d16d1d5aeca2dc5deeabfed47982c9d52b3ab396aaba90211d226e62e7dee5744cef98f32441f61b496a41f4c16f6fe47c351b641374b80a03c80bc5360dda00ae080058c0424151cfd42da3ffffffffffff33908ec7f669b65a8c0be4e332e868044924631281e07145625beb889a221a6805a5b62f821621d8df253c16ecb57a6019a403b0992efcd84ea2f6518ac2a6aeebeac286a5218760a0d37f5f8d702cb2b7d318e8ce90b693ac00000000000000", @ANYRES64, @ANYRES8=r1, @ANYRES32=r6, @ANYRES64=r3, @ANYRES64=r7, @ANYRES32=r5], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000001c00)=ANY=[@ANYRES64=r4, @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095", @ANYRESHEX=r3], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8e}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r9}, &(0x7f0000000180), &(0x7f00000001c0)=r8}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = syz_io_uring_setup(0x235, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r14 = io_uring_register$IORING_REGISTER_PERSONALITY(r11, 0x9, 0x0, 0x0) syz_io_uring_submit(r12, r13, &(0x7f00000009c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r14}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r10}, 0x10) r15 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r15, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a11800150006001400000000120800030043000040a8002b000a00034006000dc3036010fab94dcf5c046109d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88a2ddddbbb219c6c09136dd481c417898516277ce06bbace80177ccbec4c2ee5a7cef4260027836b0d17a58af5d6d93424841f468430dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f7a5025ccc89e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5", 0xd8}], 0x1}, 0x20000080) 3.819895617s ago: executing program 2 (id=6871): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000280), 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0a00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0400"/14, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r3}, 0x10) io_setup(0x3, &(0x7f0000000340)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='mm_compaction_kcompactd_sleep\x00', r4, 0x0, 0x3}, 0x18) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000540)=@nfc_llcp={0x27, r5, 0x0, 0x1, 0x2, 0x1, "5465ec2057582cc0497e626af19fc695ee9ad8a60f22e141b2533e91efab68e4941040f62d7b221906295589faf3f7371ecdff3532f9077d4432587662351e", 0x20}, 0x80, &(0x7f0000000780)=[{&(0x7f00000005c0)="c34821d9cb7978da568e2d946825e0dee4d033305edad2963ea86ca72ed7476e810eba802ecd3ac80726679033d68c5063647fb4e4c6b0676f514e41a0d7ff4bcc0fa58f505b8ea4985824df0788fd2299c30cb21ff753ca027cf56f615bfd4f731cba2ff6e5182cc749b37961721f7c16c088c0b623a02e5bf981b3972fafdc14a03b29e91f1ce738500466aa7b80ff236943e4f9bb59a51e20c418e36500b1d7", 0xa1}, {&(0x7f0000000680)="5734064a20da1c6c79e6e5c29999d2d8fb75519d3b1e54c8539918a9ac560c17e545035fc926aae85ccb2e719f7d1969dd8b14d18212af8b495e3d17401b4fa7eb33dc9b8ae9bcb18398dc198a9a4ff493848e9c5afa793f5082eb75cac0ebdef2965a34ea5122d85f404eb6ba1cf58960eb1f27812cb10a10c5a68cfec2ebc72649b00abbaff466b3ded6a83e91220e6c400d30bfed752705e83e871cbdf1924a86b2f54fe673e5c66bfd9f6ed2fdff0b93a1af3c9dc0e48c2302cc3f9ce9521df12b33c528d8c7c512dc971055432ce6d4e87fb9e72cf6936d4962c1d636d2d8a8e6062f4c17802e9b5528e3ad5b", 0xef}, {&(0x7f0000000300)}], 0x3, &(0x7f00000007c0)=[@txtime={{0x18, 0x1, 0x3d, 0x9aea}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}], 0x30}, 0x800) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) syz_emit_ethernet(0x33, &(0x7f0000000000)={@random="e90c610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x25, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x11, 0x0, @opaque="24dc6170e1e0318539"}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x7, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0xfd, 0x100, @val=0x80}}}}}}}, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0x14) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)={0x0, 0x2000, 0x0, 0x0, 0x0, 0x3cd}) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000003c0)=0x1) r9 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r9, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 3.64033508s ago: executing program 2 (id=6873): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) statx(0xffffffffffffffff, 0x0, 0x100, 0x200, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x600, 0x0, 0x2, 0x9}, 0x20) 3.108142959s ago: executing program 9 (id=6882): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x0, 0x0}) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000900)=ANY=[@ANYRES64=r0, @ANYRES32=r1, @ANYRES16=r1], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='mm_khugepaged_scan_pmd\x00', r2, 0x0, 0x1}, 0xffffffffffffff86) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x6) ptrace(0x10, r1) r3 = socket(0x2, 0x80805, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000007239f886002020000000"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) getgid() bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r6}, &(0x7f0000000080), &(0x7f0000000180)='%ps \x00'}, 0x20) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000280)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYRES16=r3], 0x58}, 0x1, 0x7}, 0x0) r9 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x0, 0x0) fcntl$setlease(r9, 0x400, 0x0) mq_unlink(&(0x7f0000000340)='eth0\x00') sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x1}], 0x1}}], 0x2, 0x0) ptrace(0x8, r1) waitid(0x1, r1, 0x0, 0x8, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bind$inet6(r3, &(0x7f00000007c0)={0xa, 0x4e20, 0x8693, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c) 2.925518722s ago: executing program 7 (id=6885): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000008000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0xffff}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x56, &(0x7f0000000080)={0x0, 0xdc47, 0x4, 0x0, 0x3d8}, &(0x7f0000ff0000), 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000880)={{{@in6=@mcast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f0000000980)=0xe8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000a00)=ANY=[@ANYRES16=r7, @ANYRES64=r4, @ANYRESDEC=r5], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000340)={@rand_addr=' \x01\x00', 0x2, r7}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000050000000000000000000000000a6c000000060a0904000000000000000002000000400004803c0001800e000100696d6d656469617465000000280002801c000280180002800900020073797a3030000000000900020073797a3200000000140000000000010000000000000000000000000a"], 0x94}}, 0x0) read(r1, &(0x7f0000002a40)=""/102364, 0x18fdc) writev(r2, &(0x7f0000002a00)=[{&(0x7f0000000100)}, {&(0x7f0000001980)="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", 0xf6a}], 0x2) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000000)={0x4802}, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="260000001600010adb2d5f7ff6a700"/24], 0x78}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b708000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYRES8=0x0, @ANYRES32, @ANYRES32=r10, @ANYRESHEX, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sendto$inet(r1, &(0x7f0000000280)="56f34149160f7a82aebb9dd08ad9a9", 0xf, 0x4000800, &(0x7f0000000300)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r11], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r12}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000410000000000000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="12400000000400f500000000f26c514c1100"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) 2.719314435s ago: executing program 7 (id=6888): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xae}], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2a}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x300, 0x4}, 0x80, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000440)="63f805d7649496db7295", 0xa}], 0x2}, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000fce000)=@abs={0x0, 0x0, 0x4e24}, 0x6e) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x60}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) get_mempolicy(&(0x7f0000000140), 0x0, 0x7fff, &(0x7f0000ffb000/0x3000)=nil, 0x4) r4 = semget$private(0x0, 0x6, 0x3b1) semop(r4, &(0x7f00000000c0)=[{0x0, 0xfffc}], 0x1) semctl$IPC_RMID(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x10008, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES64, @ANYRES8, @ANYRESHEX], 0x1, 0x29f, &(0x7f0000000100)="$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") r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b0002000020deffffe5ffffffff040000000000", @ANYRES32=0x0, @ANYBLOB="008000"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x3e, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x100000000000027b}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000005c0)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x617fd0fed20a7c3f}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.487591739s ago: executing program 7 (id=6890): r0 = socket(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xd, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000401}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4, 0x0, 0x4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000100)={'veth0_to_team\x00', 0x400}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000440)={'wg1\x00', 0x600}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x10, [0x0, 0x0, 0x0, 0xa, 0x0, 0x2000000, 0x0, 0x2]}}) 2.38921237s ago: executing program 7 (id=6891): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x337) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$tipc(r1, &(0x7f00000001c0)=@id={0x1e, 0x3, 0x0, {0x4e21, 0x2}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={r4, 0xe0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000940)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, &(0x7f0000000980)=[0x0, 0x0], &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd0, &(0x7f0000000b00)=[{}, {}], 0x10, 0x10, &(0x7f0000000b40), &(0x7f0000000b80), 0x8, 0x4b, 0x8, 0x8, &(0x7f0000000bc0)}}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x14, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r6}, 0x10) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r9, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) r11 = open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) r12 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r12, &(0x7f00000008c0)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r12, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') umount2(&(0x7f0000000340)='./file0\x00', 0x1) fgetxattr(r11, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) 2.373181971s ago: executing program 5 (id=6893): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 2.299942902s ago: executing program 7 (id=6894): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 2.272513432s ago: executing program 0 (id=6897): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x38, r3, 0x1, 0x0, 0x1, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x38}}, 0x4000) 2.237818683s ago: executing program 0 (id=6898): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) socket$netlink(0x10, 0x3, 0x0) mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x40, &(0x7f0000000e80)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@rq={'rq', 0x3d, 0x80}}, {@sq={'sq', 0x3d, 0x8001}}, {@sq={'sq', 0x3d, 0x200}}, {@sq={'sq', 0x3d, 0xffffffffffff759a}}, {@sq={'sq', 0x3d, 0x1}}, {@rq={'rq', 0x3d, 0x21}}, {@sq={'sq', 0x3d, 0x7f}}, {@sq={'sq', 0x3d, 0x10}}], [{@smackfsroot={'smackfsroot', 0x3d, 'GPL\x00'}}]}}) readv(0xffffffffffffffff, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x9a8, 0x0, 0x43, 0xa0, 0x0, 0x98, 0xa68, 0x178, 0x178, 0xa68, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @multicast1, 0x0, 0x0, 'wg2\x00', 'ip6erspan0\x00', {0xff}, {}, 0x9}, 0x12a, 0x70, 0x90, 0x0, {0x0, 0x7a010000}}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @loopback, 0xffffffff, 0x0, 'pim6reg\x00', 'syzkaller0\x00', {}, {}, 0x6c, 0x1, 0x43}, 0x0, 0x850, 0x880, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x3}, {0x0, 0x2}, {0x6, 0x3}, {0x8, 0x1}, {0x8001, 0x2}, {0xfffffffd, 0x3}, {0x5, 0x2}, {0x2, 0x3}, {0x3ff, 0x1}, {0x8000, 0x1}, {0x1, 0x1}], [{0x0, 0x401}, {0x1, 0x7}, {0x9, 0x2}, {0x2, 0x9}, {0x0, 0x4}, {0x1, 0x8}, {0xcf6, 0xfe5d}, {0xa30}, {0x0, 0x9}, {0x7, 0x90b2}, {0xce, 0x2}], 0x4, 0x8}, {[{}, {0x4, 0x2}, {0x4, 0x2}, {0xf, 0x2}, {0x2}, {0x7f, 0x3}, {0x4}, {0x2, 0x3}, {0x4, 0x3}, {0x8, 0x3}, {0xffffabc5, 0x2}], [{0xff, 0xffff}, {0x27d8, 0x8}, {0xa, 0x6}, {0x10001, 0x3}, {0x1ff, 0x2}, {0x1, 0x1}, {0x7, 0x87}, {0xcca, 0x1}, {0x2, 0x3}, {0x0, 0x7}, {0x4, 0x3}], 0x2, 0x5}, {[{0x6, 0x2}, {0x9, 0x3}, {0x8}, {0x8, 0x3}, {0x80, 0x1}, {0xfff, 0x1}, {0x3, 0x3}, {0x6, 0x2}, {0x3, 0x2}, {0x8}, {0x9, 0x1}], [{0x7, 0xcea}, {0x8, 0x7}, {0x9, 0x9}, {0xb}, {0x3, 0xd9cf}, {0x9, 0xcb5}, {0x1, 0x7}, {0xfffffffd, 0x62d}, {0x1a, 0x5}, {0x5, 0x7}, {0x3, 0x7fff}], 0x3, 0xb}, {[{0x20, 0x2}, {0x2, 0x3}, {0x3}, {0x7, 0x1}, {0x2, 0x1}, {0xfffffff2}, {0xc8, 0x2}, {0x2, 0x1}, {0x200, 0x2}, {0x10000}, {0x7f}], [{0x8, 0x3}, {0x81, 0x1}, {0x4, 0x5}, {0xd, 0x401}, {0x4, 0xb}, {0x101, 0x6}, {0x2, 0xd}, {0x8, 0x5}, {0x9, 0x81}, {0xffffb445, 0x10000}, {0x7, 0x1}], 0x1, 0x7}, {[{0x8001, 0x1}, {0x2, 0x2}, {0x0, 0x1}, {0xf7, 0x3}, {0x6, 0x3}, {0x0, 0x3}, {0x2}, {0x9, 0x2}, {0x80000001, 0x1}, {0x3, 0x2}, {0x7, 0x3}], [{0x1000, 0x3}, {0x5, 0x9}, {0xf, 0x20000000}, {0x4, 0x2}, {0x7, 0x744}, {0x7, 0x8}, {0x9, 0x2}, {0xe60, 0x3}, {0x85, 0x10000}, {0x4, 0x9}, {0x4, 0xfffffffa}], 0x7, 0xa}, {[{0x2, 0x1}, {0xfffffff7}, {0x7}, {0x3, 0x3}, {0x34, 0x4}, {0x0, 0x3}, {0x5c, 0x2}, {0x7, 0x3}, {0x2, 0x2}, {0x8, 0x2}, {0xffff8000}], [{0x5, 0x7}, {0x8, 0xa0d}, {0x3, 0xca}, {0xff, 0xd}, {0xff, 0x4}, {0xfffffffd, 0x100}, {0x7, 0x1496}, {0xfff, 0x6}, {0x9, 0x2fee}, {0x2c4a, 0x4}, {0xe, 0x1ff}], 0x6, 0x5}, {[{0x9, 0x2}, {0x5, 0x1}, {0xe567, 0x1}, {0xc, 0x3}, {0x9}, {0x2, 0x1}, {0x8, 0x3}, {0xffff}, {0x97}, {0x880ab95c, 0x3}, {0xf, 0x3}], [{0x7ba4, 0x3}, {0x2, 0x5}, {0x6, 0xda40}, {0x1, 0x1}, {0x7ec6, 0x84c}, {0x8, 0x6}, {0xaa, 0x2}, {0x7, 0x7}, {0x6196, 0xe}, {0x1ff, 0x1}, {0x3400, 0x10001}], 0x1, 0x9}, {[{0x6}, {0x10001}, {0x1ff, 0x2}, {0x400, 0x3}, {0x7bc99eb7, 0x1}, {0x9, 0x1}, {0x1}, {0x1ff, 0x2}, {0x1000, 0x2}, {0x3, 0x2}, {0x6, 0x3}], [{0xfffffffb, 0xb353}, {0x9}, {0xff, 0x8}, {}, {0x2900, 0xc7f}, {0x10001, 0x1}, {0xfff, 0x1}, {0x7, 0x20}, {0xffff3f40, 0x8}, {0x6, 0x2}, {0x80000001, 0x5}], 0x4, 0x4}, {[{0x2, 0x2}, {0x7, 0x3}, {0x10000, 0x1}, {0x9, 0x3}, {0x2, 0x2}, {0x4, 0x1}, {0x1, 0x2}, {0x3, 0x2}, {0x4, 0x2}, {0x2, 0x3}, {0x0, 0x3}], [{0x8, 0x6}, {0x200, 0x200}, {0x4, 0x9}, {0x80000000, 0x7}, {0x4, 0x7}, {0x7, 0x8}, {0x2be3, 0x80000000}, {0x1, 0x8}, {0xc, 0x3}, {0xfffffffb, 0x6a7}, {0x800, 0x3}], 0x3, 0xa}, {[{0x200, 0x3}, {0x2}, {0x6, 0x1}, {0x4}, {0x1, 0x2}, {0x8e5}, {0xc000000}, {0x8, 0x2}, {0x1, 0x3}, {0x97b, 0x3}, {0x3, 0x1}], [{0x3, 0x6}, {0x0, 0xeeb}, {0x3}, {0x7, 0x3e1}, {0x2, 0x5}, {0x8, 0x10}, {0x7, 0x5}, {0x1, 0xd}, {0x6, 0x6}, {0x0, 0x8}, {0xb, 0xd}], 0x3, 0xa}, {[{0x7ff}, {0x2}, {0x0, 0x2}, {0x81, 0x3}, {0x200, 0x1}, {0x80, 0x3}, {0xa647, 0x2}, {0x9, 0x2}, {0x3ff}, {0x3, 0x2}, {0x3, 0x2}], [{0x9, 0x8}, {0x5, 0x6}, {0x80000001, 0x6}, {0x0, 0x8}, {0xfffffffc, 0xffffffff}, {0x5, 0xdf}, {0xffffffff, 0xffffff9f}, {0x8001, 0x7}, {0x4, 0x7441}, {0x30, 0x8001}, {0x1000, 0x3}], 0xb, 0xb}], 0x6}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x5, 0x6}, {0x0, 0x4, 0x1}, 0xb}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xa08) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000540)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000300)={0x0, 0x0, 0x2c, 0x4, 0x104, 0x1}) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) 2.090888625s ago: executing program 5 (id=6899): socket$kcm(0x11, 0xa, 0x300) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000000c0)={0xbffffff5, 0x7fffffff, 0xffffffbc, 0x6, 0xfffffffe, 0x20000000}) socket$kcm(0x2, 0xa, 0x2) socket$kcm(0x2, 0x0, 0x73) pipe2$9p(&(0x7f00000000c0), 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.089814606s ago: executing program 9 (id=6900): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xae}], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2a}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x300, 0x4}, 0x80, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000440)="63f805d7649496db7295", 0xa}], 0x2}, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000fce000)=@abs={0x0, 0x0, 0x4e24}, 0x6e) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x60}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) get_mempolicy(&(0x7f0000000140), 0x0, 0x7fff, &(0x7f0000ffb000/0x3000)=nil, 0x4) r4 = semget$private(0x0, 0x6, 0x3b1) semop(r4, &(0x7f00000000c0)=[{0x0, 0xfffc}], 0x1) semctl$IPC_RMID(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x10008, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES64, @ANYRES8, @ANYRESHEX], 0x1, 0x29f, &(0x7f0000000100)="$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") r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b0002000020deffffe5ffffffff040000000000", @ANYRES32=0x0, @ANYBLOB="008000"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x3e, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x100000000000027b}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000005c0)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x617fd0fed20a7c3f}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.004988427s ago: executing program 2 (id=6901): r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) r2 = signalfd(r0, &(0x7f0000000700)={[0x6]}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000680)='f2fs_write_checkpoint\x00', r2, 0x0, 0x4}, 0x18) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) lstat(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000880)=0x0) perf_event_open(0x0, r5, 0xffffffffffffffff, r2, 0x2) socket$nl_route(0x10, 0x3, 0x0) setns(0xffffffffffffffff, 0x10000080) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_MARK={0x8, 0x10}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) 1.729561211s ago: executing program 5 (id=6902): r0 = socket(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xd, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000401}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4, 0x0, 0x4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000100)={'veth0_to_team\x00', 0x400}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000440)={'wg1\x00', 0x600}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x10, [0x0, 0x0, 0x0, 0xa, 0x0, 0x2000000, 0x0, 0x2]}}) 1.550605125s ago: executing program 2 (id=6903): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000180)=@ethtool_perm_addr={0x4b, 0x12, "4372070000001000476fb2940acfbe4c0e24"}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) r4 = socket$inet6(0x10, 0x2, 0x6) sendto$inet6(r4, &(0x7f00000002c0)="100000001200050f0c1000000049b23e", 0x10, 0x0, 0x0, 0x0) r5 = openat$selinux_user(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$selinux_user(r5, &(0x7f0000000400)=ANY=[@ANYBLOB='systmm_u:object_r:faillog_t:s0 root\x00'], 0x24) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x10) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x201) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r6, 0xc04c5349, &(0x7f0000000340)={0x7, 0x6, 0x8}) r7 = socket$inet_udp(0x2, 0x2, 0x0) dup2(r7, r7) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$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") r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000000)=0x10000000000000, 0xffffff6a) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r9}, 0x10) r10 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x42, 0x0) pwrite64(r10, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(r8, &(0x7f0000000300)='./bus\x00', 0x20800, 0x10) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYRESDEC=r1], 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.543763274s ago: executing program 9 (id=6904): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001900045abead3ab094ecdf9ae159dd231dd2000000000000000000021800060000fe01000000000c00168008000300000000200600150006000000"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000004) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x42, 0x4, 0x338, 0xffffffff, 0x1a8, 0xb0, 0x1a8, 0xffffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010102, @broadcast, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x74, 0x70, 0xb0, 0x1ba, {0x46010000}}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6bc128419cfb67daad5b4809088400ed0000000000000000000100040500"}}}, {{@uncond, 0x287, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0x0, 0xfffffffe}}, @common=@unspec=@statistic={{0x38}, {0x7400}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) mmap(&(0x7f0000385000/0x4000)=nil, 0x4000, 0x8, 0x4000010, 0xffffffffffffffff, 0xf4d4d000) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000080000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003c6000085000000060000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x10, &(0x7f00000004c0)={[{@i_version}, {@quota}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}]}, 0x1, 0x3f7, &(0x7f0000003080)="$eJzs3U1vG0UfAPD/bt7atE+TSs+Bl4sFSERCJE3aApVAIuLCoT3RA0es2C1RnQYlRqJVxItA3EAC8QHgAHwEjnDgO8AZOEClCOVAys1o7V3HxHbapA6ukt9PGnlmZ+2Z9XjW68nsJIBjqxQRL0fESESci4ipfHuah3i/FbL9trc2lv7e2lhKotF47c8kknxb8VpJ/ngqf4GZNCL9KInHe5S7fuv2jXKtVl3L03P1lbfm1m/dfnZ5pXy9er16c+G58xcuXnzh0sLzAzvWzZXkk6e+ufzbZx9XPv/pj++ns/qezvM6j2NQSlFqvye7XRp0YUN2oiOejA6xIgAA7CnNr/1Hm9f/UzESOxdvU/Hpj0OtHAAAADAQjUbxCAAAABxdid/+AAAAcMQV8wC2tzaWijDE6Qj8xzYXI2K61f5389DKGW3f0zu26/7eQSpFxKsnrixkIQ7pPmwAAACA4+yHxdbCf93jf2k80rHfyYiYLNb2G6DSrnT3+E96Z8BF0mFzMeLFiLjbNf6XFrtMj+Sp/zWHCseSa8u16rmIOBMRMzE2kaXn9yjj3SdufNsvr3P878tfX5/Pys8ed/ZI74xO/Ps5lXK9/CDHzI7NDyIeG+3V/kl7zLdzncyDeGN5+6V+eVn7Z+1dhO725zA1vop4umf/31m5NNl7fda55vlgLj8rTHSX8cvprz/sV35n/89CVn7xtwAOX9b/J/du/+Y6ue31etf3X8Z3f135uV/evdu/9/l/PLnarOB4vu2dcr2+Nh8xnlzu3u7T1Fa8H8X7lbX/zJO9v/+L678k/+4/07E+9H688t7Zq/3y9P/hytq/sq/+v//Im5OPzvQr//76/4VmZYoXcf13b/fbQMOuJwAAAAAAAACDkTbn9iXpbDueprOzrXm+/4/JtLa6Xn/m2urbNyutOYDTMZYW8z+nOuaDzrduI2+nF3alz0fE2Yj4YupkMz27tFqrDPvgAQAA4Jg41ef3f+b3g9zsAQAAADycpoddAQAAAODQ+f0PAAAAR9qDrOtfq64V/yLogE8XETlYZCT/4D0s9Tl6kSGelAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACIfwIAAP//keS8Nw==") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x141442, 0x38) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0xd8, r4, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PEERS={0xa8, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}, {0x7c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ALLOWEDIPS={0x54, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x1800840, &(0x7f00000000c0)={[{@numtail}, {@shortname_win95}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@fat=@check_strict}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@shortname_winnt}, {@fat=@nfs}, {@shortname_win95}, {@uni_xlate}, {@utf8no}, {@shortname_win95}]}, 0x1, 0x360, &(0x7f0000000900)="$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") r5 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x0) fallocate(r5, 0x0, 0x0, 0x1001f0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5) sendmsg$NL80211_CMD_SET_REG(r5, &(0x7f0000000180)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x134, r6, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xd1}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_RULES={0xe0, 0x22, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8000}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9c98}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x100}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x51}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xab3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xed00}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x867}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x80}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x100}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xf563}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}]}, {0x4}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4d}]}, 0x134}, 0x1, 0x0, 0x0, 0x8820}, 0x24000800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_clone3(&(0x7f0000000280)={0x4000000, 0x0, &(0x7f0000000080)=0x0, 0x0, {0x33}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_open_procfs(r7, 0x0) sendfile(r5, r5, 0x0, 0x400) 1.456642946s ago: executing program 5 (id=6905): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = syz_clone(0x20180080, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r3, 0x12) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r4 = dup3(r2, r1, 0x0) recvmmsg(r4, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x2a, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x12, 0x1c, 0x65, 0x0, 0x5, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, {0xffff, 0x4e22, 0x8}}}}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='kfree\x00', r6, 0x0, 0x16}, 0x18) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a0103000000000000000002000000540003804000038014000100626f6e645f736c6176655f300000000014000100736974300000000000000000000000000400010073697430000000000000000000000000080002400000000008000140000000000900020073797a31000000000900010073797a30"], 0xa8}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r7}, 0x10) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) 1.23855388s ago: executing program 0 (id=6906): r0 = openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$selinux_context(r0, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) 1.23771684s ago: executing program 5 (id=6907): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x18) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 1.155868881s ago: executing program 0 (id=6908): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x43, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x4, @perf_bp={0x0, 0x13}, 0x400, 0xffffffff, 0xd13, 0x6, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) 1.030035823s ago: executing program 5 (id=6909): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x0, 0x0}) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000900)=ANY=[@ANYRES64=r0, @ANYRES32=r1, @ANYRES16=r1], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='mm_khugepaged_scan_pmd\x00', r2, 0x0, 0x1}, 0xffffffffffffff86) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x6) ptrace(0x10, r1) r3 = socket(0x2, 0x80805, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000007239f886002020000000"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) getgid() bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r6}, &(0x7f0000000080), &(0x7f0000000180)='%ps \x00'}, 0x20) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000280)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYRES16=r3], 0x58}, 0x1, 0x7}, 0x0) r9 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x0, 0x0) fcntl$setlease(r9, 0x400, 0x0) mq_unlink(&(0x7f0000000340)='eth0\x00') sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x1}], 0x1}}], 0x2, 0x0) ptrace(0x8, r1) waitid(0x1, r1, 0x0, 0x8, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bind$inet6(r3, &(0x7f00000007c0)={0xa, 0x4e20, 0x8693, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c) 986.779464ms ago: executing program 9 (id=6910): pipe2$9p(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}, 0x21840325d861c735) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x41, 0x3, 0x2b8, 0x0, 0x19, 0x0, 0x140, 0x0, 0x220, 0x1f0, 0x1f0, 0x220, 0x1f0, 0x3, 0x0, {[{{@uncond, 0x0, 0xe0, 0x140, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@limit={{0x48}, {0x0, 0x2, 0x7e}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x28f5c, 0x6]}, {0xffffffffffffffff, [0x0, 0x0, 0x4, 0x4, 0x1], 0x0, 0x3}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x10, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x318) perf_event_open(&(0x7f000001a2c0)={0x1, 0xffffffffffffff1e, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x6, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc57a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f000001a340)={0xffffffffffffffff}) recvmsg(r2, &(0x7f000001a280)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000300)=[{&(0x7f0000000400)=""/231, 0xf8}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f000001a3c0), 0x0, 0x0, 0x0, 0x404c014}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = dup(r0) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1836be0000560000009500"/32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r6, &(0x7f0000001240)=""/102400, 0x200000, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r4}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) timer_create(0x1, 0x0, &(0x7f00000001c0)=0x0) timer_settime(r7, 0x1, &(0x7f00000013c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, &(0x7f0000001400)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r5, 0x0, 0x8000000000004}, 0x18) pread64(r5, &(0x7f0000033380)=""/102371, 0x18fe3, 0x80000000000000) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f000001a240)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x30) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1e, 0x8, &(0x7f0000000800)=ANY=[@ANYRESDEC, @ANYRESHEX, @ANYBLOB="0000000000000000b7030302001000001b000000b700"/34], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) msgget$private(0x0, 0x0) 776.824618ms ago: executing program 2 (id=6911): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffdaf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x38, r3, 0x1, 0x0, 0x1, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x38}}, 0x4000) 450.629453ms ago: executing program 2 (id=6912): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=@newsa={0x15c, 0x10, 0x1, 0x70bdab, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@multicast1, 0x0, 0x0, 0x2000, 0x0, 0x8, 0x0, 0x20, 0x0, 0x0, 0xffffffffffffffff}, {@in=@multicast2, 0x4, 0x6c}, @in6=@remote, {0x7b77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, {0x5, 0x71, 0xd, 0x7}, {0x0, 0x400}, 0xfffffffc, 0x0, 0x2, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0x7fff, 0x40, 0x800, 0x3}}]}, 0x15c}}, 0x20000000) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x7c00) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0xd, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x8805}, 0x40000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) r7 = socket(0x2, 0x80805, 0x0) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000880)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) lseek(0xffffffffffffffff, 0x9, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendmmsg$inet(r7, &(0x7f0000000900)=[{{&(0x7f0000000080)={0x2, 0x4, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000ac0)="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", 0x541}], 0x1}}], 0x2, 0x0) 355.610555ms ago: executing program 0 (id=6913): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xae}], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2a}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x300, 0x4}, 0x80, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000440)="63f805d7649496db7295", 0xa}], 0x2}, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000fce000)=@abs={0x0, 0x0, 0x4e24}, 0x6e) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x60}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) get_mempolicy(&(0x7f0000000140), 0x0, 0x7fff, &(0x7f0000ffb000/0x3000)=nil, 0x4) r4 = semget$private(0x0, 0x6, 0x3b1) semop(r4, &(0x7f00000000c0)=[{0x0, 0xfffc}], 0x1) semctl$IPC_RMID(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x10008, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES64, @ANYRES8, @ANYRESHEX], 0x1, 0x29f, &(0x7f0000000100)="$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") r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b0002000020deffffe5ffffffff040000000000", @ANYRES32=0x0, @ANYBLOB="008000"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x3e, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x100000000000027b}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000005c0)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x617fd0fed20a7c3f}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 64.04804ms ago: executing program 0 (id=6914): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000001280), 0x6) 52.42212ms ago: executing program 9 (id=6915): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = fsopen(&(0x7f0000000100)='vfat\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000180)='utf8', &(0x7f0000000340)='./file2\x00', 0xffffffffffffff9c) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000180)='mand\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000000c0), 0x5, 0x40) ioctl$IMSETDEVNAME(r1, 0x80184947, &(0x7f0000000100)={0x7, 'syz0\x00'}) lsm_get_self_attr(0x68, &(0x7f0000000000)={0x0, 0x0, 0x25, 0x5, ""/5}, &(0x7f0000000080)=0x25, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x80c0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 0s ago: executing program 9 (id=6916): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100000001692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00'}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000580)='./file0\x00', 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x1, 0x120b, &(0x7f0000002300)="$eJzs3M9rXFUUB/CTNv1hajJRa7UF6UE3unk2WbhyEyQF6YDSNoVWEF7NRIeZzIS8ITBFbHdu/TvEpTtB/AeyceNacJeNyy7EJ84LtglxEcFOWz6fzRzm3i9zH28YeJd7Zu/9bzZ7G1WxUY7ixMxMzG5F5MOMjBNxMhoP4p1bv/z6xo3bd66ttNur1zOvrtxcei8zFy7/+MmX37350+jcre8XfjgTu4uf7v2+/Nvuhd2Le3/e/KJbZbfKwXCUZd4dDkfl3X4n17tVr8j8uN8pq052B1Vn+8D4Rn+4tTXOcrA+P7e13amqLAfj7HXGORrmaHuc5edld5BFUeT8XPDfnY61bx/WdR1R16fidNR1Xb8Qc3EuXoz5WIhWLMZL8XK8Eufj1bgQr8XrcXEya9orBwAAAAAAAAAAAAAAAAAAgOeL/n8AAAAAAAAAAAAAAAAAAACYPv3/AAAAAAAAAAAAAAAAAAAAMH36/wEAAAAAAAAAAAAAAAAAAGD6bty+c22l3V69nnk2YvPrnbWdtea1GV/ZiG70oxNXohV/xKT7v9HUVz9sr17JicV4d/P+fv7+ztrJg/mlyd8JHJlfavJ5MH8m5h7PL0crzh+dXz4yfzbefuuxfBGt+PmzGEY/1uPv7KP8V0uZH3zUPpS/NJkHAAAAz4Mi/3Hk83tR5MxMM/XQePPmv+8P1K1D+wOHnq9n49LsFC+ciWp8r1f2+53tZ6vY/0rGvV55+WlYj+IYxf69e/C0rOcZLU5FxP/4EVP8UeKJeXTTp70SAAAAAAAAAAAAjuMYBwNnm/O2xz9OOO1rBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5iB44FAAAAAIT5W6fRsQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFcFAAD//78558w=") rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file5\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000007000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) unshare(0x22000600) kernel console output (not intermixed with test programs): pid=21947 comm="syz.7.5918" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 393.211817][T21948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.230168][T21971] FAULT_INJECTION: forcing a failure. [ 393.230168][T21971] name failslab, interval 1, probability 0, space 0, times 0 [ 393.244291][T21971] CPU: 0 UID: 0 PID: 21971 Comm: syz.2.5927 Tainted: G W 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(voluntary) [ 393.244335][T21971] Tainted: [W]=WARN [ 393.244344][T21971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 393.244361][T21971] Call Trace: [ 393.244396][T21971] [ 393.244408][T21971] __dump_stack+0x1d/0x30 [ 393.244433][T21971] dump_stack_lvl+0xe8/0x140 [ 393.244452][T21971] dump_stack+0x15/0x1b [ 393.244552][T21971] should_fail_ex+0x265/0x280 [ 393.244592][T21971] should_failslab+0x8c/0xb0 [ 393.244671][T21971] kmem_cache_alloc_noprof+0x50/0x310 [ 393.244706][T21971] ? skb_clone+0x151/0x1f0 [ 393.244731][T21971] skb_clone+0x151/0x1f0 [ 393.244753][T21971] __netlink_deliver_tap+0x2c9/0x500 [ 393.244876][T21971] netlink_unicast+0x64c/0x670 [ 393.244915][T21971] netlink_sendmsg+0x58b/0x6b0 [ 393.244937][T21971] ? __pfx_netlink_sendmsg+0x10/0x10 [ 393.244956][T21971] __sock_sendmsg+0x142/0x180 [ 393.245013][T21971] ____sys_sendmsg+0x31e/0x4e0 [ 393.245071][T21971] ___sys_sendmsg+0x17b/0x1d0 [ 393.245132][T21971] __x64_sys_sendmsg+0xd4/0x160 [ 393.245199][T21971] x64_sys_call+0x2999/0x2fb0 [ 393.245304][T21971] do_syscall_64+0xd2/0x200 [ 393.245325][T21971] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 393.245350][T21971] ? clear_bhb_loop+0x40/0x90 [ 393.245371][T21971] ? clear_bhb_loop+0x40/0x90 [ 393.245401][T21971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.245429][T21971] RIP: 0033:0x7f4a18fce929 [ 393.245448][T21971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 393.245468][T21971] RSP: 002b:00007f4a17637038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 393.245488][T21971] RAX: ffffffffffffffda RBX: 00007f4a191f5fa0 RCX: 00007f4a18fce929 [ 393.245507][T21971] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000006 [ 393.245549][T21971] RBP: 00007f4a17637090 R08: 0000000000000000 R09: 0000000000000000 [ 393.245566][T21971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 393.245582][T21971] R13: 0000000000000000 R14: 00007f4a191f5fa0 R15: 00007ffc83bed9e8 [ 393.245608][T21971] [ 393.249022][ T29] audit: type=1400 audit(1750866240.220:16196): avc: denied { remove_name } for pid=21964 comm="syz.8.5924" name="file0" dev="loop8" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 393.503665][ T29] audit: type=1400 audit(1750866240.220:16197): avc: denied { rename } for pid=21964 comm="syz.8.5924" name="file0" dev="loop8" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 393.503697][ T29] audit: type=1400 audit(1750866240.220:16198): avc: denied { unlink } for pid=21964 comm="syz.8.5924" name="file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 393.514048][ T29] audit: type=1326 audit(1750866240.342:16199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21947 comm="syz.7.5918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe6798e929 code=0x7ffc0000 [ 393.574918][ T29] audit: type=1326 audit(1750866240.342:16200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21947 comm="syz.7.5918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe6798e929 code=0x7ffc0000 [ 393.600069][ T29] audit: type=1326 audit(1750866240.351:16201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21947 comm="syz.7.5918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fbe6798e929 code=0x7ffc0000 [ 393.600118][ T29] audit: type=1326 audit(1750866240.351:16202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21947 comm="syz.7.5918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe6798e929 code=0x7ffc0000 [ 393.600156][ T29] audit: type=1326 audit(1750866240.351:16203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21947 comm="syz.7.5918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe6798e929 code=0x7ffc0000 [ 393.600320][ T29] audit: type=1326 audit(1750866240.351:16204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21947 comm="syz.7.5918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbe6798e929 code=0x7ffc0000 [ 393.638578][T20938] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.711703][T21981] netlink: 'syz.2.5930': attribute type 10 has an invalid length. [ 393.722534][T21981] team0: Device hsr_slave_0 failed to register rx_handler [ 393.849157][T21999] loop8: detected capacity change from 0 to 512 [ 393.867022][T21999] EXT4-fs error (device loop8): ext4_orphan_get:1393: inode #15: comm syz.8.5935: casefold flag without casefold feature [ 393.892889][T21999] EXT4-fs error (device loop8): ext4_orphan_get:1398: comm syz.8.5935: couldn't read orphan inode 15 (err -117) [ 393.912634][T21999] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.932394][T21974] lo speed is unknown, defaulting to 1000 [ 394.014781][T21974] chnl_net:caif_netlink_parms(): no params data found [ 394.036765][T20938] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.049165][T22015] SELinux: syz.2.5940 (22015) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 394.067908][T22012] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5939'. [ 394.106362][T21974] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.113550][T21974] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.140907][T21974] bridge_slave_0: entered allmulticast mode [ 394.147825][T21974] bridge_slave_0: entered promiscuous mode [ 394.155730][T21974] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.164376][T21974] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.173366][T21974] bridge_slave_1: entered allmulticast mode [ 394.206287][T21974] bridge_slave_1: entered promiscuous mode [ 394.283123][T21974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.296443][T21974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 394.327027][T21974] team0: Port device team_slave_0 added [ 394.546267][T21974] team0: Port device team_slave_1 added [ 394.612592][T21974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.619826][T21974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.647893][T21974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.734436][T21974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.741617][T21974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.767777][T21974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.958851][T22033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5944'. [ 394.984773][T21974] hsr_slave_0: entered promiscuous mode [ 395.010679][T21974] hsr_slave_1: entered promiscuous mode [ 395.137469][T21974] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 395.145256][T21974] Cannot create hsr debugfs directory [ 395.168366][T22033] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 395.176624][T22033] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 395.200881][T22033] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 395.208472][T22033] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 395.331335][T21974] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.403352][T21974] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.482661][T21974] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.544224][T21974] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.564762][ T3416] IPVS: starting estimator thread 0... [ 395.627543][T21974] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 395.640445][T21974] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 395.657714][T21974] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 395.668758][T21974] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 395.678382][T22072] IPVS: using max 2400 ests per chain, 120000 per kthread [ 395.689946][T22084] FAULT_INJECTION: forcing a failure. [ 395.689946][T22084] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 395.703194][T22084] CPU: 1 UID: 0 PID: 22084 Comm: syz.2.5963 Tainted: G W 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(voluntary) [ 395.703241][T22084] Tainted: [W]=WARN [ 395.703249][T22084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 395.703263][T22084] Call Trace: [ 395.703271][T22084] [ 395.703280][T22084] __dump_stack+0x1d/0x30 [ 395.703304][T22084] dump_stack_lvl+0xe8/0x140 [ 395.703391][T22084] dump_stack+0x15/0x1b [ 395.703409][T22084] should_fail_ex+0x265/0x280 [ 395.703443][T22084] should_fail+0xb/0x20 [ 395.703552][T22084] should_fail_usercopy+0x1a/0x20 [ 395.703587][T22084] _copy_from_user+0x1c/0xb0 [ 395.703610][T22084] __sys_sendto+0x19e/0x330 [ 395.703730][T22084] __x64_sys_sendto+0x76/0x90 [ 395.703763][T22084] x64_sys_call+0x2eb6/0x2fb0 [ 395.703787][T22084] do_syscall_64+0xd2/0x200 [ 395.703882][T22084] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 395.703911][T22084] ? clear_bhb_loop+0x40/0x90 [ 395.704028][T22084] ? clear_bhb_loop+0x40/0x90 [ 395.704052][T22084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.704148][T22084] RIP: 0033:0x7f4a18fce929 [ 395.704166][T22084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 395.704187][T22084] RSP: 002b:00007f4a17637038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 395.704207][T22084] RAX: ffffffffffffffda RBX: 00007f4a191f5fa0 RCX: 00007f4a18fce929 [ 395.704220][T22084] RDX: 00000000000100a6 RSI: 0000200000000180 RDI: 0000000000000006 [ 395.704241][T22084] RBP: 00007f4a17637090 R08: 0000200000000140 R09: 0000000000000014 [ 395.704273][T22084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.704318][T22084] R13: 0000000000000000 R14: 00007f4a191f5fa0 R15: 00007ffc83bed9e8 [ 395.704340][T22084] [ 395.957849][T22094] loop8: detected capacity change from 0 to 512 [ 395.979120][T22094] EXT4-fs error (device loop8): ext4_orphan_get:1393: inode #15: comm syz.8.5964: casefold flag without casefold feature [ 395.996455][T21974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.005259][T22094] EXT4-fs error (device loop8): ext4_orphan_get:1398: comm syz.8.5964: couldn't read orphan inode 15 (err -117) [ 396.023957][T21974] 8021q: adding VLAN 0 to HW filter on device team0 [ 396.050938][T21974] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 396.062879][T21974] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 396.141709][T22094] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 396.147287][T14525] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.161500][T14525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.171739][T14525] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.178945][T14525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 396.292693][T20938] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.346734][T22104] loop8: detected capacity change from 0 to 512 [ 396.398607][T22104] EXT4-fs (loop8): 1 orphan inode deleted [ 396.416942][T14525] EXT4-fs error (device loop8): ext4_release_dquot:6969: comm kworker/u8:27: Failed to release dquot type 1 [ 396.447084][T22104] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 396.480997][T22109] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5968'. [ 396.514459][T22104] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 396.535679][T21974] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 396.643996][T20938] EXT4-fs error (device loop8): ext4_readdir:264: inode #11: block 4: comm syz-executor: path /68/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 396.696260][T20938] EXT4-fs error (device loop8): ext4_empty_dir:3084: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 396.720042][T21974] veth0_vlan: entered promiscuous mode [ 396.744331][T20938] EXT4-fs warning (device loop8): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 396.756176][T21974] veth1_vlan: entered promiscuous mode [ 396.789705][T20938] EXT4-fs error (device loop8): ext4_readdir:264: inode #11: block 4: comm syz-executor: path /68/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 396.819977][T21974] veth0_macvtap: entered promiscuous mode [ 396.829931][T20938] EXT4-fs error (device loop8): ext4_empty_dir:3084: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 396.853104][T21974] veth1_macvtap: entered promiscuous mode [ 396.859362][T20938] EXT4-fs warning (device loop8): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 396.878878][T22125] vlan0: entered allmulticast mode [ 396.879373][T20938] EXT4-fs error (device loop8): ext4_readdir:264: inode #11: block 4: comm syz-executor: path /68/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 396.906057][T20938] EXT4-fs error (device loop8): ext4_empty_dir:3084: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 396.926937][T20938] EXT4-fs warning (device loop8): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 396.938651][T20938] EXT4-fs error (device loop8): ext4_readdir:264: inode #11: block 4: comm syz-executor: path /68/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 396.967548][T21974] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 396.976248][T20938] EXT4-fs error (device loop8): ext4_empty_dir:3084: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 396.997377][T21974] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 397.015203][T21974] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.024003][T21974] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.032735][T21974] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.041561][T21974] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.063935][T20938] EXT4-fs warning (device loop8): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 397.075671][T20938] EXT4-fs error (device loop8): ext4_readdir:264: inode #11: block 4: comm syz-executor: path /68/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 397.106173][T20938] EXT4-fs warning (device loop8): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 397.129848][T20938] EXT4-fs warning (device loop8): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 397.152572][T20938] EXT4-fs warning (device loop8): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 397.173817][T20938] EXT4-fs warning (device loop8): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 397.185986][T20938] EXT4-fs warning (device loop8): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 397.200115][T20938] EXT4-fs warning (device loop8): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 397.412760][T22154] SELinux: syz.7.5981 (22154) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 397.466109][T20938] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.547099][T22146] cgroup: fork rejected by pids controller in /syz0 [ 397.984909][T22272] lo speed is unknown, defaulting to 1000 [ 398.064631][T22476] FAULT_INJECTION: forcing a failure. [ 398.064631][T22476] name failslab, interval 1, probability 0, space 0, times 0 [ 398.077526][T22476] CPU: 1 UID: 0 PID: 22476 Comm: syz.2.5991 Tainted: G W 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(voluntary) [ 398.077579][T22476] Tainted: [W]=WARN [ 398.077588][T22476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 398.077601][T22476] Call Trace: [ 398.077640][T22476] [ 398.077650][T22476] __dump_stack+0x1d/0x30 [ 398.077677][T22476] dump_stack_lvl+0xe8/0x140 [ 398.077702][T22476] dump_stack+0x15/0x1b [ 398.077843][T22476] should_fail_ex+0x265/0x280 [ 398.077892][T22476] should_failslab+0x8c/0xb0 [ 398.077916][T22476] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 398.077945][T22476] ? p9_client_create+0x59/0xbc0 [ 398.078008][T22476] ? p9_client_create+0x207/0xbc0 [ 398.078106][T22476] ? should_failslab+0x8c/0xb0 [ 398.078130][T22476] kstrdup+0x3e/0xd0 [ 398.078152][T22476] p9_client_create+0x207/0xbc0 [ 398.078230][T22476] v9fs_session_init+0xf7/0xde0 [ 398.078261][T22476] ? obj_cgroup_charge_account+0x122/0x1a0 [ 398.078293][T22476] ? __rcu_read_unlock+0x4f/0x70 [ 398.078381][T22476] ? should_fail_ex+0xdb/0x280 [ 398.078419][T22476] ? v9fs_mount+0x51/0x590 [ 398.078455][T22476] ? should_failslab+0x8c/0xb0 [ 398.078481][T22476] ? __kmalloc_cache_noprof+0x189/0x320 [ 398.078592][T22476] v9fs_mount+0x67/0x590 [ 398.078631][T22476] ? __pfx_v9fs_mount+0x10/0x10 [ 398.078716][T22476] legacy_get_tree+0x78/0xd0 [ 398.078754][T22476] vfs_get_tree+0x54/0x1d0 [ 398.078786][T22476] do_new_mount+0x207/0x680 [ 398.078847][T22476] path_mount+0x4a4/0xb20 [ 398.078885][T22476] ? user_path_at+0x109/0x130 [ 398.078977][T22476] __se_sys_mount+0x28f/0x2e0 [ 398.079001][T22476] ? fput+0x8f/0xc0 [ 398.079033][T22476] __x64_sys_mount+0x67/0x80 [ 398.079056][T22476] x64_sys_call+0xd36/0x2fb0 [ 398.079203][T22476] do_syscall_64+0xd2/0x200 [ 398.079223][T22476] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 398.079253][T22476] ? clear_bhb_loop+0x40/0x90 [ 398.079322][T22476] ? clear_bhb_loop+0x40/0x90 [ 398.079351][T22476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.079429][T22476] RIP: 0033:0x7f4a18fce929 [ 398.079450][T22476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 398.079472][T22476] RSP: 002b:00007f4a17637038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 398.079495][T22476] RAX: ffffffffffffffda RBX: 00007f4a191f5fa0 RCX: 00007f4a18fce929 [ 398.079507][T22476] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000000 [ 398.079519][T22476] RBP: 00007f4a17637090 R08: 0000200000000140 R09: 0000000000000000 [ 398.079605][T22476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 398.079618][T22476] R13: 0000000000000000 R14: 00007f4a191f5fa0 R15: 00007ffc83bed9e8 [ 398.079637][T22476] [ 398.132605][T22272] chnl_net:caif_netlink_parms(): no params data found [ 398.172713][T22482] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5993'. [ 398.447739][T22496] SELinux: syz.2.5997 (22496) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 398.470700][T22497] FAULT_INJECTION: forcing a failure. [ 398.470700][T22497] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 398.484732][T22497] CPU: 0 UID: 0 PID: 22497 Comm: syz.0.5998 Tainted: G W 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(voluntary) [ 398.484785][T22497] Tainted: [W]=WARN [ 398.484794][T22497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 398.484809][T22497] Call Trace: [ 398.484816][T22497] [ 398.484825][T22497] __dump_stack+0x1d/0x30 [ 398.484849][T22497] dump_stack_lvl+0xe8/0x140 [ 398.484869][T22497] dump_stack+0x15/0x1b [ 398.484890][T22497] should_fail_ex+0x265/0x280 [ 398.484922][T22497] should_fail+0xb/0x20 [ 398.485048][T22497] should_fail_usercopy+0x1a/0x20 [ 398.485090][T22497] _copy_to_user+0x20/0xa0 [ 398.485117][T22497] simple_read_from_buffer+0xb5/0x130 [ 398.485159][T22497] proc_fail_nth_read+0x100/0x140 [ 398.485292][T22497] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 398.485334][T22497] vfs_read+0x19d/0x6f0 [ 398.485436][T22497] ? touch_atime+0x106/0x340 [ 398.485465][T22497] ? __rcu_read_unlock+0x4f/0x70 [ 398.485494][T22497] ? __fget_files+0x184/0x1c0 [ 398.485520][T22497] ksys_read+0xda/0x1a0 [ 398.485589][T22497] __x64_sys_read+0x40/0x50 [ 398.485665][T22497] x64_sys_call+0x2d77/0x2fb0 [ 398.485688][T22497] do_syscall_64+0xd2/0x200 [ 398.485706][T22497] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 398.485804][T22497] ? clear_bhb_loop+0x40/0x90 [ 398.485824][T22497] ? clear_bhb_loop+0x40/0x90 [ 398.485860][T22497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.485885][T22497] RIP: 0033:0x7fedab3cd33c [ 398.485982][T22497] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 398.486005][T22497] RSP: 002b:00007feda9a37030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 398.486055][T22497] RAX: ffffffffffffffda RBX: 00007fedab5f5fa0 RCX: 00007fedab3cd33c [ 398.486073][T22497] RDX: 000000000000000f RSI: 00007feda9a370a0 RDI: 0000000000000007 [ 398.486087][T22497] RBP: 00007feda9a37090 R08: 0000000000000000 R09: 0000000000000000 [ 398.486099][T22497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 398.486111][T22497] R13: 0000000000000000 R14: 00007fedab5f5fa0 R15: 00007ffdab975148 [ 398.486130][T22497] [ 398.785949][T22272] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.793321][T22272] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.833183][T22272] bridge_slave_0: entered allmulticast mode [ 398.861101][T22272] bridge_slave_0: entered promiscuous mode [ 398.897644][T22272] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.904968][T22272] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.934063][T22272] bridge_slave_1: entered allmulticast mode [ 398.943576][T22272] bridge_slave_1: entered promiscuous mode [ 398.990477][T22272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.009522][T22272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 399.042456][T22272] team0: Port device team_slave_0 added [ 399.053949][T22272] team0: Port device team_slave_1 added [ 399.074096][T22272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.081331][T22272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.109405][T22272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.163420][T22516] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6006'. [ 399.186793][T22517] netlink: 64 bytes leftover after parsing attributes in process `syz.5.6005'. [ 399.260287][T22272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 399.267348][T22272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.294899][T22272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.342938][ T29] kauditd_printk_skb: 117 callbacks suppressed [ 399.342998][ T29] audit: type=1326 audit(1750866245.926:16321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22527 comm="syz.0.6008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedab3ce929 code=0x7ffc0000 [ 399.382305][T22272] hsr_slave_0: entered promiscuous mode [ 399.392170][ T29] audit: type=1326 audit(1750866245.964:16322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22527 comm="syz.0.6008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fedab3cd290 code=0x7ffc0000 [ 399.398484][T22272] hsr_slave_1: entered promiscuous mode [ 399.415933][ T29] audit: type=1326 audit(1750866245.964:16323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22527 comm="syz.0.6008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fedab3d0157 code=0x7ffc0000 [ 399.416034][ T29] audit: type=1326 audit(1750866245.964:16324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22527 comm="syz.0.6008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fedab3ce929 code=0x7ffc0000 [ 399.416068][ T29] audit: type=1326 audit(1750866245.964:16325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22527 comm="syz.0.6008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fedab3d0157 code=0x7ffc0000 [ 399.416103][ T29] audit: type=1326 audit(1750866245.964:16326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22527 comm="syz.0.6008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fedab3cd58a code=0x7ffc0000 [ 399.416175][ T29] audit: type=1326 audit(1750866245.964:16327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22527 comm="syz.0.6008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedab3ce929 code=0x7ffc0000 [ 399.416251][ T29] audit: type=1326 audit(1750866245.964:16328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22527 comm="syz.0.6008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fedab3ce929 code=0x7ffc0000 [ 399.416285][ T29] audit: type=1326 audit(1750866245.964:16329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22527 comm="syz.0.6008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedab3ce929 code=0x7ffc0000 [ 399.416318][ T29] audit: type=1326 audit(1750866245.964:16330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22527 comm="syz.0.6008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fedab3ce929 code=0x7ffc0000 [ 399.571904][T22537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6010'. [ 399.595333][T22272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 399.636884][T22272] Cannot create hsr debugfs directory [ 399.652938][T22537] bond0: (slave bond_slave_0): Releasing backup interface [ 399.756964][T22272] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 399.775956][T22272] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 399.788840][T22272] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 399.803291][T22543] lo speed is unknown, defaulting to 1000 [ 399.811273][T22272] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 399.837390][T22548] SELinux: syz.2.6014 (22548) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 399.856296][T22272] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.863473][T22272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 399.871311][T22272] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.878720][T22272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 399.894464][T14522] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.908787][T14522] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.978215][T22272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.993266][T22272] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.005570][T14522] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.012757][T14522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.044955][T14522] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.052215][T14522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.074701][T22272] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 400.166645][T22272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.332988][T22272] veth0_vlan: entered promiscuous mode [ 400.344079][T22272] veth1_vlan: entered promiscuous mode [ 400.354880][T22563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.377669][T22563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.390971][T22272] veth0_macvtap: entered promiscuous mode [ 400.414301][T22272] veth1_macvtap: entered promiscuous mode [ 400.433584][T22272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 400.435673][T22584] netlink: 'syz.0.6019': attribute type 4 has an invalid length. [ 400.447501][T22272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 400.448692][T22584] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6019'. [ 400.462390][T22272] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.475218][T22272] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.484231][T22272] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.493742][T22272] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.592754][T22596] futex_wake_op: syz.0.6025 tries to shift op by -1; fix this program [ 400.622566][T22599] netlink: 'syz.9.5984': attribute type 6 has an invalid length. [ 400.688339][T22605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.728879][T22605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.745497][T22605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.764971][T22605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.848724][T22613] x_tables: duplicate underflow at hook 3 [ 401.124154][T22629] netlink: 20 bytes leftover after parsing attributes in process `+}[@'. [ 401.478021][T22638] lo speed is unknown, defaulting to 1000 [ 401.896525][T22647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6040'. [ 401.962730][T22647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6040'. [ 401.998920][T22647] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6040'. [ 402.352849][T22669] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6050'. [ 402.536592][T22678] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 402.544945][T22678] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 402.588972][T22678] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 402.596756][T22678] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 402.694073][T22684] netlink: 'syz.5.6055': attribute type 10 has an invalid length. [ 402.879042][T22697] bond0: (slave bond_slave_0): Releasing backup interface [ 404.144926][T22734] hub 2-0:1.0: USB hub found [ 404.158614][T22734] hub 2-0:1.0: 8 ports detected [ 404.690334][ T29] kauditd_printk_skb: 236 callbacks suppressed [ 404.690352][ T29] audit: type=1326 audit(1750866250.921:16567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22751 comm="syz.9.6080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f8339e929 code=0x7ffc0000 [ 404.970470][ T29] audit: type=1326 audit(1750866250.949:16568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22751 comm="syz.9.6080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8339e929 code=0x7ffc0000 [ 404.994369][ T29] audit: type=1326 audit(1750866250.949:16569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22751 comm="syz.9.6080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8339e929 code=0x7ffc0000 [ 405.018357][ T29] audit: type=1326 audit(1750866250.996:16570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22751 comm="syz.9.6080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f8339e929 code=0x7ffc0000 [ 405.042037][ T29] audit: type=1326 audit(1750866250.996:16571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22751 comm="syz.9.6080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8339e929 code=0x7ffc0000 [ 405.065822][ T29] audit: type=1326 audit(1750866250.996:16572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22751 comm="syz.9.6080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8339e929 code=0x7ffc0000 [ 405.089729][ T29] audit: type=1326 audit(1750866250.996:16573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22751 comm="syz.9.6080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f8f8339e929 code=0x7ffc0000 [ 405.113545][ T29] audit: type=1326 audit(1750866250.996:16574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22751 comm="syz.9.6080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8339e929 code=0x7ffc0000 [ 405.138252][ T29] audit: type=1326 audit(1750866250.996:16575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22751 comm="syz.9.6080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8339e929 code=0x7ffc0000 [ 405.162224][ T29] audit: type=1326 audit(1750866250.996:16576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22751 comm="syz.9.6080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f8f8339e929 code=0x7ffc0000 [ 405.167012][T22765] __nla_validate_parse: 3 callbacks suppressed [ 405.167035][T22765] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6085'. [ 405.424298][T22782] FAULT_INJECTION: forcing a failure. [ 405.424298][T22782] name failslab, interval 1, probability 0, space 0, times 0 [ 405.438860][T22782] CPU: 0 UID: 0 PID: 22782 Comm: syz.2.6092 Tainted: G W 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(voluntary) [ 405.438896][T22782] Tainted: [W]=WARN [ 405.438903][T22782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 405.438917][T22782] Call Trace: [ 405.438923][T22782] [ 405.438933][T22782] __dump_stack+0x1d/0x30 [ 405.438958][T22782] dump_stack_lvl+0xe8/0x140 [ 405.438990][T22782] dump_stack+0x15/0x1b [ 405.439007][T22782] should_fail_ex+0x265/0x280 [ 405.439046][T22782] ? __se_sys_mount+0xef/0x2e0 [ 405.439109][T22782] should_failslab+0x8c/0xb0 [ 405.439131][T22782] __kmalloc_cache_noprof+0x4c/0x320 [ 405.439208][T22782] ? memdup_user+0x99/0xd0 [ 405.439240][T22782] __se_sys_mount+0xef/0x2e0 [ 405.439258][T22782] ? fput+0x8f/0xc0 [ 405.439281][T22782] ? ksys_write+0x192/0x1a0 [ 405.439313][T22782] __x64_sys_mount+0x67/0x80 [ 405.439385][T22782] x64_sys_call+0xd36/0x2fb0 [ 405.439432][T22782] do_syscall_64+0xd2/0x200 [ 405.439455][T22782] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 405.439490][T22782] ? clear_bhb_loop+0x40/0x90 [ 405.439577][T22782] ? clear_bhb_loop+0x40/0x90 [ 405.439599][T22782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.439652][T22782] RIP: 0033:0x7f4a18fce929 [ 405.439672][T22782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 405.439695][T22782] RSP: 002b:00007f4a17637038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 405.439747][T22782] RAX: ffffffffffffffda RBX: 00007f4a191f5fa0 RCX: 00007f4a18fce929 [ 405.439759][T22782] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 0000200000000100 [ 405.439771][T22782] RBP: 00007f4a17637090 R08: 0000200000000300 R09: 0000000000000000 [ 405.439783][T22782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 405.439795][T22782] R13: 0000000000000000 R14: 00007f4a191f5fa0 R15: 00007ffc83bed9e8 [ 405.439878][T22782] [ 405.673981][T22786] bridge0: port 3(vlan2) entered blocking state [ 405.680527][T22786] bridge0: port 3(vlan2) entered disabled state [ 405.694479][T22786] vlan2: entered allmulticast mode [ 405.699854][T22786] dummy0: entered allmulticast mode [ 405.708684][T22786] vlan2: entered promiscuous mode [ 405.714039][T22786] dummy0: entered promiscuous mode [ 405.719848][T22786] bridge0: port 3(vlan2) entered blocking state [ 405.726240][T22786] bridge0: port 3(vlan2) entered forwarding state [ 405.774526][T22796] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6098'. [ 405.924483][T22810] netlink: 'syz.2.6104': attribute type 1 has an invalid length. [ 405.933057][T22810] netlink: 228 bytes leftover after parsing attributes in process `syz.2.6104'. [ 406.309273][ T23] IPVS: starting estimator thread 0... [ 406.453691][T22835] IPVS: using max 2496 ests per chain, 124800 per kthread [ 407.031377][T22857] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6115'. [ 407.071879][T22857] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6115'. [ 407.082522][T22857] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6115'. [ 407.214361][T22869] sch_tbf: burst 128 is lower than device ip6tnl0 mtu (1452) ! [ 407.331193][T22879] FAULT_INJECTION: forcing a failure. [ 407.331193][T22879] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 407.344347][T22879] CPU: 1 UID: 0 PID: 22879 Comm: syz.2.6131 Tainted: G W 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(voluntary) [ 407.344385][T22879] Tainted: [W]=WARN [ 407.344392][T22879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 407.344404][T22879] Call Trace: [ 407.344412][T22879] [ 407.344420][T22879] __dump_stack+0x1d/0x30 [ 407.344441][T22879] dump_stack_lvl+0xe8/0x140 [ 407.344540][T22879] dump_stack+0x15/0x1b [ 407.344562][T22879] should_fail_ex+0x265/0x280 [ 407.344616][T22879] should_fail+0xb/0x20 [ 407.344644][T22879] should_fail_usercopy+0x1a/0x20 [ 407.344685][T22879] _copy_from_iter+0xcf/0xe40 [ 407.344717][T22879] ? kernel_fpu_begin_mask+0x211/0x290 [ 407.344765][T22879] ? kernel_fpu_end+0x85/0xd0 [ 407.344842][T22879] ? blake2s_update+0x134/0x160 [ 407.344861][T22879] write_pool_user+0x7c/0x1e0 [ 407.344884][T22879] ? import_ubuf+0xe8/0x120 [ 407.344920][T22879] ? __pfx_random_ioctl+0x10/0x10 [ 407.344947][T22879] random_ioctl+0x2cc/0x400 [ 407.344976][T22879] __se_sys_ioctl+0xcb/0x140 [ 407.345057][T22879] __x64_sys_ioctl+0x43/0x50 [ 407.345128][T22879] x64_sys_call+0x19a8/0x2fb0 [ 407.345152][T22879] do_syscall_64+0xd2/0x200 [ 407.345176][T22879] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 407.345209][T22879] ? clear_bhb_loop+0x40/0x90 [ 407.345237][T22879] ? clear_bhb_loop+0x40/0x90 [ 407.345284][T22879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.345312][T22879] RIP: 0033:0x7f4a18fce929 [ 407.345340][T22879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 407.345362][T22879] RSP: 002b:00007f4a17637038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 407.345381][T22879] RAX: ffffffffffffffda RBX: 00007f4a191f5fa0 RCX: 00007f4a18fce929 [ 407.345418][T22879] RDX: 000020000000fec0 RSI: 0000000040085203 RDI: 0000000000000003 [ 407.345438][T22879] RBP: 00007f4a17637090 R08: 0000000000000000 R09: 0000000000000000 [ 407.345454][T22879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 407.345469][T22879] R13: 0000000000000000 R14: 00007f4a191f5fa0 R15: 00007ffc83bed9e8 [ 407.345494][T22879] [ 407.976119][T22898] netlink: 'syz.5.6138': attribute type 1 has an invalid length. [ 408.078493][T22898] bond0: entered promiscuous mode [ 408.100912][T22902] netlink: 3 bytes leftover after parsing attributes in process `syz.5.6138'. [ 408.172824][T22905] netlink: 3 bytes leftover after parsing attributes in process `syz.5.6138'. [ 408.182656][T22898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 408.199552][T22902] batadv0: entered promiscuous mode [ 408.204869][T22902] batadv0: entered allmulticast mode [ 408.213122][T22902] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.257706][T22902] bond0: (slave batadv0): making interface the new active one [ 408.277922][T22902] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 408.307666][T22905] batadv1: entered promiscuous mode [ 408.312971][T22905] batadv1: entered allmulticast mode [ 408.347458][T22905] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 408.364793][T22905] bond0: (slave batadv1): Enslaving as an active interface with an up link [ 408.472257][T22918] netlink: 'syz.5.6146': attribute type 1 has an invalid length. [ 408.500697][T22918] bond1: entered promiscuous mode [ 408.507092][T22918] 8021q: adding VLAN 0 to HW filter on device bond1 [ 408.521827][T22918] netlink: 3 bytes leftover after parsing attributes in process `syz.5.6146'. [ 408.536366][T22918] batadv2: entered promiscuous mode [ 408.541670][T22918] batadv2: entered allmulticast mode [ 408.549163][T22918] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 408.557659][T22918] bond1: (slave batadv2): making interface the new active one [ 408.568692][T22918] bond1: (slave batadv2): Enslaving as an active interface with an up link [ 408.584234][T22918] netlink: 3 bytes leftover after parsing attributes in process `syz.5.6146'. [ 408.597518][T22918] batadv3: entered promiscuous mode [ 408.602881][T22918] batadv3: entered allmulticast mode [ 408.608931][T22918] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 408.620271][T22918] bond1: (slave batadv3): Enslaving as an active interface with an up link [ 408.682442][T22934] FAULT_INJECTION: forcing a failure. [ 408.682442][T22934] name failslab, interval 1, probability 0, space 0, times 0 [ 408.682525][T22934] CPU: 0 UID: 0 PID: 22934 Comm: syz.5.6153 Tainted: G W 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(voluntary) [ 408.682563][T22934] Tainted: [W]=WARN [ 408.682571][T22934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 408.682587][T22934] Call Trace: [ 408.682594][T22934] [ 408.682602][T22934] __dump_stack+0x1d/0x30 [ 408.682673][T22934] dump_stack_lvl+0xe8/0x140 [ 408.682713][T22934] dump_stack+0x15/0x1b [ 408.682735][T22934] should_fail_ex+0x265/0x280 [ 408.682800][T22934] should_failslab+0x8c/0xb0 [ 408.682843][T22934] kmem_cache_alloc_noprof+0x50/0x310 [ 408.682876][T22934] ? skb_clone+0x151/0x1f0 [ 408.682905][T22934] skb_clone+0x151/0x1f0 [ 408.682922][T22934] __netlink_deliver_tap+0x2c9/0x500 [ 408.682970][T22934] netlink_unicast+0x64c/0x670 [ 408.683078][T22934] netlink_sendmsg+0x58b/0x6b0 [ 408.683108][T22934] ? __pfx_netlink_sendmsg+0x10/0x10 [ 408.683208][T22934] __sock_sendmsg+0x142/0x180 [ 408.683244][T22934] ____sys_sendmsg+0x31e/0x4e0 [ 408.683295][T22934] ___sys_sendmsg+0x17b/0x1d0 [ 408.683429][T22934] __x64_sys_sendmsg+0xd4/0x160 [ 408.683482][T22934] x64_sys_call+0x2999/0x2fb0 [ 408.683511][T22934] do_syscall_64+0xd2/0x200 [ 408.683621][T22934] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 408.683658][T22934] ? clear_bhb_loop+0x40/0x90 [ 408.683684][T22934] ? clear_bhb_loop+0x40/0x90 [ 408.683709][T22934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.683782][T22934] RIP: 0033:0x7f2d4e2be929 [ 408.683802][T22934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 408.683827][T22934] RSP: 002b:00007f2d4c927038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 408.683884][T22934] RAX: ffffffffffffffda RBX: 00007f2d4e4e5fa0 RCX: 00007f2d4e2be929 [ 408.683902][T22934] RDX: 0000000020000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 408.683920][T22934] RBP: 00007f2d4c927090 R08: 0000000000000000 R09: 0000000000000000 [ 408.683937][T22934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 408.684006][T22934] R13: 0000000000000000 R14: 00007f2d4e4e5fa0 R15: 00007ffc729d7a48 [ 408.684034][T22934] [ 408.745433][T22938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.934740][T22938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.060619][T22954] syzkaller0: tun_chr_ioctl cmd 35111 [ 409.141783][T22962] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 410.203236][ T29] kauditd_printk_skb: 331 callbacks suppressed [ 410.203254][ T29] audit: type=1326 audit(1750866256.085:16908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22982 comm="syz.2.6172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a18fce929 code=0x7ffc0000 [ 410.234019][ T29] audit: type=1326 audit(1750866256.085:16909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22982 comm="syz.2.6172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a18fce929 code=0x7ffc0000 [ 410.242354][T22985] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 410.258012][ T29] audit: type=1326 audit(1750866256.085:16910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22982 comm="syz.2.6172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4a18fcd290 code=0x7ffc0000 [ 410.289127][ T29] audit: type=1326 audit(1750866256.085:16911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22982 comm="syz.2.6172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f4a18fd0157 code=0x7ffc0000 [ 410.312865][ T29] audit: type=1326 audit(1750866256.085:16912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22982 comm="syz.2.6172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4a18fce929 code=0x7ffc0000 [ 410.336458][ T29] audit: type=1326 audit(1750866256.085:16913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22982 comm="syz.2.6172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f4a18fd0157 code=0x7ffc0000 [ 410.360183][ T29] audit: type=1326 audit(1750866256.085:16914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22982 comm="syz.2.6172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f4a18fcd58a code=0x7ffc0000 [ 410.383834][ T29] audit: type=1326 audit(1750866256.085:16915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22982 comm="syz.2.6172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a18fce929 code=0x7ffc0000 [ 410.407794][ T29] audit: type=1326 audit(1750866256.085:16916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22982 comm="syz.2.6172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f4a18fce929 code=0x7ffc0000 [ 410.431467][ T29] audit: type=1326 audit(1750866256.085:16917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22982 comm="syz.2.6172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a18fce929 code=0x7ffc0000 [ 410.862169][T23015] __nla_validate_parse: 1 callbacks suppressed [ 410.862254][T23015] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6182'. [ 411.640084][T23030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.651134][T23030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.966794][T23054] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6194'. [ 413.478038][T23126] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6222'. [ 413.487084][T23126] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6222'. [ 413.627971][T23135] netlink: 20 bytes leftover after parsing attributes in process `+}[@'. [ 413.795662][T23145] FAULT_INJECTION: forcing a failure. [ 413.795662][T23145] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 413.810087][T23145] CPU: 0 UID: 0 PID: 23145 Comm: syz.9.6231 Tainted: G W 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(voluntary) [ 413.810129][T23145] Tainted: [W]=WARN [ 413.810138][T23145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 413.810154][T23145] Call Trace: [ 413.810163][T23145] [ 413.810203][T23145] __dump_stack+0x1d/0x30 [ 413.810230][T23145] dump_stack_lvl+0xe8/0x140 [ 413.810249][T23145] dump_stack+0x15/0x1b [ 413.810312][T23145] should_fail_ex+0x265/0x280 [ 413.810353][T23145] should_fail+0xb/0x20 [ 413.810388][T23145] should_fail_usercopy+0x1a/0x20 [ 413.810425][T23145] copy_fpstate_to_sigframe+0x628/0x7d0 [ 413.810490][T23145] ? copy_fpstate_to_sigframe+0xe6/0x7d0 [ 413.810558][T23145] ? x86_task_fpu+0x36/0x60 [ 413.810593][T23145] get_sigframe+0x34d/0x490 [ 413.810615][T23145] ? get_signal+0xdc8/0xf70 [ 413.810651][T23145] x64_setup_rt_frame+0xa8/0x580 [ 413.810672][T23145] arch_do_signal_or_restart+0x27c/0x480 [ 413.810703][T23145] exit_to_user_mode_loop+0x7a/0x100 [ 413.810736][T23145] do_syscall_64+0x1d6/0x200 [ 413.810760][T23145] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 413.810815][T23145] ? clear_bhb_loop+0x40/0x90 [ 413.810841][T23145] ? clear_bhb_loop+0x40/0x90 [ 413.810869][T23145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.810896][T23145] RIP: 0033:0x7f8f8339e929 [ 413.810916][T23145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 413.810954][T23145] RSP: 002b:00007f8f81a07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 413.811055][T23145] RAX: 0000000000000000 RBX: 00007f8f835c5fa0 RCX: 00007f8f8339e929 [ 413.811071][T23145] RDX: 0000200000000140 RSI: 0000000040045402 RDI: 0000000000000003 [ 413.811087][T23145] RBP: 00007f8f81a07090 R08: 0000000000000000 R09: 0000000000000000 [ 413.811103][T23145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 413.811116][T23145] R13: 0000000000000000 R14: 00007f8f835c5fa0 R15: 00007ffea0fd8868 [ 413.811135][T23145] [ 414.212621][T23161] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6236'. [ 414.573875][T23201] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6243'. [ 414.590164][T23198] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6254'. [ 414.603636][T23177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.615214][T23177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.763361][T23217] netlink: 20 bytes leftover after parsing attributes in process `+}[@'. [ 414.995798][T23241] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6267'. [ 415.010268][T23241] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 415.478225][T23270] lo speed is unknown, defaulting to 1000 [ 415.563457][ T29] kauditd_printk_skb: 799 callbacks suppressed [ 415.563475][ T29] audit: type=1326 audit(1750866261.098:17717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23273 comm="syz.9.6276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8339e929 code=0x7ffc0000 [ 415.759338][ T29] audit: type=1326 audit(1750866261.136:17718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23273 comm="syz.9.6276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8f8339d290 code=0x7ffc0000 [ 415.783374][ T29] audit: type=1326 audit(1750866261.136:17719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23273 comm="syz.9.6276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f8f833a0157 code=0x7ffc0000 [ 415.807485][ T29] audit: type=1326 audit(1750866261.136:17720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23273 comm="syz.9.6276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8f8339e929 code=0x7ffc0000 [ 415.831609][ T29] audit: type=1326 audit(1750866261.136:17721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23273 comm="syz.9.6276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f8f833a0157 code=0x7ffc0000 [ 415.855944][ T29] audit: type=1326 audit(1750866261.136:17722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23273 comm="syz.9.6276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f8f8339d58a code=0x7ffc0000 [ 415.879542][ T29] audit: type=1326 audit(1750866261.136:17723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23273 comm="syz.9.6276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8339e929 code=0x7ffc0000 [ 415.903327][ T29] audit: type=1326 audit(1750866261.136:17724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23273 comm="syz.9.6276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8339e929 code=0x7ffc0000 [ 415.927166][ T29] audit: type=1326 audit(1750866261.136:17725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23273 comm="syz.9.6276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f8f8339e929 code=0x7ffc0000 [ 415.950797][ T29] audit: type=1326 audit(1750866261.136:17726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23273 comm="syz.9.6276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8339e929 code=0x7ffc0000 [ 416.330649][T23291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.364044][T23291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.388506][T23283] cgroup: fork rejected by pids controller in /syz5 [ 417.146244][T26773] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6292'. [ 417.161794][T26773] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 417.249494][T26771] infiniband syz2: set active [ 417.255018][T26771] infiniband syz2: added veth0_to_bond [ 417.271005][T26771] RDS/IB: syz2: added [ 417.275547][T26771] smc: adding ib device syz2 with port count 1 [ 417.285694][T26771] smc: ib device syz2 port 1 has pnetid [ 417.710074][T26785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.730064][T26785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.873291][T26796] netlink: 84 bytes leftover after parsing attributes in process `syz.2.6303'. [ 418.821770][T27774] netlink: 20 bytes leftover after parsing attributes in process `+}[@'. [ 419.247010][T30078] SELinux: syz.0.6310 (30078) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 419.513831][T30088] netlink: 'syz.9.6313': attribute type 13 has an invalid length. [ 419.577452][T30088] gretap0: refused to change device tx_queue_len [ 419.585142][T30088] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 420.663109][T30109] vhci_hcd: invalid port number 255 [ 420.668386][T30109] vhci_hcd: invalid port number 255 [ 421.430042][T30125] SELinux: syz.7.6325 (30125) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 421.505368][ T29] kauditd_printk_skb: 76 callbacks suppressed [ 421.505389][ T29] audit: type=1326 audit(1750866266.636:17803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30126 comm="syz.0.6327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedab3ce929 code=0x7ffc0000 [ 421.535778][ T29] audit: type=1326 audit(1750866266.636:17804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30126 comm="syz.0.6327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fedab3cd290 code=0x7ffc0000 [ 421.559477][ T29] audit: type=1326 audit(1750866266.636:17805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30126 comm="syz.0.6327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fedab3d0157 code=0x7ffc0000 [ 421.583793][ T29] audit: type=1326 audit(1750866266.636:17806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30126 comm="syz.0.6327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fedab3ce929 code=0x7ffc0000 [ 421.607675][ T29] audit: type=1326 audit(1750866266.636:17807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30126 comm="syz.0.6327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fedab3d0157 code=0x7ffc0000 [ 421.631740][ T29] audit: type=1326 audit(1750866266.636:17808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30126 comm="syz.0.6327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fedab3cd58a code=0x7ffc0000 [ 421.655531][ T29] audit: type=1326 audit(1750866266.636:17809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30126 comm="syz.0.6327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedab3ce929 code=0x7ffc0000 [ 421.679817][ T29] audit: type=1326 audit(1750866266.636:17810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30126 comm="syz.0.6327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedab3ce929 code=0x7ffc0000 [ 421.704018][ T29] audit: type=1326 audit(1750866266.645:17811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30126 comm="syz.0.6327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fedab3ce929 code=0x7ffc0000 [ 421.728323][ T29] audit: type=1326 audit(1750866266.645:17812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30126 comm="syz.0.6327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedab3ce929 code=0x7ffc0000 [ 421.835520][T30134] netlink: 268 bytes leftover after parsing attributes in process `syz.0.6330'. [ 423.661086][T30171] netlink: 'syz.0.6341': attribute type 1 has an invalid length. [ 424.016794][T30177] netlink: 3 bytes leftover after parsing attributes in process `syz.0.6341'. [ 424.067627][T30171] bond2: entered promiscuous mode [ 424.084117][T30171] 8021q: adding VLAN 0 to HW filter on device bond2 [ 424.095808][T30182] SELinux: Context system_u:object_r:hald_sonypic_exec_t:s0 is not valid (left unmapped). [ 424.097997][T30177] batadv0: entered promiscuous mode [ 424.111457][T30177] batadv0: entered allmulticast mode [ 424.118811][T30177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 424.127471][T30177] bond2: (slave batadv0): making interface the new active one [ 424.136203][T30177] bond2: (slave batadv0): Enslaving as an active interface with an up link [ 424.145517][T30171] netlink: 3 bytes leftover after parsing attributes in process `syz.0.6341'. [ 424.183576][T30171] batadv1: entered promiscuous mode [ 424.189628][T30171] batadv1: entered allmulticast mode [ 424.241915][T30171] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 424.265367][T30171] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 424.293783][T30197] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6350'. [ 424.695595][T30207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.745021][T30207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.457686][T30247] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6365'. [ 425.645949][T30253] netlink: 'syz.7.6367': attribute type 1 has an invalid length. [ 425.725668][T30253] bond0: entered promiscuous mode [ 425.749014][T30253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.413854][T30261] lo speed is unknown, defaulting to 1000 [ 426.840076][T30267] sch_tbf: burst 0 is lower than device veth0_virt_wifi mtu (1514) ! [ 427.085695][T30271] smc: net device bond0 applied user defined pnetid SYZ2 [ 427.133252][T30271] smc: net device bond0 erased user defined pnetid SYZ2 [ 428.627113][ T29] kauditd_printk_skb: 110 callbacks suppressed [ 428.627131][ T29] audit: type=1326 audit(1750866273.324:17923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30307 comm="syz.0.6390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedab3ce929 code=0x7ffc0000 [ 428.840771][ T29] audit: type=1326 audit(1750866273.352:17924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30307 comm="syz.0.6390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedab3ce929 code=0x7ffc0000 [ 428.864568][ T29] audit: type=1326 audit(1750866273.352:17925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30307 comm="syz.0.6390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fedab3cd290 code=0x7ffc0000 [ 428.888678][ T29] audit: type=1326 audit(1750866273.352:17926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30307 comm="syz.0.6390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fedab3d0157 code=0x7ffc0000 [ 428.912449][ T29] audit: type=1326 audit(1750866273.352:17927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30307 comm="syz.0.6390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fedab3ce929 code=0x7ffc0000 [ 428.936178][ T29] audit: type=1326 audit(1750866273.352:17928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30307 comm="syz.0.6390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fedab3d0157 code=0x7ffc0000 [ 428.959999][ T29] audit: type=1326 audit(1750866273.352:17929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30307 comm="syz.0.6390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fedab3cd58a code=0x7ffc0000 [ 428.983569][ T29] audit: type=1326 audit(1750866273.352:17930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30307 comm="syz.0.6390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedab3ce929 code=0x7ffc0000 [ 429.007183][ T29] audit: type=1326 audit(1750866273.352:17931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30307 comm="syz.0.6390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedab3ce929 code=0x7ffc0000 [ 429.030976][ T29] audit: type=1326 audit(1750866273.352:17932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30307 comm="syz.0.6390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fedab3ce929 code=0x7ffc0000 [ 429.555233][T30334] 9pnet_fd: Insufficient options for proto=fd [ 429.616682][T30320] netlink: 68 bytes leftover after parsing attributes in process `+}[@'. [ 429.647098][T30311] Set syz1 is full, maxelem 65536 reached [ 429.815352][T30346] binfmt_misc: register: failed to install interpreter file ./file0 [ 429.827452][T30340] tun0: tun_chr_ioctl cmd 1074025677 [ 429.833046][T30340] tun0: linktype set to 776 [ 429.860896][T30349] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6404'. [ 430.227421][T30361] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6408'. [ 430.242343][T30361] batadv0: entered promiscuous mode [ 430.247637][T30361] batadv0: entered allmulticast mode [ 430.294375][T30368] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6408'. [ 430.326688][T30368] batadv0: entered promiscuous mode [ 430.332187][T30368] batadv0: entered allmulticast mode [ 430.651534][T30377] netlink: 'syz.2.6413': attribute type 5 has an invalid length. [ 430.713731][T30379] SELinux: failed to load policy [ 431.206497][T30400] ipvlan2: entered promiscuous mode [ 431.217543][T30400] bridge0: port 3(ipvlan2) entered blocking state [ 431.224161][T30400] bridge0: port 3(ipvlan2) entered disabled state [ 431.231428][T30400] ipvlan2: entered allmulticast mode [ 431.238242][T30400] bridge0: entered allmulticast mode [ 431.249406][T30400] ipvlan2: left allmulticast mode [ 431.254575][T30400] bridge0: left allmulticast mode [ 432.289052][T30412] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6425'. [ 432.608193][T30437] sch_fq: defrate 4294967295 ignored. [ 432.640210][T30423] block device autoloading is deprecated and will be removed. [ 432.649371][T30431] siw: device registration error -23 [ 433.084736][T30454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.816171][T30454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.110341][ T29] kauditd_printk_skb: 255 callbacks suppressed [ 434.110359][ T29] audit: type=1326 audit(1750866278.450:18188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30422 comm="syz.7.6430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbe679858e7 code=0x7ffc0000 [ 434.141692][ T29] audit: type=1326 audit(1750866278.450:18189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30422 comm="syz.7.6430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbe6792ab19 code=0x7ffc0000 [ 434.166652][ T29] audit: type=1326 audit(1750866278.450:18190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30422 comm="syz.7.6430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fbe6798e929 code=0x7ffc0000 [ 434.535075][ T29] audit: type=1326 audit(1750866278.768:18191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30422 comm="syz.7.6430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbe679858e7 code=0x7ffc0000 [ 434.560071][ T29] audit: type=1326 audit(1750866278.768:18192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30422 comm="syz.7.6430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbe6792ab19 code=0x7ffc0000 [ 434.572889][T30477] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 434.584444][ T29] audit: type=1326 audit(1750866278.768:18193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30422 comm="syz.7.6430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fbe6798e929 code=0x7ffc0000 [ 434.616314][ T29] audit: type=1326 audit(1750866278.768:18194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30422 comm="syz.7.6430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe6798e929 code=0x7ffc0000 [ 434.641996][ T29] audit: type=1326 audit(1750866278.768:18195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30422 comm="syz.7.6430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe6798e929 code=0x7ffc0000 [ 434.667022][ T29] audit: type=1326 audit(1750866278.787:18196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30422 comm="syz.7.6430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbe679858e7 code=0x7ffc0000 [ 434.692622][ T29] audit: type=1326 audit(1750866278.787:18197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30422 comm="syz.7.6430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbe6792ab19 code=0x7ffc0000 [ 434.727480][T30491] FAULT_INJECTION: forcing a failure. [ 434.727480][T30491] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 434.740747][T30491] CPU: 1 UID: 0 PID: 30491 Comm: syz.0.6454 Tainted: G W 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(voluntary) [ 434.740784][T30491] Tainted: [W]=WARN [ 434.740793][T30491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 434.740829][T30491] Call Trace: [ 434.740836][T30491] [ 434.740845][T30491] __dump_stack+0x1d/0x30 [ 434.740869][T30491] dump_stack_lvl+0xe8/0x140 [ 434.740894][T30491] dump_stack+0x15/0x1b [ 434.740949][T30491] should_fail_ex+0x265/0x280 [ 434.740989][T30491] should_fail+0xb/0x20 [ 434.741021][T30491] should_fail_usercopy+0x1a/0x20 [ 434.741105][T30491] _copy_from_user+0x1c/0xb0 [ 434.741131][T30491] x25_ioctl+0x3ab/0xb90 [ 434.741172][T30491] ? ioctl_has_perm+0x257/0x2a0 [ 434.741241][T30491] sock_do_ioctl+0x70/0x220 [ 434.741274][T30491] sock_ioctl+0x41b/0x610 [ 434.741302][T30491] ? __pfx_sock_ioctl+0x10/0x10 [ 434.741328][T30491] __se_sys_ioctl+0xcb/0x140 [ 434.741375][T30491] __x64_sys_ioctl+0x43/0x50 [ 434.741410][T30491] x64_sys_call+0x19a8/0x2fb0 [ 434.741436][T30491] do_syscall_64+0xd2/0x200 [ 434.741459][T30491] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 434.741612][T30491] ? clear_bhb_loop+0x40/0x90 [ 434.741638][T30491] ? clear_bhb_loop+0x40/0x90 [ 434.741664][T30491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.741688][T30491] RIP: 0033:0x7fedab3ce929 [ 434.741704][T30491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 434.741721][T30491] RSP: 002b:00007feda9a37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 434.741824][T30491] RAX: ffffffffffffffda RBX: 00007fedab5f5fa0 RCX: 00007fedab3ce929 [ 434.741840][T30491] RDX: 0000200000000000 RSI: 00000000000089ec RDI: 0000000000000004 [ 434.741855][T30491] RBP: 00007feda9a37090 R08: 0000000000000000 R09: 0000000000000000 [ 434.741870][T30491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 434.741927][T30491] R13: 0000000000000000 R14: 00007fedab5f5fa0 R15: 00007ffdab975148 [ 434.741947][T30491] [ 435.002493][T30500] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6459'. [ 435.018422][T30500] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6459'. [ 435.146102][T30500] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6459'. [ 435.193451][T30500] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6459'. [ 435.203259][T30504] lo speed is unknown, defaulting to 1000 [ 435.237633][T30510] FAULT_INJECTION: forcing a failure. [ 435.237633][T30510] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 435.251917][T30510] CPU: 0 UID: 0 PID: 30510 Comm: syz.2.6462 Tainted: G W 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(voluntary) [ 435.251967][T30510] Tainted: [W]=WARN [ 435.251976][T30510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 435.251992][T30510] Call Trace: [ 435.252000][T30510] [ 435.252008][T30510] __dump_stack+0x1d/0x30 [ 435.252030][T30510] dump_stack_lvl+0xe8/0x140 [ 435.252109][T30510] dump_stack+0x15/0x1b [ 435.252162][T30510] should_fail_ex+0x265/0x280 [ 435.252193][T30510] should_fail+0xb/0x20 [ 435.252288][T30510] should_fail_usercopy+0x1a/0x20 [ 435.252327][T30510] copy_folio_from_iter_atomic+0x278/0x1170 [ 435.252403][T30510] ? __cond_resched+0x4e/0x90 [ 435.252429][T30510] ? shmem_write_begin+0xa8/0x190 [ 435.252472][T30510] ? shmem_write_begin+0xe1/0x190 [ 435.252571][T30510] generic_perform_write+0x2c2/0x490 [ 435.252605][T30510] shmem_file_write_iter+0xc5/0xf0 [ 435.252631][T30510] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 435.252652][T30510] vfs_write+0x49d/0x8e0 [ 435.252766][T30510] __x64_sys_pwrite64+0xfd/0x150 [ 435.252786][T30510] x64_sys_call+0xe45/0x2fb0 [ 435.252806][T30510] do_syscall_64+0xd2/0x200 [ 435.252829][T30510] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 435.252924][T30510] ? clear_bhb_loop+0x40/0x90 [ 435.252948][T30510] ? clear_bhb_loop+0x40/0x90 [ 435.252974][T30510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.252994][T30510] RIP: 0033:0x7f4a18fce929 [ 435.253078][T30510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 435.253096][T30510] RSP: 002b:00007f4a17637038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 435.253115][T30510] RAX: ffffffffffffffda RBX: 00007f4a191f5fa0 RCX: 00007f4a18fce929 [ 435.253127][T30510] RDX: 000000000000fdef RSI: 0000200000000140 RDI: 0000000000000006 [ 435.253148][T30510] RBP: 00007f4a17637090 R08: 0000000000000000 R09: 0000000000000000 [ 435.253164][T30510] R10: 000000000000fecc R11: 0000000000000246 R12: 0000000000000002 [ 435.253180][T30510] R13: 0000000000000000 R14: 00007f4a191f5fa0 R15: 00007ffc83bed9e8 [ 435.253203][T30510] [ 435.764117][T30504] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6459'. [ 435.831772][T30504] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6459'. [ 435.860238][T30504] SELinux: syz.7.6459 (30504) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 435.978799][T30532] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6468'. [ 436.114661][T30538] netlink: 3 bytes leftover after parsing attributes in process `syz.0.6470'. [ 436.127356][T30538] batadv2: entered promiscuous mode [ 436.133485][T30538] batadv2: entered allmulticast mode [ 436.179588][T30543] netlink: 3 bytes leftover after parsing attributes in process `syz.0.6470'. [ 436.193524][T30543] batadv2: entered promiscuous mode [ 436.199740][T30543] batadv2: entered allmulticast mode [ 436.921140][T30564] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6479'. [ 437.134821][ T3416] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 437.145454][ T3416] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 437.348555][T30581] netlink: 'syz.0.6485': attribute type 6 has an invalid length. [ 438.221115][T30618] SELinux: syz.5.6498 (30618) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 439.164488][T30664] FAULT_INJECTION: forcing a failure. [ 439.164488][T30664] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 439.177703][T30664] CPU: 1 UID: 0 PID: 30664 Comm: syz.7.6516 Tainted: G W 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(voluntary) [ 439.177736][T30664] Tainted: [W]=WARN [ 439.177743][T30664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 439.177758][T30664] Call Trace: [ 439.177809][T30664] [ 439.177818][T30664] __dump_stack+0x1d/0x30 [ 439.177839][T30664] dump_stack_lvl+0xe8/0x140 [ 439.177865][T30664] dump_stack+0x15/0x1b [ 439.177888][T30664] should_fail_ex+0x265/0x280 [ 439.178006][T30664] should_fail+0xb/0x20 [ 439.178038][T30664] should_fail_usercopy+0x1a/0x20 [ 439.178076][T30664] _copy_to_user+0x20/0xa0 [ 439.178099][T30664] simple_read_from_buffer+0xb5/0x130 [ 439.178190][T30664] proc_fail_nth_read+0x100/0x140 [ 439.178228][T30664] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 439.178310][T30664] vfs_read+0x19d/0x6f0 [ 439.178378][T30664] ? __rcu_read_unlock+0x4f/0x70 [ 439.178399][T30664] ? __rcu_read_unlock+0x4f/0x70 [ 439.178427][T30664] ? __fget_files+0x184/0x1c0 [ 439.178450][T30664] ksys_read+0xda/0x1a0 [ 439.178482][T30664] __x64_sys_read+0x40/0x50 [ 439.178598][T30664] x64_sys_call+0x2d77/0x2fb0 [ 439.178619][T30664] do_syscall_64+0xd2/0x200 [ 439.178640][T30664] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 439.178713][T30664] ? clear_bhb_loop+0x40/0x90 [ 439.178733][T30664] ? clear_bhb_loop+0x40/0x90 [ 439.178762][T30664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.178785][T30664] RIP: 0033:0x7fbe6798d33c [ 439.178805][T30664] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 439.178839][T30664] RSP: 002b:00007fbe65ff7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 439.178901][T30664] RAX: ffffffffffffffda RBX: 00007fbe67bb5fa0 RCX: 00007fbe6798d33c [ 439.178918][T30664] RDX: 000000000000000f RSI: 00007fbe65ff70a0 RDI: 0000000000000006 [ 439.178932][T30664] RBP: 00007fbe65ff7090 R08: 0000000000000000 R09: 0000000000000000 [ 439.178944][T30664] R10: 00000000000003e6 R11: 0000000000000246 R12: 0000000000000001 [ 439.178993][T30664] R13: 0000000000000000 R14: 00007fbe67bb5fa0 R15: 00007ffd2ea5d888 [ 439.179019][T30664] [ 439.542598][ T29] kauditd_printk_skb: 377 callbacks suppressed [ 439.542616][ T29] audit: type=1326 audit(1750866283.529:18575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30673 comm="syz.0.6519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedab3ce929 code=0x7ffc0000 [ 439.607840][ T29] audit: type=1326 audit(1750866283.567:18576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30673 comm="syz.0.6519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fedab3cd290 code=0x7ffc0000 [ 439.631911][ T29] audit: type=1326 audit(1750866283.567:18577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30673 comm="syz.0.6519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fedab3d0157 code=0x7ffc0000 [ 439.655949][ T29] audit: type=1326 audit(1750866283.567:18578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30673 comm="syz.0.6519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fedab3ce929 code=0x7ffc0000 [ 439.679965][ T29] audit: type=1326 audit(1750866283.567:18579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30673 comm="syz.0.6519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fedab3d0157 code=0x7ffc0000 [ 439.703712][ T29] audit: type=1326 audit(1750866283.567:18580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30673 comm="syz.0.6519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fedab3cd58a code=0x7ffc0000 [ 439.727378][ T29] audit: type=1326 audit(1750866283.567:18581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30673 comm="syz.0.6519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedab3ce929 code=0x7ffc0000 [ 439.751442][ T29] audit: type=1326 audit(1750866283.567:18582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30673 comm="syz.0.6519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedab3ce929 code=0x7ffc0000 [ 439.776090][ T29] audit: type=1326 audit(1750866283.567:18583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30673 comm="syz.0.6519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fedab3ce929 code=0x7ffc0000 [ 439.800442][ T29] audit: type=1326 audit(1750866283.567:18584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30673 comm="syz.0.6519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedab3ce929 code=0x7ffc0000 [ 439.872995][T30680] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 439.879931][T30680] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 439.887542][T30680] vhci_hcd vhci_hcd.0: Device attached [ 439.950355][T30684] FAULT_INJECTION: forcing a failure. [ 439.950355][T30684] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 439.964851][T30684] CPU: 0 UID: 0 PID: 30684 Comm: syz.7.6523 Tainted: G W 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(voluntary) [ 439.964890][T30684] Tainted: [W]=WARN [ 439.964961][T30684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 439.964975][T30684] Call Trace: [ 439.964982][T30684] [ 439.965002][T30684] __dump_stack+0x1d/0x30 [ 439.965026][T30684] dump_stack_lvl+0xe8/0x140 [ 439.965049][T30684] dump_stack+0x15/0x1b [ 439.965066][T30684] should_fail_ex+0x265/0x280 [ 439.965158][T30684] should_fail_alloc_page+0xf2/0x100 [ 439.965186][T30684] __alloc_frozen_pages_noprof+0xff/0x360 [ 439.965251][T30684] alloc_pages_mpol+0xb3/0x250 [ 439.965285][T30684] alloc_pages_noprof+0x90/0x130 [ 439.965340][T30684] pte_alloc_one+0x2d/0x120 [ 439.965363][T30684] __pte_alloc+0x32/0x2b0 [ 439.965392][T30684] ? mas_state_walk+0x574/0x650 [ 439.965426][T30684] handle_mm_fault+0x1c16/0x2be0 [ 439.965516][T30684] ? mas_walk+0xf2/0x120 [ 439.965556][T30684] do_user_addr_fault+0x636/0x1090 [ 439.965592][T30684] ? fpregs_restore_userregs+0xad/0x1d0 [ 439.965623][T30684] ? switch_fpu_return+0xe/0x20 [ 439.965652][T30684] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 439.965697][T30684] exc_page_fault+0x62/0xa0 [ 439.965728][T30684] asm_exc_page_fault+0x26/0x30 [ 439.965812][T30684] RIP: 0033:0x7fbe67850d46 [ 439.965830][T30684] Code: f0 72 6e 48 63 cd 48 01 c1 49 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01 [ 439.965851][T30684] RSP: 002b:00007fbe65ff64a0 EFLAGS: 00010246 [ 439.965869][T30684] RAX: 0000000000000001 RBX: 00007fbe65ff6540 RCX: 0000000000000101 [ 439.965884][T30684] RDX: 0000000000000050 RSI: 0000000000000001 RDI: 00007fbe65ff65e0 [ 439.965910][T30684] RBP: 0000000000000102 R08: 00007fbe5dbd7000 R09: 0000000000000000 [ 439.965924][T30684] R10: 0000000000000000 R11: 00007fbe65ff6550 R12: 0000000000000001 [ 439.965938][T30684] R13: 00007fbe67a2c200 R14: 0000000000000000 R15: 00007fbe65ff65e0 [ 439.965960][T30684] [ 439.965976][T30684] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 440.217903][T30681] vhci_hcd: connection closed [ 440.218313][T14525] vhci_hcd: stop threads [ 440.227883][T14525] vhci_hcd: release socket [ 440.232625][T14525] vhci_hcd: disconnect device [ 441.337697][T30703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.390265][T30707] lo speed is unknown, defaulting to 1000 [ 441.520138][T30703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.549192][T30695] lo speed is unknown, defaulting to 1000 [ 441.766731][T30730] __nla_validate_parse: 6 callbacks suppressed [ 441.766752][T30730] netlink: 3 bytes leftover after parsing attributes in process `syz.9.6538'. [ 441.789547][T30730] batadv1: entered promiscuous mode [ 441.794877][T30730] batadv1: entered allmulticast mode [ 441.828061][T30732] netlink: 3 bytes leftover after parsing attributes in process `syz.9.6538'. [ 441.905601][T30732] batadv1: entered promiscuous mode [ 441.911008][T30732] batadv1: entered allmulticast mode [ 442.136394][T30734] lo speed is unknown, defaulting to 1000 [ 442.444699][T30755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.470767][T30755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.578051][T30757] lo speed is unknown, defaulting to 1000 [ 442.600558][T30764] syzkaller0: entered promiscuous mode [ 442.606113][T30764] syzkaller0: entered allmulticast mode [ 442.690605][T30772] block device autoloading is deprecated and will be removed. [ 442.990070][T30780] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6558'. [ 443.061709][T30780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.099670][T30780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.204527][T30803] FAULT_INJECTION: forcing a failure. [ 443.204527][T30803] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 443.217841][T30803] CPU: 1 UID: 0 PID: 30803 Comm: syz.9.6568 Tainted: G W 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(voluntary) [ 443.217875][T30803] Tainted: [W]=WARN [ 443.217882][T30803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 443.217902][T30803] Call Trace: [ 443.217914][T30803] [ 443.217924][T30803] __dump_stack+0x1d/0x30 [ 443.217951][T30803] dump_stack_lvl+0xe8/0x140 [ 443.217995][T30803] dump_stack+0x15/0x1b [ 443.218049][T30803] should_fail_ex+0x265/0x280 [ 443.218084][T30803] should_fail+0xb/0x20 [ 443.218111][T30803] should_fail_usercopy+0x1a/0x20 [ 443.218161][T30803] copy_folio_from_iter_atomic+0x278/0x1170 [ 443.218197][T30803] ? shmem_write_begin+0xa8/0x190 [ 443.218238][T30803] ? shmem_write_begin+0xe1/0x190 [ 443.218281][T30803] generic_perform_write+0x2c2/0x490 [ 443.218391][T30803] shmem_file_write_iter+0xc5/0xf0 [ 443.218418][T30803] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 443.218447][T30803] vfs_write+0x49d/0x8e0 [ 443.218566][T30803] ksys_write+0xda/0x1a0 [ 443.218598][T30803] __x64_sys_write+0x40/0x50 [ 443.218620][T30803] x64_sys_call+0x2cdd/0x2fb0 [ 443.218648][T30803] do_syscall_64+0xd2/0x200 [ 443.218729][T30803] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 443.218763][T30803] ? clear_bhb_loop+0x40/0x90 [ 443.218791][T30803] ? clear_bhb_loop+0x40/0x90 [ 443.218821][T30803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.218841][T30803] RIP: 0033:0x7f8f8339d3df [ 443.218857][T30803] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 443.218880][T30803] RSP: 002b:00007f8f81a06df0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 443.218904][T30803] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007f8f8339d3df [ 443.218920][T30803] RDX: 0000000000080000 RSI: 00007f8f795e7000 RDI: 0000000000000008 [ 443.218936][T30803] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000005f7 [ 443.218950][T30803] R10: 00000000000003c4 R11: 0000000000000293 R12: 0000000000000008 [ 443.218962][T30803] R13: 00007f8f81a06ef0 R14: 00007f8f81a06eb0 R15: 00007f8f795e7000 [ 443.218983][T30803] [ 443.470719][T30816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.479546][T30816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.760938][T30835] netlink: 'syz.2.6581': attribute type 1 has an invalid length. [ 443.769858][T30835] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6581'. [ 443.855614][T30849] wg2: entered promiscuous mode [ 443.861030][T30849] wg2: entered allmulticast mode [ 443.927871][T30855] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6588'. [ 444.042318][T30864] netlink: 7 bytes leftover after parsing attributes in process `syz.2.6591'. [ 444.054345][T30864] netlink: 7 bytes leftover after parsing attributes in process `syz.2.6591'. [ 444.152491][T30876] sch_fq: defrate 1 ignored. [ 444.342489][T30889] SELinux: syz.2.6603 (30889) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 444.540560][T30898] lo speed is unknown, defaulting to 1000 [ 444.968304][ T29] kauditd_printk_skb: 478 callbacks suppressed [ 444.968321][ T29] audit: type=1400 audit(1750866288.599:19063): avc: denied { mount } for pid=30910 comm="syz.7.6610" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 445.012836][T30918] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6610'. [ 445.025467][T30918] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6610'. [ 445.041249][T30917] netlink: 3 bytes leftover after parsing attributes in process `syz.9.6612'. [ 445.043627][ T29] audit: type=1400 audit(1750866288.599:19064): avc: denied { mounton } for pid=30914 comm="syz.2.6609" path="/175/file0" dev="tmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 445.075498][ T29] audit: type=1400 audit(1750866288.599:19065): avc: denied { setattr } for pid=30914 comm="syz.2.6609" name="file0" dev="tmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 445.126953][T30917] batadv1: entered promiscuous mode [ 445.133726][T30917] batadv1: entered allmulticast mode [ 445.147336][T30923] batadv1: entered promiscuous mode [ 445.152690][T30923] batadv1: entered allmulticast mode [ 445.183897][T30922] program syz.2.6613 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 445.206827][ T29] audit: type=1400 audit(1750866288.824:19066): avc: denied { setcheckreqprot } for pid=30920 comm="syz.2.6613" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 445.378147][ T29] audit: type=1326 audit(1750866288.983:19067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30933 comm="syz.9.6618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8339e929 code=0x7ffc0000 [ 445.403738][ T29] audit: type=1326 audit(1750866288.983:19068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30933 comm="syz.9.6618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8339e929 code=0x7ffc0000 [ 445.428143][ T29] audit: type=1326 audit(1750866288.983:19069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30933 comm="syz.9.6618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8f8339e929 code=0x7ffc0000 [ 445.453987][ T29] audit: type=1326 audit(1750866288.983:19070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30933 comm="syz.9.6618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8339e929 code=0x7ffc0000 [ 445.479009][ T29] audit: type=1326 audit(1750866288.983:19071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30933 comm="syz.9.6618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8339e929 code=0x7ffc0000 [ 445.504910][ T29] audit: type=1326 audit(1750866288.983:19072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30933 comm="syz.9.6618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8f8339e929 code=0x7ffc0000 [ 445.577298][T30938] SELinux: syz.2.6620 (30938) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 445.659572][T30943] FAULT_INJECTION: forcing a failure. [ 445.659572][T30943] name failslab, interval 1, probability 0, space 0, times 0 [ 445.672628][T30943] CPU: 1 UID: 0 PID: 30943 Comm: syz.9.6622 Tainted: G W 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(voluntary) [ 445.672737][T30943] Tainted: [W]=WARN [ 445.672743][T30943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 445.672756][T30943] Call Trace: [ 445.672764][T30943] [ 445.672772][T30943] __dump_stack+0x1d/0x30 [ 445.672793][T30943] dump_stack_lvl+0xe8/0x140 [ 445.672840][T30943] dump_stack+0x15/0x1b [ 445.672914][T30943] should_fail_ex+0x265/0x280 [ 445.672984][T30943] ? audit_log_d_path+0x8d/0x150 [ 445.673023][T30943] should_failslab+0x8c/0xb0 [ 445.673047][T30943] __kmalloc_cache_noprof+0x4c/0x320 [ 445.673166][T30943] audit_log_d_path+0x8d/0x150 [ 445.673248][T30943] audit_log_d_path_exe+0x42/0x70 [ 445.673297][T30943] audit_log_task+0x1e9/0x250 [ 445.673375][T30943] audit_seccomp+0x61/0x100 [ 445.673408][T30943] ? __seccomp_filter+0x68c/0x10d0 [ 445.673475][T30943] __seccomp_filter+0x69d/0x10d0 [ 445.673506][T30943] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 445.673568][T30943] ? vfs_write+0x75e/0x8e0 [ 445.673703][T30943] ? __rcu_read_unlock+0x4f/0x70 [ 445.673725][T30943] ? __fget_files+0x184/0x1c0 [ 445.673748][T30943] __secure_computing+0x82/0x150 [ 445.673831][T30943] syscall_trace_enter+0xcf/0x1e0 [ 445.673863][T30943] do_syscall_64+0xac/0x200 [ 445.673883][T30943] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 445.673909][T30943] ? clear_bhb_loop+0x40/0x90 [ 445.673991][T30943] ? clear_bhb_loop+0x40/0x90 [ 445.674014][T30943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.674035][T30943] RIP: 0033:0x7f8f8339e929 [ 445.674050][T30943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 445.674104][T30943] RSP: 002b:00007f8f81a07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 445.674123][T30943] RAX: ffffffffffffffda RBX: 00007f8f835c5fa0 RCX: 00007f8f8339e929 [ 445.674136][T30943] RDX: 000000110e22fff6 RSI: 00000000c004743e RDI: 0000000000000005 [ 445.674148][T30943] RBP: 00007f8f81a07090 R08: 0000000000000000 R09: 0000000000000000 [ 445.674164][T30943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 445.674232][T30943] R13: 0000000000000000 R14: 00007f8f835c5fa0 R15: 00007ffea0fd8868 [ 445.674253][T30943] [ 446.129553][T30953] batadv1: entered promiscuous mode [ 446.134999][T30953] batadv1: entered allmulticast mode [ 446.305355][T30956] batadv1: entered promiscuous mode [ 446.311207][T30956] batadv1: entered allmulticast mode [ 446.509210][T30966] $H: entered promiscuous mode [ 446.515158][T30966] bond_slave_0: entered promiscuous mode [ 446.521268][T30966] bond_slave_1: entered promiscuous mode [ 446.687936][T30979] bridge_slave_0: left promiscuous mode [ 446.693852][T30979] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.710907][T30979] bridge_slave_1: left allmulticast mode [ 446.716843][T30979] bridge_slave_1: left promiscuous mode [ 446.722720][T30979] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.731481][T30979] $H: (slave bond_slave_0): Releasing backup interface [ 446.739781][T30979] bond_slave_0: left promiscuous mode [ 446.747748][T30979] $H: (slave bond_slave_1): Releasing backup interface [ 446.755922][T30979] bond_slave_1: left promiscuous mode [ 446.765571][T30979] team0: Port device team_slave_0 removed [ 446.780084][T30979] team0: Port device team_slave_1 removed [ 446.840237][T30979] team0: Mode changed to "loadbalance" [ 446.880567][T30979] tipc: Enabled bearer , priority 0 [ 446.960718][T30962] lo speed is unknown, defaulting to 1000 [ 447.175542][T30962] chnl_net:caif_netlink_parms(): no params data found [ 447.233698][T30962] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.241731][T30962] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.269977][T30962] bridge_slave_0: entered allmulticast mode [ 447.278105][T30962] bridge_slave_0: entered promiscuous mode [ 447.288209][T30962] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.295419][T30962] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.302955][T30962] bridge_slave_1: entered allmulticast mode [ 447.309671][T30962] bridge_slave_1: entered promiscuous mode [ 447.349387][T30962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.377396][T30962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.402973][T30962] team0: Port device team_slave_0 added [ 447.420343][T30962] team0: Port device team_slave_1 added [ 447.443230][T31004] SELinux: syz.7.6638 (31004) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 447.588389][T30962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 447.595675][T30962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 447.622583][T30962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 447.800939][T30962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 447.808992][T30962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 447.835775][T30962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 447.943662][ T36] tipc: Node number set to 3758096386 [ 448.087751][T31021] xt_hashlimit: size too large, truncated to 1048576 [ 448.095046][T31021] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 448.252093][T30962] hsr_slave_0: entered promiscuous mode [ 448.408768][T30962] hsr_slave_1: entered promiscuous mode [ 448.415047][T30962] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 448.455678][T30962] Cannot create hsr debugfs directory [ 448.712517][T30962] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.741308][T31042] __nla_validate_parse: 4 callbacks suppressed [ 448.741329][T31042] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6646'. [ 448.782933][T30962] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.834252][T30962] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.878290][T30962] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.077766][T30962] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 449.112081][T30962] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 449.133399][T30962] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 449.152275][T30962] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 449.302350][T30962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 449.320624][T31072] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 449.346418][T30962] 8021q: adding VLAN 0 to HW filter on device team0 [ 449.353492][T31072] SELinux: failed to load policy [ 449.386912][T31072] netlink: 'syz.7.6660': attribute type 10 has an invalid length. [ 449.394900][T31072] netlink: 2 bytes leftover after parsing attributes in process `syz.7.6660'. [ 449.413981][T14522] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.421135][T14522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.464614][T14522] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.471843][T14522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.539160][T31072] team0: entered promiscuous mode [ 449.544367][T31072] FAULT_INJECTION: forcing a failure. [ 449.544367][T31072] name failslab, interval 1, probability 0, space 0, times 0 [ 449.557106][T31072] CPU: 1 UID: 0 PID: 31072 Comm: syz.7.6660 Tainted: G W 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(voluntary) [ 449.557206][T31072] Tainted: [W]=WARN [ 449.557215][T31072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 449.557231][T31072] Call Trace: [ 449.557241][T31072] [ 449.557252][T31072] __dump_stack+0x1d/0x30 [ 449.557279][T31072] dump_stack_lvl+0xe8/0x140 [ 449.557302][T31072] dump_stack+0x15/0x1b [ 449.557341][T31072] should_fail_ex+0x265/0x280 [ 449.557370][T31072] ? netdevice_event+0x2ae/0x610 [ 449.557430][T31072] should_failslab+0x8c/0xb0 [ 449.557460][T31072] __kmalloc_cache_noprof+0x4c/0x320 [ 449.557493][T31072] ? __pfx_netdevice_event+0x10/0x10 [ 449.557530][T31072] netdevice_event+0x2ae/0x610 [ 449.557696][T31072] ? __pfx_add_netdev_ips+0x10/0x10 [ 449.557731][T31072] ? __pfx_is_eth_port_of_netdev_filter+0x10/0x10 [ 449.557771][T31072] ? __pfx_add_default_gids+0x10/0x10 [ 449.557869][T31072] ? __pfx_is_ndev_for_default_gid_filter+0x10/0x10 [ 449.557937][T31072] ? __pfx_del_netdev_default_ips_join+0x10/0x10 [ 449.557977][T31072] ? __pfx_is_eth_port_inactive_slave_filter+0x10/0x10 [ 449.558150][T31072] ? nh_netdev_event+0x91/0x3b0 [ 449.558179][T31072] ? __pfx_netdevice_event+0x10/0x10 [ 449.558213][T31072] raw_notifier_call_chain+0x6f/0x1b0 [ 449.558256][T31072] ? call_netdevice_notifiers_info+0x9c/0x100 [ 449.558290][T31072] call_netdevice_notifiers_info+0xae/0x100 [ 449.558328][T31072] __dev_notify_flags+0xff/0x1a0 [ 449.558399][T31072] ? __perf_event_task_sched_in+0xa5b/0xac0 [ 449.558443][T31072] netif_change_flags+0xac/0xd0 [ 449.558499][T31072] do_setlink+0x9d2/0x2810 [ 449.558534][T31072] ? __schedule+0x6a8/0xb30 [ 449.558561][T31072] ? schedule+0x5f/0xd0 [ 449.558588][T31072] ? __list_del_entry_valid_or_report+0x65/0x130 [ 449.558658][T31072] rtnl_newlink+0xe75/0x12d0 [ 449.558707][T31072] ? xas_load+0x413/0x430 [ 449.558786][T31072] ? __rcu_read_unlock+0x4f/0x70 [ 449.558814][T31072] ? xa_load+0xb1/0xe0 [ 449.558838][T31072] ? __rcu_read_unlock+0x4f/0x70 [ 449.558868][T31072] ? avc_has_perm_noaudit+0x1b1/0x200 [ 449.558906][T31072] ? selinux_capable+0x1f9/0x270 [ 449.559032][T31072] ? security_capable+0x83/0x90 [ 449.559068][T31072] ? ns_capable+0x7d/0xb0 [ 449.559117][T31072] ? __pfx_rtnl_newlink+0x10/0x10 [ 449.559137][T31072] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 449.559158][T31072] ? avc_has_perm_noaudit+0x1b1/0x200 [ 449.559200][T31072] netlink_rcv_skb+0x120/0x220 [ 449.559245][T31072] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 449.559322][T31072] rtnetlink_rcv+0x1c/0x30 [ 449.559342][T31072] netlink_unicast+0x59e/0x670 [ 449.559376][T31072] netlink_sendmsg+0x58b/0x6b0 [ 449.559403][T31072] ? __pfx_netlink_sendmsg+0x10/0x10 [ 449.559429][T31072] __sock_sendmsg+0x142/0x180 [ 449.559478][T31072] ____sys_sendmsg+0x31e/0x4e0 [ 449.559522][T31072] ___sys_sendmsg+0x17b/0x1d0 [ 449.559627][T31072] __x64_sys_sendmsg+0xd4/0x160 [ 449.559676][T31072] x64_sys_call+0x2999/0x2fb0 [ 449.559766][T31072] do_syscall_64+0xd2/0x200 [ 449.559789][T31072] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 449.559872][T31072] ? clear_bhb_loop+0x40/0x90 [ 449.559900][T31072] ? clear_bhb_loop+0x40/0x90 [ 449.559954][T31072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.560040][T31072] RIP: 0033:0x7fbe6798e929 [ 449.560056][T31072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 449.560077][T31072] RSP: 002b:00007fbe65ff7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 449.560244][T31072] RAX: ffffffffffffffda RBX: 00007fbe67bb5fa0 RCX: 00007fbe6798e929 [ 449.560258][T31072] RDX: 0000000000000080 RSI: 0000200000000100 RDI: 0000000000000003 [ 449.560271][T31072] RBP: 00007fbe65ff7090 R08: 0000000000000000 R09: 0000000000000000 [ 449.560354][T31072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 449.560366][T31072] R13: 0000000000000000 R14: 00007fbe67bb5fa0 R15: 00007ffd2ea5d888 [ 449.560388][T31072] [ 449.957219][T31072] 8021q: adding VLAN 0 to HW filter on device team0 [ 449.964514][T31072] bridge0: port 1(team0) entered blocking state [ 449.970880][T31072] bridge0: port 1(team0) entered disabled state [ 449.977554][T31072] team0: entered allmulticast mode [ 450.003295][T30962] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 450.014073][T30962] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 450.160594][T31074] lo speed is unknown, defaulting to 1000 [ 450.320572][ T29] kauditd_printk_skb: 160 callbacks suppressed [ 450.320587][ T29] audit: type=1326 audit(1750866293.613:19233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31086 comm="syz.2.6665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a18fce929 code=0x7ffc0000 [ 450.410818][ T29] audit: type=1326 audit(1750866293.641:19234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31086 comm="syz.2.6665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a18fce929 code=0x7ffc0000 [ 450.435008][ T29] audit: type=1326 audit(1750866293.641:19235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31086 comm="syz.2.6665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f4a18fce929 code=0x7ffc0000 [ 450.458700][ T29] audit: type=1326 audit(1750866293.641:19236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31086 comm="syz.2.6665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a18fce929 code=0x7ffc0000 [ 450.482755][ T29] audit: type=1326 audit(1750866293.641:19237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31086 comm="syz.2.6665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f4a18fce929 code=0x7ffc0000 [ 450.506513][ T29] audit: type=1326 audit(1750866293.641:19238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31086 comm="syz.2.6665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a18fce929 code=0x7ffc0000 [ 450.530157][ T29] audit: type=1326 audit(1750866293.641:19239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31086 comm="syz.2.6665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4a18fce929 code=0x7ffc0000 [ 450.548439][T30962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 450.554062][ T29] audit: type=1326 audit(1750866293.641:19240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31086 comm="syz.2.6665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a18fce929 code=0x7ffc0000 [ 450.554104][ T29] audit: type=1326 audit(1750866293.650:19241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31086 comm="syz.2.6665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a18fce929 code=0x7ffc0000 [ 450.554182][ T29] audit: type=1326 audit(1750866293.650:19242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31086 comm="syz.2.6665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a18fce929 code=0x7ffc0000 [ 450.889153][T30962] veth0_vlan: entered promiscuous mode [ 450.914835][T30962] veth1_vlan: entered promiscuous mode [ 450.955744][T30962] veth0_macvtap: entered promiscuous mode [ 450.969136][T30962] veth1_macvtap: entered promiscuous mode [ 450.984193][T30962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 451.004243][T30962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 451.019812][T30962] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.029059][T30962] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.039433][T30962] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.048729][T30962] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.123538][T31113] SELinux: syz.0.6670 (31113) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 451.738125][T31136] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6677'. [ 452.079810][T31144] FAULT_INJECTION: forcing a failure. [ 452.079810][T31144] name failslab, interval 1, probability 0, space 0, times 0 [ 452.093463][T31144] CPU: 1 UID: 0 PID: 31144 Comm: syz.5.6680 Tainted: G W 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(voluntary) [ 452.093547][T31144] Tainted: [W]=WARN [ 452.093556][T31144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 452.093573][T31144] Call Trace: [ 452.093581][T31144] [ 452.093591][T31144] __dump_stack+0x1d/0x30 [ 452.093618][T31144] dump_stack_lvl+0xe8/0x140 [ 452.093693][T31144] dump_stack+0x15/0x1b [ 452.093714][T31144] should_fail_ex+0x265/0x280 [ 452.093754][T31144] ? __tcf_chain_get+0x91/0x280 [ 452.093840][T31144] should_failslab+0x8c/0xb0 [ 452.093871][T31144] __kmalloc_cache_noprof+0x4c/0x320 [ 452.093908][T31144] __tcf_chain_get+0x91/0x280 [ 452.094066][T31144] ? __tcf_block_find+0x11a/0x1a0 [ 452.094094][T31144] tc_new_tfilter+0x5ac/0x10a0 [ 452.094115][T31144] ? avc_has_perm_noaudit+0x1b1/0x200 [ 452.094201][T31144] ? __pfx_tc_new_tfilter+0x10/0x10 [ 452.094228][T31144] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 452.094270][T31144] netlink_rcv_skb+0x120/0x220 [ 452.094307][T31144] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 452.094334][T31144] rtnetlink_rcv+0x1c/0x30 [ 452.094380][T31144] netlink_unicast+0x59e/0x670 [ 452.094415][T31144] netlink_sendmsg+0x58b/0x6b0 [ 452.094512][T31144] ? __pfx_netlink_sendmsg+0x10/0x10 [ 452.094553][T31144] __sock_sendmsg+0x142/0x180 [ 452.094584][T31144] ____sys_sendmsg+0x31e/0x4e0 [ 452.094630][T31144] ___sys_sendmsg+0x17b/0x1d0 [ 452.094760][T31144] __x64_sys_sendmsg+0xd4/0x160 [ 452.094866][T31144] x64_sys_call+0x2999/0x2fb0 [ 452.094894][T31144] do_syscall_64+0xd2/0x200 [ 452.094917][T31144] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 452.094951][T31144] ? clear_bhb_loop+0x40/0x90 [ 452.095051][T31144] ? clear_bhb_loop+0x40/0x90 [ 452.095081][T31144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.095108][T31144] RIP: 0033:0x7f97c931e929 [ 452.095128][T31144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 452.095207][T31144] RSP: 002b:00007f97c7987038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 452.095226][T31144] RAX: ffffffffffffffda RBX: 00007f97c9545fa0 RCX: 00007f97c931e929 [ 452.095239][T31144] RDX: 000000002008c014 RSI: 0000200000000580 RDI: 0000000000000006 [ 452.095251][T31144] RBP: 00007f97c7987090 R08: 0000000000000000 R09: 0000000000000000 [ 452.095266][T31144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 452.095335][T31144] R13: 0000000000000000 R14: 00007f97c9545fa0 R15: 00007ffcea3f8938 [ 452.095361][T31144] [ 452.375794][T31146] futex_wake_op: syz.0.6681 tries to shift op by -1; fix this program [ 453.196102][T31166] SELinux: syz.7.6689 (31166) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 453.355354][T31172] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6692'. [ 453.426649][T31172] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6692'. [ 453.581891][T31192] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6698'. [ 454.532441][T31223] SELinux: syz.0.6711 (31223) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 454.567394][T31226] bridge: RTM_NEWNEIGH with invalid ether address [ 454.992598][T31249] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6720'. [ 455.018023][T31249] tipc: Resetting bearer [ 455.030930][T31249] team0 (unregistering): left allmulticast mode [ 455.040495][T31249] bridge0: port 1(team0) entered disabled state [ 455.049854][T31249] tipc: Disabling bearer [ 455.084380][T31256] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6726'. [ 455.101819][T31256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.121228][T31256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.538153][T31285] syzkaller0: tun_chr_ioctl cmd 21731 [ 455.550989][T31285] syzkaller0: tun_chr_ioctl cmd 35111 [ 455.636809][T31286] lo speed is unknown, defaulting to 1000 [ 455.930224][T31296] SELinux: syz.2.6738 (31296) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 456.792259][T31319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.804111][ T29] kauditd_printk_skb: 413 callbacks suppressed [ 456.804133][ T29] audit: type=1400 audit(1750866299.665:19656): avc: denied { watch watch_reads } for pid=31340 comm="syz.0.6758" path="/165" dev="tmpfs" ino=884 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 456.809853][T31319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.812175][ T29] audit: type=1400 audit(1750866299.684:19657): avc: denied { read } for pid=31337 comm="syz.2.6757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 456.838596][T31343] cgroup: name respecified [ 456.871106][T31344] xt_hashlimit: max too large, truncated to 1048576 [ 456.899068][ T29] audit: type=1400 audit(1750866299.730:19658): avc: denied { setopt } for pid=31337 comm="syz.2.6757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 456.919743][ T29] audit: type=1326 audit(1750866299.749:19659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31318 comm="syz.7.6748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe6798e929 code=0x7ffc0000 [ 456.943624][ T29] audit: type=1326 audit(1750866299.749:19660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31318 comm="syz.7.6748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fbe6798e929 code=0x7ffc0000 [ 456.968791][ T29] audit: type=1326 audit(1750866299.749:19661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31318 comm="syz.7.6748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe6798e929 code=0x7ffc0000 [ 456.993069][ T29] audit: type=1326 audit(1750866299.749:19662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31318 comm="syz.7.6748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbe6798e929 code=0x7ffc0000 [ 457.018312][ T29] audit: type=1326 audit(1750866299.759:19663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31318 comm="syz.7.6748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe6798e929 code=0x7ffc0000 [ 457.043284][ T29] audit: type=1326 audit(1750866299.759:19664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31318 comm="syz.7.6748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbe6798e929 code=0x7ffc0000 [ 457.067776][ T29] audit: type=1326 audit(1750866299.759:19665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31318 comm="syz.7.6748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe6798e929 code=0x7ffc0000 [ 457.155812][T31355] netlink: 256 bytes leftover after parsing attributes in process `syz.0.6763'. [ 457.184641][T31349] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6761'. [ 457.325750][T31375] netlink: 'syz.0.6770': attribute type 11 has an invalid length. [ 457.540371][T31388] netlink: 3 bytes leftover after parsing attributes in process `syz.5.6776'. [ 457.552862][T31388] batadv1: entered promiscuous mode [ 457.558153][T31388] batadv1: entered allmulticast mode [ 457.569183][T31388] netlink: 3 bytes leftover after parsing attributes in process `syz.5.6776'. [ 457.582592][T31388] batadv2: entered promiscuous mode [ 457.587917][T31388] batadv2: entered allmulticast mode [ 457.617041][T31390] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6777'. [ 457.622943][ T3362] hid-generic 0000:0800:0001.0013: item fetching failed at offset 0/140 [ 457.640412][ T3362] hid-generic 0000:0800:0001.0013: probe with driver hid-generic failed with error -22 [ 457.707475][T31397] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 457.715120][T31397] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 457.729599][T31397] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 457.737274][T31397] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 457.875391][T31424] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31424 comm=syz.0.6792 [ 457.913883][T31429] syzkaller0: tun_chr_ioctl cmd 21731 [ 457.924774][T31429] syzkaller0: tun_chr_ioctl cmd 35111 [ 458.045529][T31417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.055563][T31417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.242667][T31456] SELinux: security_context_str_to_sid (=S|1rWiM!Oj4~1c3FfX50X2kcm?'wC) failed with errno=-22 [ 458.804739][T31479] SELinux: syz.7.6814 (31479) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 459.252433][T31488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.275383][T31488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.443459][T31501] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6820'. [ 459.543071][T31501] lo speed is unknown, defaulting to 1000 [ 459.695134][T31505] vhci_hcd: invalid port number 96 [ 459.700333][T31505] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 459.917179][T31517] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6826'. [ 460.043526][T31523] TCP: tcp_parse_options: Illegal window scaling value 24 > 14 received [ 460.520723][T31545] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6838'. [ 460.678879][T31540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.698880][T31539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.717314][T31540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.729766][T31539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.789414][T31556] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6843'. [ 460.803606][T31556] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6843'. [ 461.158547][T31573] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6849'. [ 461.353053][T31579] SELinux: syz.0.6852 (31579) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 462.398657][T31606] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6860'. [ 462.409309][ T29] kauditd_printk_skb: 733 callbacks suppressed [ 462.409325][ T29] audit: type=1400 audit(1750866304.913:20397): avc: denied { nlmsg_write } for pid=31607 comm="syz.9.6861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 462.586828][ T29] audit: type=1326 audit(1750866305.081:20398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31613 comm="syz.7.6863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe6798e929 code=0x7ffc0000 [ 462.612422][ T29] audit: type=1326 audit(1750866305.081:20399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31613 comm="syz.7.6863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe6798e929 code=0x7ffc0000 [ 462.637230][ T29] audit: type=1326 audit(1750866305.081:20400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31613 comm="syz.7.6863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fbe6798e929 code=0x7ffc0000 [ 462.662489][ T29] audit: type=1326 audit(1750866305.081:20401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31613 comm="syz.7.6863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe6798e929 code=0x7ffc0000 [ 462.688128][ T29] audit: type=1326 audit(1750866305.081:20402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31613 comm="syz.7.6863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fbe6798e929 code=0x7ffc0000 [ 462.712535][ T29] audit: type=1326 audit(1750866305.081:20403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31613 comm="syz.7.6863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe6798e929 code=0x7ffc0000 [ 462.738953][ T29] audit: type=1326 audit(1750866305.081:20404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31613 comm="syz.7.6863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe6798e929 code=0x7ffc0000 [ 462.764952][ T29] audit: type=1326 audit(1750866305.081:20405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31613 comm="syz.7.6863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbe6798e929 code=0x7ffc0000 [ 462.789360][ T29] audit: type=1326 audit(1750866305.081:20406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31613 comm="syz.7.6863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe6798e929 code=0x7ffc0000 [ 462.958246][T31621] C: renamed from team_slave_0 [ 462.982442][T31621] netlink: 'syz.7.6863': attribute type 3 has an invalid length. [ 462.990941][T31621] netlink: 152 bytes leftover after parsing attributes in process `syz.7.6863'. [ 463.000659][T31621] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 463.044728][T31617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.081033][T31617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.152739][T31625] SELinux: syz.5.6866 (31625) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 463.659651][T31631] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6868'. [ 463.684238][T31631] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6868'. [ 463.873145][T31637] Falling back ldisc for ptm0. [ 464.762290][T31673] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6885'. [ 464.800551][T31678] SELinux: syz.5.6887 (31678) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 464.841364][T31679] netlink: 14 bytes leftover after parsing attributes in process `syz.7.6885'. [ 466.114270][T31729] SELinux: syz.2.6903 (31729) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 466.274108][T31704] lo speed is unknown, defaulting to 1000 [ 466.579461][T31704] chnl_net:caif_netlink_parms(): no params data found [ 466.669739][T31757] xt_CT: You must specify a L4 protocol and not use inversions on it [ 466.695546][T31704] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.702763][T31704] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.717029][T31704] bridge_slave_0: entered allmulticast mode [ 466.723657][T31704] bridge_slave_0: entered promiscuous mode [ 466.758354][T31704] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.765592][T31704] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.772999][T31704] bridge_slave_1: entered allmulticast mode [ 466.779832][T31704] bridge_slave_1: entered promiscuous mode [ 466.823990][T31704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.859972][T31704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.926048][T31704] team0: Port device team_slave_0 added [ 466.935911][T31704] team0: Port device team_slave_1 added [ 466.968133][T31704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.975215][T31704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.001448][T31704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 467.070065][T31704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 467.077089][T31704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.103359][T31704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 467.173051][T31704] hsr_slave_0: entered promiscuous mode [ 467.179869][T31704] hsr_slave_1: entered promiscuous mode [ 467.185878][T31704] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 467.207689][T31704] Cannot create hsr debugfs directory [ 467.553784][T31704] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 467.570950][T31704] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 467.592861][T31704] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 467.613055][T31704] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 467.645220][ T3293] ================================================================== [ 467.653535][ T3293] BUG: KCSAN: data-race in virtqueue_disable_cb / virtqueue_disable_cb [ 467.661813][ T3293] [ 467.664146][ T3293] write to 0xffff888102c70e78 of 2 bytes by interrupt on cpu 0: [ 467.671876][ T3293] virtqueue_disable_cb+0x7a/0x150 [ 467.677012][ T3293] skb_xmit_done+0x65/0x140 [ 467.681541][ T3293] vring_interrupt+0x155/0x180 [ 467.686340][ T3293] __handle_irq_event_percpu+0x90/0x440 [ 467.691941][ T3293] handle_irq_event+0x64/0xf0 [ 467.696798][ T3293] handle_edge_irq+0x188/0x4f0 [ 467.701770][ T3293] __common_interrupt+0x63/0x100 [ 467.707219][ T3293] common_interrupt+0x7e/0x90 [ 467.712618][ T3293] asm_common_interrupt+0x26/0x40 [ 467.718140][ T3293] __sanitizer_cov_trace_const_cmp8+0x37/0x90 [ 467.724756][ T3293] unmap_page_range+0xe6f/0x2740 [ 467.729919][ T3293] unmap_vmas+0x23d/0x3a0 [ 467.735060][ T3293] exit_mmap+0x1b0/0x6c0 [ 467.740038][ T3293] __mmput+0x28/0x1c0 [ 467.744664][ T3293] mmput+0x40/0x50 [ 467.748405][ T3293] exit_mm+0xe4/0x190 [ 467.752862][ T3293] do_exit+0x417/0x1590 [ 467.757380][ T3293] do_group_exit+0xff/0x140 [ 467.762182][ T3293] get_signal+0xe59/0xf70 [ 467.766547][ T3293] arch_do_signal_or_restart+0x96/0x480 [ 467.772115][ T3293] exit_to_user_mode_loop+0x7a/0x100 [ 467.777500][ T3293] do_syscall_64+0x1d6/0x200 [ 467.782268][ T3293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.788189][ T3293] [ 467.790522][ T3293] read to 0xffff888102c70e78 of 2 bytes by task 3293 on cpu 1: [ 467.798079][ T3293] virtqueue_disable_cb+0x58/0x150 [ 467.803298][ T3293] start_xmit+0x102/0x12c0 [ 467.807930][ T3293] dev_hard_start_xmit+0x122/0x3e0 [ 467.813083][ T3293] sch_direct_xmit+0x192/0x550 [ 467.818138][ T3293] __dev_queue_xmit+0xe4f/0x1fb0 [ 467.823976][ T3293] ip_finish_output2+0x77f/0x8b0 [ 467.828934][ T3293] ip_finish_output+0x112/0x290 [ 467.833803][ T3293] ip_output+0xad/0x170 [ 467.838002][ T3293] __ip_queue_xmit+0xb25/0xb40 [ 467.842794][ T3293] ip_queue_xmit+0x39/0x50 [ 467.847232][ T3293] __tcp_transmit_skb+0x1641/0x1a60 [ 467.852440][ T3293] tcp_write_xmit+0x1210/0x2fd0 [ 467.857328][ T3293] __tcp_push_pending_frames+0x6d/0x1b0 [ 467.862899][ T3293] tcp_push+0x311/0x330 [ 467.867071][ T3293] tcp_sendmsg_locked+0x2510/0x2cc0 [ 467.872379][ T3293] tcp_sendmsg+0x2f/0x50 [ 467.876645][ T3293] inet_sendmsg+0x76/0xd0 [ 467.880981][ T3293] __sock_sendmsg+0x102/0x180 [ 467.885677][ T3293] sock_write_iter+0x165/0x1b0 [ 467.890453][ T3293] vfs_write+0x49d/0x8e0 [ 467.894975][ T3293] ksys_write+0xda/0x1a0 [ 467.899247][ T3293] __x64_sys_write+0x40/0x50 [ 467.903862][ T3293] x64_sys_call+0x2cdd/0x2fb0 [ 467.908663][ T3293] do_syscall_64+0xd2/0x200 [ 467.913201][ T3293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.919152][ T3293] [ 467.921486][ T3293] value changed: 0x0000 -> 0x0001 [ 467.926796][ T3293] [ 467.929150][ T3293] Reported by Kernel Concurrency Sanitizer on: [ 467.935320][ T3293] CPU: 1 UID: 0 PID: 3293 Comm: syz-executor Tainted: G W 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(voluntary) [ 467.949518][ T3293] Tainted: [W]=WARN [ 467.953335][ T3293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 467.963487][ T3293] ================================================================== [ 467.982388][T31704] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.989546][T31704] bridge0: port 2(bridge_slave_1) entered forwarding state [ 468.036650][T31704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.050638][T31704] 8021q: adding VLAN 0 to HW filter on device team0 [ 468.101222][T14526] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.108541][T14526] bridge0: port 1(bridge_slave_0) entered forwarding state SYZFAIL: failed to send rpc fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe) [ 468.204366][T31704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 468.219243][ T29] kauditd_printk_skb: 272 callbacks suppressed [ 468.219261][ T29] audit: type=1400 audit(1750866310.357:20679): avc: denied { write } for pid=3293 comm="syz-executor" path="pipe:[799]" dev="pipefs" ino=799 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1