last executing test programs: 7m19.607900366s ago: executing program 32 (id=61): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r6], 0x1c}}, 0x0) write$nci(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="40020402b06160"], 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15170000bcb7040008000a00", @ANYRES32=r1, @ANYBLOB="140012800c0001006d6163767461700004000280080005"], 0x44}, 0x1, 0x0, 0x0, 0x240448c5}, 0x8000002) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x18) socket$unix(0x1, 0x1, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r13, {0xd, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@TCA_STAB={0x0, 0x8, 0x0, 0x1, [{{0x0, 0x1, {0x8, 0xe6, 0xfffb, 0xd, 0x2, 0xfffff452, 0xd}}}, {{0x0, 0x1, {0x2, 0xb, 0x9, 0xd9, 0x2, 0x5, 0x1ff}}, {0x0, 0x2, [0x3]}}, {{0x0, 0x1, {0x3, 0x2e, 0x1, 0x1, 0x2, 0x7, 0xb3b}}, {0x0, 0x2, [0x4, 0x73b4, 0x4, 0x2, 0x8000, 0x5, 0x2]}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r14) ioctl$SIOCSIFHWADDR(r14, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r13, {0x0, 0x3}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x3, 0xfffffffc, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x26da, 0x3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) socket$kcm(0x11, 0x3, 0x0) 5m22.443739441s ago: executing program 33 (id=2129): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r0, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0], 0x0, 0x48, &(0x7f00000005c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0xfb, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d000", @ANYRES16=r4, @ANYBLOB="01002bbd7000fcdbdf2510"], 0xd0}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket(0x2, 0x80805, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000009000000000000000000000905000700000000000000000e0100000000000000000000000000000d0200000007000000000000120500000006000000000000100c0000000000000000002e5f00"], 0x0, 0x61}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0x2, 0x4fd, &(0x7f0000000b00)="$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") r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r5}, 0x10) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) writev(r6, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x69000}], 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2000, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff00000001, 0x1ff}, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r7, 0x0) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000200)) perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x307, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x7, 0x0, 0x7, 0x4, 0x400008, 0x8000, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, r7, 0x3) 5m22.2573014s ago: executing program 34 (id=2137): r0 = io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0xb140, 0x1000, 0x6, 0x196}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x5) close_range(r0, 0xffffffffffffffff, 0x0) 5m19.94820143s ago: executing program 35 (id=2168): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a00000002000000ff0f0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000000142c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0600ff"], 0x0) 4m39.251783093s ago: executing program 36 (id=2591): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x47, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x141000, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x1, 0x40000333}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)=""/195, 0xc3}], 0x1, 0x0, 0x1}) io_uring_enter(r2, 0x847ba, 0x2000, 0xe, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) syz_io_uring_setup(0x3e, &(0x7f0000000640)={0x0, 0xaddc, 0x10100, 0x1, 0x203}, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)) socket(0x1e, 0x4, 0x0) socket(0x1e, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000180)=0xffffffffffffffff, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2}, 0x48) 4m11.43601536s ago: executing program 5 (id=3394): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r2, 0x2007ffc) 4m11.402133953s ago: executing program 5 (id=3396): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x80}, 0x1, 0x0, 0x0, 0x28004004}, 0x4000001) r1 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x1, 0x3, 0x3, 0x4a}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) close(r1) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000240)={0x2, r0, 'id0\x00'}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x201, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x10000, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000440)={0x6, 0x80, 0x0, 0x0, 0xf8, 0xfa, 0x0, 0x0, 0x52024, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff00000001, 0x1ff}, 0x0, 0x6, 0xffffffff, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x30, 0x0, &(0x7f0000000440)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000640)={'gretap0\x00', 0x0, 0x80, 0x8, 0x6d0b76db, 0xe8, {{0x10, 0x4, 0x1, 0x12, 0x40, 0x68, 0x0, 0x6, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x1c, 0xf2, 0x0, 0x7, [0x120, 0x9, 0x2, 0xf, 0x4, 0x0]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0xa, 0x0, [{0x7, 0x4, 'rz'}]}]}}}}}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800200007000000000000000000000095000000800000008914ff68cb1a8e8ac59f38cd69465598da34b3804e12b275deed829dd810790edd610c7d6561ccb7bccd839f9400a3ce749d4f84b03a1a5beef82440acbd254c7121adf80512f6a1b3010000006815496cda20eb150d183f157b2f12063f5de788760d0761b1334c0fc51c"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r5}, 0x18) r6 = socket$inet(0x2, 0x3, 0xd) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x7, 0x0, 0x0, 0xfffffffb}]}) getsockopt$inet_mreqsrc(r6, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000280)={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0x1, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae", 0x100, 0x0, 0x0, 0x4}, 0x3c) recvfrom$inet(r3, &(0x7f0000000780)=""/255, 0xff, 0x40032000, &(0x7f0000000700)={0x2, 0x4e22, @loopback}, 0x10) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x200000, 0x0) memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) 4m11.348356539s ago: executing program 5 (id=3401): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000003e7400850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x1ff, 0x20000000, 0xc, 0x6}, 0x7f, 0x5}, [{0x2a9, 0x6, 0x810, 0x4, 0x5}, {0x4a7, 0x1ff, 0x4, 0x1, 0x7, 0xdd}, {0x9, 0x7, 0x3ff, 0x97, 0xfffffffd, 0x4}, {0x8, 0x0, 0x6, 0x2, 0x7fff, 0x3}, {0x4f9a, 0x5, 0x1, 0x1, 0x2, 0x8}, {0x0, 0x5, 0x1437, 0x1, 0xee57, 0xd}, {0x77d, 0x6, 0x9, 0x6, 0x8, 0x1}, {0x5, 0x6, 0x0, 0x2, 0x1, 0x7fff}, {0x0, 0x3, 0x4235da1, 0x9, 0x7ec9, 0x8}, {0x10000, 0x2, 0x0, 0x1, 0x6, 0x9}, {0xd, 0xffff0001, 0x0, 0x6, 0x81, 0x4}, {0xfffffffc, 0x4, 0xffff, 0x2, 0xffffffff, 0xfffffffa}, {0x5, 0xd29, 0x101, 0x3, 0x7, 0xc}, {0x0, 0xfffffff7, 0x1, 0x72b2, 0xc874, 0x3}, {0x3, 0xf, 0x5, 0x1, 0x1ff, 0x6}, {0x9b9b, 0xffff, 0x6, 0xb, 0xb3d, 0x812}, {0x5, 0x7, 0x2, 0x5, 0x5, 0x4}, {0x6, 0x0, 0x9, 0x2, 0x82, 0x2}, {0xfffffff7, 0x6, 0x2, 0x9, 0xff}, {0x4, 0x1, 0x371, 0x8, 0x0, 0xeac}, {0x9, 0x2, 0xd77, 0x8, 0x113, 0x8d3f}, {0x7, 0xffffffff, 0x4, 0x92a4, 0x9, 0x10}, {0x1a4a13f0, 0x4, 0xe, 0x3, 0xad47, 0xf83b}, {0x1ff, 0x5, 0x7, 0xfff, 0x9}, {0x100, 0x4, 0x200, 0x9, 0x1, 0x9df}, {0x9, 0x1, 0x65, 0x9, 0x7}, {0x401, 0x10001, 0x9, 0x200, 0x9, 0x1}, {0x6, 0x10, 0xf, 0x2, 0x6, 0x3}, {0xf23, 0x3ff, 0x0, 0x9, 0xfffffffc}, {0x80000000, 0x6, 0x0, 0x6, 0x6, 0xd}, {0x0, 0x9, 0xd, 0x8000, 0x3, 0x2}, {0x800, 0x9, 0x6, 0x3, 0x7, 0x8}, {0x7, 0x8, 0x7358, 0x7, 0x8, 0xffffffff}, {0x4d9, 0x45db8bad, 0xb3dd, 0x1, 0xbc, 0x7ff}, {0x7, 0x1, 0x3, 0x3, 0x3, 0x7a}, {0x5a1b, 0x1, 0x1, 0x7ff, 0x3, 0x4}, {0x3, 0x7, 0x4, 0x4, 0x1c716ddc, 0x8}, {0xffffffa5, 0x7, 0x0, 0x10, 0x3, 0x5}, {0x8219, 0x0, 0x1000002, 0x6, 0x3, 0x2}, {0x62, 0xf4, 0x5, 0x4, 0x4, 0x67}, {0x5, 0x4, 0x53, 0x8, 0xc0000000, 0x7}, {0x2, 0x5, 0x2, 0xffff, 0x2, 0x2}, {0x80000001, 0x94c, 0x6, 0xfffffe00, 0x5, 0x7b27}, {0x2, 0x6, 0x1000, 0x9, 0x9}, {0xa, 0x0, 0x9, 0x4, 0xe, 0x9}, {0xdf, 0x7fff, 0x8000, 0x81, 0xff, 0xfffffff8}, {0x2, 0x10000, 0x9, 0x2, 0x2}, {0x2, 0x6, 0x9, 0x1, 0x2, 0x40}, {0xfffffe00, 0x3, 0x74d2, 0x3, 0x80000001, 0x6}, {0x2, 0x8, 0xfffffff7, 0x1, 0x6, 0xa}, {0x8, 0x9, 0x8e, 0x80000000, 0x10001, 0x22cb}, {0x2, 0x31f5, 0x7, 0x5, 0x7fffffff, 0x1}, {0x9, 0x10001, 0x4, 0x8, 0x7, 0x9}, {0xb, 0x201, 0xb, 0x3, 0x5, 0x80000001}, {0x7, 0x80, 0x69b, 0x3, 0x8, 0x339}, {0xee, 0x80000000, 0xfba6, 0x101, 0x5, 0xb}, {0x3, 0x458, 0x6, 0xf, 0x7, 0x8000}, {0x9, 0xfffffffa, 0x1000, 0x8, 0xb, 0xce5a}, {0x400, 0xffff, 0x3, 0xbcbb, 0x7, 0xb}, {0x0, 0x7fffffff, 0x8, 0x8, 0x2, 0x1}, {0x1, 0x0, 0x3, 0x9, 0x0, 0x401}, {0xd, 0x1, 0x2, 0xf, 0x81, 0x5}, {0x6, 0xfff, 0x5, 0x5, 0x4, 0x3649}, {0x7, 0x2, 0x80000000, 0x9, 0x1630, 0x9e73}, {0xb, 0x1b6, 0xc4, 0x7, 0x4, 0xca}, {0x4, 0x5, 0x401, 0x4, 0xfffffff8, 0x40}, {0x8, 0x4594, 0x8, 0x4, 0x0, 0xffff}, {0x100, 0xfffffffb, 0x6, 0x0, 0x9, 0x6}, {0x3, 0xf7b, 0x3, 0x8, 0x6, 0x3}, {0x1, 0x5, 0x3, 0xab9, 0x7, 0x9}, {0xffffffff, 0x0, 0xfc, 0x7, 0x6, 0xc}, {0xf, 0x1, 0xa000000, 0x1, 0x101, 0x1f3}, {0x7ff, 0x9, 0xfffff001, 0x8001, 0x2, 0x2}, {0x4, 0xd9, 0x6, 0x1, 0x9, 0xfffffff8}, {0x3, 0x3, 0x7, 0x9, 0x10, 0x1}, {0x8f000000, 0x100, 0xffffffff, 0x963, 0x2, 0xc}, {0x6, 0x50, 0x6, 0xa, 0x0, 0x3}, {0x649, 0x2, 0x80000001, 0x8, 0x0, 0x1}, {0x8, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x4}, {0xa3, 0x81, 0x9fcb, 0x1, 0x8, 0x7fff}, {0x0, 0x2, 0x750c, 0x0, 0x1, 0xfffffffc}, {0x7ff, 0x7, 0x10000, 0x9, 0x0, 0x88}, {0x5, 0x10001, 0x7fff, 0x81, 0xfffffff4, 0x7}, {0xfce, 0x80000001, 0x5, 0x4, 0x1ff}, {0x3, 0x3, 0x3ff, 0x7fffffff, 0x9, 0x7}, {0xdac, 0x0, 0x4, 0x80000001, 0x3, 0x8}, {0x7, 0xffffffff, 0x6, 0x8, 0x80000001, 0xa}, {0x2, 0x4, 0x4, 0x401, 0xe32}, {0x5, 0x7, 0x6, 0x8, 0x2, 0x2}, {0x10001, 0x100, 0x3, 0x4, 0x9, 0xfffffffa}, {0x2, 0x0, 0x3, 0x6, 0x800, 0x3}, {0x0, 0x0, 0x3, 0x8, 0x1, 0x3}, {0x3, 0x3, 0xffffffff, 0x3, 0x800, 0xde}, {0x5, 0x66, 0x41d0, 0x8001, 0x1, 0x3}, {0x5, 0x7, 0xfffffffc, 0x4, 0x3, 0x92c}, {0x4, 0xffff, 0x0, 0x101, 0x4, 0x1}, {0x9, 0xf667, 0x5, 0x3, 0x5, 0x4}, {0x1731, 0xa, 0x9960, 0x9, 0x1, 0x7}, {0xd, 0xfffffffa, 0x1, 0x800003, 0x40, 0x2}, {0x1, 0x4, 0x80000000, 0x80000001, 0x2, 0x6}, {0x7, 0x2, 0xffffff3a, 0x4cf, 0x800, 0x6}, {0x8000, 0x6, 0x1, 0x0, 0x100, 0x80000000}, {0x3b, 0x5562334a, 0x2, 0x2, 0x6, 0x81}, {0x4, 0x96, 0x81, 0x0, 0x101, 0xa}, {0x4, 0xff, 0x9, 0x0, 0x81, 0x29}, {0xa, 0x5, 0x0, 0x9, 0xffffffff, 0xfb4}, {0x80000000, 0x2, 0xffff, 0x39b4, 0x1, 0x6}, {0x61, 0x2d, 0x6, 0x1fe4c5d2, 0x1, 0x3}, {0x1, 0xe2, 0x7ff, 0x7ff, 0x7f, 0x29d0}, {0x0, 0x4, 0xc, 0xd594, 0x9, 0x7}, {0x6, 0x0, 0x7, 0x9, 0x7, 0x9}, {0x80e9, 0x7, 0x9, 0x1, 0x1, 0x18000}, {0x400, 0x9, 0x0, 0x6f}, {0x2, 0x1, 0x6, 0x3, 0xfffff71b, 0xce}, {0x1, 0xff, 0xb, 0x4, 0x800, 0x1}, {0x6, 0x2, 0x8, 0xfff, 0x4, 0x7fff}, {0x0, 0x0, 0x7f, 0x401, 0x7, 0x7fff}, {0x7, 0xb, 0x10000, 0x1, 0x8000, 0xfffff830}, {0x2, 0x4, 0x2, 0x1, 0x6, 0x2b4}, {0x3cd2dbce, 0x929a, 0x9dc, 0x0, 0x8, 0xfffffffc}, {0x6, 0x0, 0xe71, 0xc5c3, 0x3, 0x1}, {0x7, 0x2, 0x197a, 0x7, 0x1, 0x8}, {0xff, 0x2c, 0xfffffc01, 0x1, 0x3, 0x100}, {0x0, 0x6, 0x10001, 0xce7, 0xec, 0x1000}, {0xffffffff, 0x6, 0xffffffff, 0x9, 0x2, 0x6}, {0xfa, 0x9, 0xbf1d, 0x9, 0x80, 0x5}, {0x1c91, 0x5f27, 0x1, 0x0, 0x6, 0x6}, {0x37, 0x622, 0x2, 0x1, 0x7, 0x2}], [{0x5}, {0xccffbfc290ab3baa}, {}, {0x2}, {0x2}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x4}, {0x5}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0xed3229170eca159, 0x1}, {0x2, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x7, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x54e1b160e6ec45e8, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x2}, {}, {0x2}, {0x5, 0x1}, {0x4}, {0x2}, {0x9baeccaf277094c4, 0x1}, {}, {0x2, 0x1}, {}, {}, {0x8f9fc2e2ef57f2f0}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xb}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x81}, 0x800) 4m11.293578144s ago: executing program 5 (id=3405): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x20048a, &(0x7f00000001c0)={[{@grpjquota}, {@noinit_itable}, {@abort}, {@bsdgroups}]}, 0x12, 0x51a, &(0x7f0000001200)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000001c0)=@keyring) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001740)=ANY=[@ANYBLOB="000000004c900200070000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000007000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000000100000000000000fcfffffffffffffe00000000000000000000000000004000"/318]) socket(0x1, 0x80802, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SG_BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) 4m11.215951682s ago: executing program 5 (id=3408): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18) r2 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000440)={&(0x7f0000000000)=@llc={0x1a, 0x338, 0x5, 0x8, 0x2, 0xff}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000200)="110e9591a566ea3355f56f99f8377867898a24f75a3e5133fed7e0077920361d229af6eb48b767b77f4877f2aa483dfbb5bda31bdac46b555019ba8f131059e5cea3efd66464cb81c440160facce64779f6762c93175ac885027cfeebe3dcb1bd4f7a585e8b375761c4bb468238418cf1800b35c1340670e4ab0ac7640365b0cf205475af984e2a26b4861271df0ad08e52640164609411664dba4e33969863f45865a996c50b27a932880856b1e4d18c01a1c58248e9e22f1bbfca98267c5bb94dcc4d68c59da82a3a81cdfc8600ec88514f6c778405a888cff04", 0xdb}, {&(0x7f0000000300)="56d4b878c9609d1c2d4a4bb295d75de5df46859eb6b8a0c299b1269dc086fbc3ec8324647eee71698249c9e173ac44c5cbeca6eb869ce49eea07b2f7d95f5df9cf1c39d42a0833529a590d9528f68f6e91e6d0bf0c07aa4bc7d41d912641f79125e1a9613912da157e6dd41bdfa1c198a7be89f4ad753a22c0720923ade0e8206f810be8ba2ed4a0dd667af571fffc2cc4fa1a79783af6256aa89c72b38767f6be463454e07a7cb9ab88dfe51f4466", 0xaf}, {&(0x7f0000000100)="3919f38379bc277d2b27dc2b31961bf2d9c31c06befb6ca69dd4e17c05150b12e8b5ddc7e92b1422dfdf8bdac2449b9681d14981095ecf4ec706b8d60e9facb88e72efc0e9b2701f9ed9fc1eb9b30d00215dd5f1eacdedff8d731a111dfd6597e318de2e5f4637a1dba1e704", 0x6c}, {&(0x7f00000003c0)="8cfae49925d8ef8c982271eeb9ff92854de0ce674a5221e56b740cfdac50cd2e547412f976ff23c2561d6000b7aa0bf7eaeac1fe24deac7e6a150fcba68e2b42010d5fb656cc1f3540db296e969b180bca99a398e31b943d764e80caad6b9974b9cc1e8653db24", 0x67}, {&(0x7f00000004c0)="78bca6176087f80b2fe0156d26d3db3e5bfdea1f3349e7941064c0f25eddeaf013645ecfa5f27403d770bb3fe70efca199753254bf72ce0f29ef58e8453decbd413789f9960dba593c8c4e7b6b84bccd6dc2a0bad030e00a8e3ac67a5ea2316e9348ae5edb13b496", 0x68}, {&(0x7f0000001800)="c1706c1aff747df80c6aac9ebdd5cce844cb55dc680001190e67bbf22762731cfb2ce352db3257547aa43daa1d3db24a7f11c0caca5b2652228ab827a7163cbeb476117e531e1a7021c54e192aa4a5f3a32da3891391ecc50d5e96b4686ada71b759ac4f552292736601dfb063b4229c400bf6ca1caae6288b6d72c79fc318571865d05bdd9caf695a889c2f2e18920a4d9ddd0758c22d0e7236851aa553bb6bf1c62c080c41d81aa0e77dc1cc36371367087fe17167528c58b01919a6a1180f0bba32fb7b16545ceff5869bd53ce94ad1be55e318803b36cbfc7efcc3bd9e2a7aa8b8460f6b2220aa691718a3146a61ee58d2ffb23f6cbfcc7ecb4a5982c930ece5063ea3221aafa41d21480977b0a9156df94c001fb8e3860cd6e5b7b15946a46c498004442c33b02a5a95b64368311767d38126bdaf5c6a86b7265ffb059b769434a0aa5535e997be203af8f098461c84c5d9850cf52910cd7ddc8b1a658ea6144c41620fafa6781a5fb8113e5cc43fa4593ac27033af71cb98c2c941e281e378acd26b03ae23c8f2fa6cac39e9f046a5fef3cccc55aefcdfd67cfe9663e42b33085214556e7edca18bfa2d9ec9ba8fb31c49680cf9822598d16882cb5b16c0e57295f03c0ee0b89ab126795df7e52f41fa0d24e9adf075fbc0203f6e2004df0e34a364e22ea7d03fb54b1a4910794fd0bd20bfcc123981316123488429d787c233115aaf298bf21665605bbe43bb8ec9cff7510881ea549791251f7932ef91246a9be575510da3f9dbe60ea709428ce25907c23cce26c9bde4b3d14391e39c9c24a1eee95e692d9a66c1b499c17ffa18c5a234f20394c4ab73b76f264c5ab7889ec44e03050193bc6c3bb25702aa5afbf1b4426329be0d340d861a845a57f123f6356d19c5ad54af76b5007b8c6192a442772e9256d1ad801aa183e9f79e6658245112e73d76734af80121a38a0711cebc1ce3001b7bdd7355f365081080143b03726bfa805f830548351ca4689b21b7af8f3fd765994e2a6251ea91b4104b009dd8aad3520778112bee38d2786ea2bd158c6692f1a1de555a5a9ed6b4013f7bd8ca6297e6b221fef32e5a809891e007a3a478ac3c813c0c300c0273ce4f75c1c54b0ea56570e0da33666209c403aee707821c21ac1d0922f59ea3acd284eb44296973e45c788fe0d688c83ca4803c6e9bd6e05ba92be8f8e5c0437dcaae65015668c54ea2a8b1e6f37c2f20cf62c7b0d59fe406e68b0e6aa224ec0c9ea716a47bf5f96e97d9e867c9c3ca82b672bec4a41df31c762f330bd5d6b0061602f6c644edcc647cee8fceba13911b2f13222c32aa5e07104d44f127841b8632311b5e101e2b93a694963d2b6731c1cd4f256e76c5e29faaf22b1cc81276ff254b14ce891b92edfa2d8c48960f8ad481fbb649f36aa4ff824ee64f8d29859bb6a4a1aa0f29e2d410ce42695088f9679143b55cc441d65b1a0c4af36775fab5965877529c93e1868cf41ced32a96afa58fd906fcee934bb95da6ca0fb72d4830ea312e28a6c644ac87c5cbe6d10e7b4262154a864e935851ddeaaf0041f0df2142c427080f58609e69b414e59407e8639597835f8a8714639f63f430c13f562106187314bba1435138a85ea50b1ccf54e2a8a6fab3e31c8946097cd1b9a065c66530fe36593065186a3c99acc8a707286111bbb6978dfd0f8409903862939de75e69cc0f180ad6309a409b12cdadc1e308d2c0d1353825551b3c8a3c345eb8c19be721ca4e3dfa74dfea1a1d1c98d0361b8ef5645b7aee9bfa7ada6e919f88272e854da9b0551e176f699df51afcd0fa2c8735dc7f329fd50ee41975cb59009e8a67fb8ce303c57bb9e119328841a6251b70f26e1dc6a4720db1f7f3f1d3b1e0aa4fd2d4779bd87c30eec978f33444df1b060286ff0fe56eba6d2b7190be69cb5669c2c73c6801c373fdc9d1e5e9fa583f434e515f8a2c38b22a8715a5bb44cd5ae1a3d80074ed6b719d173a96e1db965be488fb467dbc0531dac7a88f45e9e7a396eb4d91f228e4023416d56e3d7abdca2c2aab945eeaf7c6e9caf5a10083a21eb1272242ec78178aa278d7fb54909413d97715fd58794ef180facd519e77ac64732a8020dc1192f3a1b91668ec8a2ffd8831639970055d6800a777882cfa406577e3443121b2ad84e7667ba7b35289594148784f90d622fbbe7c1636c350040be26847cf386d092e62b6dff8e775d580e14f57eb1cfe749e6bad9a59f8340ae6586984274ca6575ad23b68ecaf1bd1ac0edf198ec783fd5a95e7ac114cffbf2925b705152c50e242d10223f127378df6bc2616e4a229b2882324413191335fdfa46d179f77f2fb8a710da1bc5550d4a661ee926b4c2e4b123b9cce67ef12b5d78a1d3fb18b2a43cafdb198a70a884bfcee2d39d0fa4406ceb14458c63d5ebd81f1342a0404fd54bbebcf5f0d996419499200b1a95740078b8ed33a17517596ac96fe22c740a9b1e74025f5da20f35a550b7dde734d5567ac607372c6deb2ef50ebbe8aa40e886f9a01bd601e8f555b52112e8ac23e2146b7152fc91f35aab0e32550608325c1607386c149b3f8b668e6dcb3ad7ff48d8845a89efb2eb1b901bca2ab8d95d581ce6eb888ca232a2e4f89dbccc50f05e890d23540ccf864c64a56f9b88f6eaceef356f89af298f2472c365ef22637b4f15fc66c56cd8cf1b5c1e5e239191aaa1dd393a155ac82e7b65ed0d2128ade43ea00ad72750f856e360b148946662e33c85f39dba48002acce2dcbda010c4f96f9d4a0e66f525710c5eeb5cfb569a1e2bdb7f498833a42c0859df0c05283a4303daf8f3301751a4266cf0aed6a112696b2b1a4a2b96a2be2f7d18b258234a07345eb8caee8b54bb40896f130590fd09c3167abb345e1b0318c8d1b7b8752e98ef65f4954f75e60a231640c894371674a55bbe92ffd1b2dbfc9be9a5a4b5db8fc64b2e16e4422d82ba51adc016ce47991878129fecf07d7a8d1a689ee16450dab32f9df062000e71d6a83b77d100de6c1a36d8838b0e8805aee2f9baf62081044dfdaa1d30ec1c5f8f6431eae96c15ea4ce2fc28d3c4fb4f2c746a3354a2426191ebc4f313baf94c6e29ca73a5649c7749b34d2d8db51aea13fe219e392c53db23112f51187c5dd026be75372ef262890894cb5a31a60798eaebc9aebe69a0bdb9545eb18e9c4cb861065326de7e1fba72bb8208ce4bdca7b270d20f98fd55d54d1d4fd316111594ea8cf5b986543cfcab710d94e479fbfc3f005752e7a29fa1492f028e01c1c1f0eff0e7e4f959b57e6e3b23b18b404f7d4cb7af61d4aecc8b741e13abc6a147ca3567655988d029e62be4c0317641e43cb85fa2649efd021def933e1ad7195e68a9822824878ba43860acd0b8c663e903c78cc94e5f7e23c08085a82a801c01e2b0bd154ec0fe52de1a54361732cb2ca8c51dd2fc25c16b5ec2d03c851786b016e0483f95ec2eff9b7d77d64d7fb6ed9b3067c7863ff654fa0156d7a13a5d3b664eb96dbc272f1621ca5981b901410b8142ea24655a926eb29f05fa91c7097523f4084aed3f4f14419af38e730b56cac81d4e13754e8b635e5a7d92a959c6a2c00764b86675fae0915b40ba091c173ce277c64a95c94a4eab9af67f748909eb075a2b5d53a882c1ca7dc9798bc2a5edca4acefded0d349cb858662e53c8dde575e93c668502e71838b78f683f42696077474d1abd7dd2d85e44e4afaebccafd25c52873a7f49b07c534694e7378f21d76317a3ae199b624939e5541202ead6d0c1a08555d8576f2c91b3e18a7fc33f8fe7e9a62b9049b8e192a496b1b5a5f4ee6fa72dee9cb6c5a84d6d46f297694013d3148e720f93c08b2ca1b67384d8e28c4446cdf99861d626f30d9da62afc262ea49487464dca834631f7576b1a51ea09ae673d50ed1707cba949b2dce56c358a2975f3b9f8f81b1a52c5fe6a22e05a239f2e8c2b9d9eb03ac12a8ab205e73b1b6be2903f193c9d603a38b91d3867ae763a0ecfe79882cd356406651b01a91a1d5f324d91bbc493f7b1fdb7a07270f5d4fd09df4db6b2def0f74db6ffc9ea58497e5bc4cfe8358bc655506637e5158fd4a043d07a012b9cf84cf51789428b7c73c251d7b5a4a943c51f536f84f353ae30c67185f343b4e3492cec107cd607d2ab9c3c969290c520167e72feadf4843fd2e65e3f3eb892e81b9feea7ae15d3e9c06459cd77ce7ce8a4a1715ee4643d4fdaac05a6c6fac9d74685f9ad32e9c3692ef500ebb3f17aadee2f5d8035a7fb1a513a75e9734632f874eb8558da87dd2c666b8b970facf3ccf3e8ad121445406da38ebd6f427cd8f1c2e1d03ac66591ba1d3a0b96e01af2ee50402e949e57d9ada006f2ce52a21aaeaa05c2444931591fb2a4dc551590bf6df725c3af819b990b496de3e11196bd18ada6eae4e865df2d77a9de4134267cf8b4a8c0684c8c341658cfc9e23c2f963ea18a510107f968e3a74114ed3d1ea60656a7b4fc6029d14bf2168827124dc0b5fba1a6ec1bbf522042dda65056c69d8078df8fd14cfaa45f214f6294f6c10258ab9f64f6f2c48a8ba457b80a170be628cc69dad9936ac5a63622fb944cc17ee94beb465896739604b2e24fa3c0625d13012bea1bb02dc0a43acf8a56c40b50974fa210e80ff8d77af23ad0a179bd0f148b1982370e708cbb9c0d897a23c672ac0a613fafb97d955440b81d2f7ed64d542e749853bfaf481dfe5408052f51f129d16dedd4bf9a8e0842348e391c2d3550d0916d3d6eab1b52ce29d22d323c988b0740d89094fdc12334cf61adda09a1c76b73955507c8b002bca625f9dec2d6b7b9df23727e33b75f724b5ff90b78bcf678ea337e396f97df1da6110c85bfdbeb7a5d0cc00e1943fe9b345419e2e6d1c867e959576e9ca5272d5cbcf40719958e77c6968fab3752fddd8d14228d2c5cc8ae0bf59cec08445f3be828220b32a8de65c181642c2ee73978980aa138e60543f89f4adb5bea11c6cb347832e77555a63ffd4c56e1b8007c4067561cf7993b7705c2a0bedc9438ba51507a1f6a1ca52aa469c1205ce26a4d2ff5daf13890af174d7bb02413e6cd7ff0466ed41a38ad83ea1821db4d731867130f3fbbf6aa0fef593efe137caaa4df32c82df18f4f15aa4c65fa47c53bd781be49b0e1da35f98c73b452ece5d55b64b1e23ea42aa30b74b94bae5bcaa982cd4cc83d1614d1a13707e873c1da47e167566519b29b2617570c4b2e8caf827f5a73ea0b269d351dd3013e0c8e5ba7249d6c7f1575a09fff8f6f52ce41bd3dba2cd0fb9de12a84025a27482ee30bdf4dabcd977f5042136afe52ff0d0d8644fbeb9050d55530a1490f761acde18dfd6ad95ff0cf1cff099bf0e59f8b668aae1a64947184df098505ce85cfce8951960731cba30c5cedf9e1d7066ab9a383572fdd02195a812b404561848f43549b2288a0702b8a17b2b779eaf283d45697a9eb80624ffa2f46774bbebfc423d2090e1743269d65f3c757314f916a16fe1c5425a70a1379a7be8e53a0c3ce9d08c851f7639f47c3d4b84cd203fda3541c6a7b399c2ccf11ad8a680729f941af6dfb02c7811144cd6c7815fb82a4e5bd336c584033abe4ae35dfd076e7f869889d37cae54d7456173d5335b02513e9de918c1cda595cce2cff8f52576af2f4a7d61a7d4066c306f57cb4013bcc295aca9d16c33ecff71d807ac90f09d3d8967d367d2e240991a15d5b151c9cc35c82eacc0ac1fbf61db41aa1f3c0d203ea3ee6e9f32fd537b141659bf89", 0x1000}], 0x6, &(0x7f0000002800)=[{0x110, 0x10c, 0x3, "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"}, {0x70, 0x84, 0x5, "3ff5b491e50417c3e3027acd439158ee0198dfaa7b346bc9a8f8c171cc3a4d5f0f7716cde4bcbf20787cbcca9b8d11205a3d9ee4b2df52849a99c66aa6aa35b7a857cab913b360ac6d9a8476ed9d4a1cbd5ac4ab22200a052055e1"}, {0x40, 0x102, 0xfffffe00, "381fba3ff4246a363f47f01deb85d89dcbae9a321e6bbb555fd35eb0856a077e644c81b47c796bed891158e03b"}, {0xc0, 0x111, 0x3f, "b799fb062dbeb5b09f03e4550bfd72d83314fb073be4b5d28fcaf99a4d052461f5b75471e6bc1fc7c953039e7dd1961d088fd353bc669d346affc17c85e7fa7945ad7ae39fcfe1ada3b3050580377e00a9d533d88bc169222b91d994e43360e9e9b2178041fad38cbe6915bc712958051161e77de576efca8f926a6b811bbfc2686bc1ea154f819f594a8a3d02027b0ccf24358d459700ca97b8c9ebd931008ff9709c382df469de5922b6a27ffbfa"}, {0x18, 0x11, 0x9, "2e319eebce"}, {0x1010, 0x1, 0xfffffffc, "91232b508337add5cfc88650b8a0f969fb3af61cc940294352872957d280cbe6f75c0bd92b7d06b874f6560013d3243d1bae98ed9d8d7cc235a9c9aafb5d94925f864e0b0c380e4d6ac3ed7cc4624478f578264d06dae9576693aea6639fe890f249b8ad6eb8f32f06eff21aebcc2b0830d358ea97012abbe9a24b837905000cba576eb164120f56d5a2451c122460c4d97f284318a4ea47174e4c9c44788d9c533f499f4f486711e386bf5331fca430a4bd99f7bbfb225461e490d03683f2849d98cace718df08ef7334b694e1d00495d79831d18948f73021a2a1598ca9c7db6edcd0045ba0ad27345669b62e893e059d14a4edb3aef63d648170e2284607fd371c3f6dad0a376c392747da81ba87cee5e5d78af92aec3a3b4844570301db63397c8073d237ec82804677cdc6d1991509d064091d4d5d07288aab7ad816da9b3094ce20a5be8416e57c9d4b01cb376d2fcd92682ead0b014a7f4e1a9fd82ffb7e99d90844621da75511887432f4d83c310b47303ce8b52e08c5af9984f18adbcad4cc3d82112829c242665eacf1e4bc944bb57d013caa952dcd004d1c2c363a82f8b26b6f0d7fe431f89305216075896ee8c4fc4b03e1e65546c7c73f8c5f834433b6a8ed904b127b4a1f76e6bedf146191eb2c8ebd29e09dad31b4bfcc1b34f63fabb9b183d64a7daa6ec7fbbf62e564bd100612ea3bce9f486616eefa6fcf6164373a7e14b514a542d8efeed14f3e93ff3deb59c380e38ada7c4fe4775f2062b6060f4bc62d3f931fa1c453bc8d5801e71fa08cd1cee6460325ce6bac73c48f21c023a3f1938e369e74b15b2869cda52f51beda174ff8180363c836c99459afe4c5d5e2fc09f789af7ad82a3667e39ae0666d0ad8974619ea9eb080f1545e0ceeadff109860048368d6dcdbd8c345c549bea5155e4482b65cf22c37f627ed11750c88fdf61346c40589467153ab8dbce7c91009f483d91f2c5edd03ba7f9a14e9bfb07b7e0450e576e57499f00f6cb8c2ed26cb894ed5373371afc6e77a749b4cb82c5d742a7414ff6e53fabc09a3377a6125f856055b2f377ea650d57496da0ea2049c83f8643a948b85e131f4bb98f0dff6fc935ac35db246411f072b18bb40d656ba62b2f428417f6e2ff91d26c8a4979f4832f64ed234692e6e2b87fc34d1fb6b4129f9034cbfb9544799b210e9241f73c2aa2ef81fb780ad076315a0d9e49cfeb90183792f5fede582be887a3f876fcef0df36353fce068de9f5a991502b643894e76b279c91a855822a166e3e70f7bb3c7daf988f2ed3aef3a66403da837a545399652a0f5397f3e76f6347aab3ed2b25f8f75db61220292e915f2a2795e00d8227abd8fa979091c1dbe6b0a56c29fc99309c0d1685107a7624cbda4185006f37f3a30117ad822ea1bb940ec040c9c968f8094841153c8a8030e69c9be9e5c023784a3743c24c9016c65ed37faefafd187e6a4dbaf26bbb1230b538ef4fa9cd8737b5c61d7d292d0ffe2b9cba967d6503d45350a159f62f2a3b3e0366645e59232e8d63e9310c54ddd100fca944e80e458cf8885bb2c6a84ea7591375206e8d8887bed43ae8977f8e4691a99017cff6b239e50e439bafc26cd1eefb204586ab851e0ec944d1825a3a775dab886fcbe11a63dda12ab25003f205fea5900e949bbccffbe63703e02ec76d6419232c42446b93917d3d632bdebd7bb9032c7089c0272ff0810d30fa4a6f8674fa0a8df2fae6297dc5c3895811832639f39f535b3a9509352f65ed61ec43496a8113f02a25bd7c86696e09c9ca24c998b583ccc9b7bf7c4edd5dda6badee3bcea3746509ffc4b7515953929f404a866063bd3f5f766b1ccf5fc4a06705ab11ad7e0bcc766546d61cfcf99f2ce0147a62c6e972c2cad93e5868401fadf0eb33ee658dc78a56bf3879bc9b57d75d2a5277db0b4b5974823de1232ce738a7ea4362f20455275b20e35b1c868139a686b96f4cfa766e8a59753e0d4fc309cfbb8a08a7afc7e4deee8b6ce10dae0ff085c263828d73cb0d1b03772a60e416979da416d7c9af826745ebc80b9dc7b0f781dd0e4dfdb01afb45ef0cb0dd1b58ae8d45f5f89a9c4f8aaf5d65305f03bed4400927c5156ec697e251410a576bdeea3ba9846864871e97b84491c45e498c5582b74d45148e448dbf22a685ccf60da1398811436960f7ffb0b6d9f4ff7df38a4f3d55e63964729c1770805bf0f434512c313715cfe72bf8a70719d5d4d51aed2a76fbeef31c3bbe68f9d7249a8bbdce9ba8892307a33c2bc2e276a97d7c9a2e21c1c08a5f6397bddef97fcd7ee7f7fe237925e779f63861e2fc8bac2588a24ae89f7c4241be22be92d6b96889afbe3994b25619e367db725ebcc5ef5745f2340ae98d6f1c0e11080d7bef46120a02edd186cf0cd76582008a039bd2dd279c553ef6c79c08383d1afef4c002f435374f4e2386ae55bdb6dd353afd505c8cedc5707c41263e2147d498ae16ba11e16df94badb4a024d14fd10bc0027bcca77fd0e03a4f14770922cb67b42ad8d83e7853c2f6c0707156d2b01150afe3f8e8c4cb2ce28b4dc3e3311f2fa137d725e9b85300b42760643c6f68b5853653d54915c7775624d6692b21c101ec268fc346b16e2694f80fef2d31f93aef63353e5455d298346e0cffd15afba801cfc473e91a7869e07534ff69536c752042d3500e28327493ece326d97ca38eb24c404c9c8e5d6c961d881eb8236984afc3b2f7b69fc2b407793f9ca622b4a0b71505ff0536dd67f95f1b36a664c04077288aadf9673d304961ca5820ea144e7b36c8ba15df7698a1f8dbf13f935dfe4a1146943ddbce08ad608124c438004273383d23665ca94f8923f0ee22f03650058f146811d1e3bbaf203223ffee6ae482ea635fd33f1d85071218c3f96068b73fcfc8908935fa30c144ce308c42189f2e118d0f5187521122eb15da036dd07c84e196eae4ce086c38894ccf3ad441b9f69f8dcfb42351610bce896d77b2da05a3a074c95fac442563da1c9e23aaf11be175203b4c058f6aa987c77de7c11ba28206bf42676369a5bfc6bea961f57add058c43c7946f4463bbb9bcca52d213aa989821156779b8c4588510944a668c536bd45e4eb5753b7b3d3a80d2c8d1f59727609272893358af3873ae7ece6433b9b034a762a5e78aa66620ebc08092dd00da276c416c50c81614e43a8a13ee2634a7b2aaf6527770705ec753e8f03696cd18529f73159a5792ccf83fff0f2afda24f5ba12e6b0fa36a7abc07a7b600686e7055b79afc287e144c931a40f1045f6d8732c3fdc7c8842db77faa8be76987438c8e7e09ed1707de6249193721e8068e833ef37848de19a610e8be1e1f0be001bc725c253f95138ba010358290431a9e207c78b331a36f4af5e44b6360e3cc41cbc56e0900172271e5f74baaaf06e0ccea692ca8faca741ddd103aeb08daab001359519cdd5bd6aa989212e7fc13d40fc1185b77d6d5a04dcc68643dc643917bb6a112b294981d6fd93a3a523db489f766fbd47b9cf19d49147d6317c23ad9640c8394a59ad86c2e935957b53d34218f5d1a63f8dfb9cd6e23ad02e2ad8d72d6086aba5196252b87e98e540a1ba4d75de21e41a4b9f30250e1d82ee653cf6b74dada09aa85984feccc45043881ca4ee3a5391fcd6a62c1100d189449d45f02a97eddd701d985d1218e38946ec3f7bbfa8bc9b1d456865680f253373c3758380c1da797155a2c99b8d6531cadfc79e062ec1fc23f645d1a1a9dc8d42ef2f90a5a5de90d01e93bd4308fb414d7b58972fa5348d4bf806228455d0bc15f188f7375ae714411670326aca719ef65cf4a84a19f911915c02ebce27911ff9aaac61977a045e1ab141afb1417d90697e8b75f72e0e6dc6eb813f2b6e7a0a8122349671bfe163e4beef6a75d0fc316d50d4d17dee0504b2914ef4c27d85023ba8750deba178e3fdb72987e25f344314d5939e0deaa66a96fc6c19068b27a612cec014bfebe7490cad802923ad49056fd4a97892ba9724caf92104ea61da81584cb5edb190b018a7c2e3288e6044792b8380a83ba5c29d429795a062ff8e22194a56ab4c44d2b4cc76ebe2923893252366734fa7757bed5f2150d870464ddfac2ae64e860b893aace67d26156bdb809d5335266818d11e6d4da6d599ba03a3ffc413cdd0f88d152b1c698309a9e7642f3371f0e06a491e98cff70b9479555280e71bf5c4113fbc658aad3aa6cf2aea48fedc56449e428f9134e7355e0f8634c677bb5092b485eefec75da95e8ae234b5729140651752acf39065314746d4abe1fafb84d2b2841fd2874eb89d4b9fb481fce6b50afd272f606b112d64a9e67720780faa5a77fcd193e07e4217992eccc9ee16608a2ea92f03dcc754ba6a847a82928140b95af4e27d7780e3ee1ff756d52c8fcee28337f0a6a25fba0bc83073a4035aad09c15067b6a4ea4d1ffae5cec4d397cb896d29ecff6ca710f0afba818b605d2a9c54151696b9a54fa535969068c8cfd589da9c861153128f27e6f51f1ee2435fbe55f6413c06aab9ee7c444a8f3e3fd3758d93aa5b9482d2932edc5a28a4b6f2b1bae4ba743a989398f9aa203248852123860e62b2aa5b4fe4825d6dd9788f81fb232f13ae25f22a3e5a50d3af1f0feaf6c741d0e704e9e2fe2f47f8253d69c99b4c2b94c363c3d0fbb8e5cb08d6a3459dccc4167bd4731ddf2f6a995e2e5e7d300f5c41e0a21ac26fe2394ff6acee07d968e5c2bc151fa9b191a4b0effe84881f6c928deef2463c25b79cf1cb5664ff2ebf5ea773cb6c4261732132ff4a3a7a6f5a6635a7cf2a41193f0b454837a16798af2be76422bef0d846a1f89c84e857b771b7369a7f95cabd3ab52a5534d9efe53478df10b7bd90b080b6efdd1eb581663af24348f57ba0ef6b6020a29f8b7f0580f238d9d1a60cb97c9f5e94e5e98c17484160204676140a265400c19bf45e672da844dcc41308dae6d9564b19970c2dadc1ba4830d071bbbf03fac10f9ff89acd419c6055fb8be542fd4f97c3ece0e383dd6ded5188f38ce593772b972e4934e46bc463bb6e5849510b66b223cb6856dd8929a0290f19ec0a19b3983a84a21c729eee76c7d779d1f51600c7b1fc81bb5e57e3891abe7e3494c65a22813fea9f7219851e54248e83fa627eecc6da36b2b3de312fc2840a8d0027a32fe5ff4578978ac7a0b8fc8eebffb72cbe57e2fbdf9480bfc7e265d68a07136ae6b3e4738660a0ba1262d4503541b437bdd7759349d916f657909babb0a8d78b1c6cec98049d2a99e6a8af87681fde0424fd4c944056e7a9ddc41ec5079f4b63312bb173f9413540ccc85667c4c5a7df601ec691b37d443efd8113b93e7177421f1aee20e6c933d30d5bbff757b0df22dd046f5d4e900f7da20b0fe9082a8c8d8ed796626d762d38016f231b216840bb1be289df04189edffffb4f0751f4723eaf3844efee653f3bd3fc79f49c4a77f32b27bb7fc54b864d1369f216d422c8c51fd79cf349fc2e3fe773fdbdad7c8cec988b4ada37cb06dce8e124204768c56a54900b780376c95a06a2df6439f89a86d18d622f54d4d86a69bb7b6b70244fadd8ad5fbb63c4573dd5e78c16672fb802696b3b04df18ed8ead599efa08d1337f8d21d6a352a88189c2c4d3fd1fd2dad6d656e75cf26bd3d16810eac9c67465263cc564e5446c3d4bcc9bb4f70ca897e7e81a8368e4b177cfc0629214a179effd14390eabc52c5d54f6bb12c43af5615461d49c555bd80d7cc889fcae63b8d182"}, {0x58, 0x84, 0x0, "17c966a78820727763aeaaaed64e7e78832e42766801571041f10dac5c7ba4130429ed2b4abd574644719caf1f886ca46d34b3a0443902ca1f554c07e8e6a20ef4d858d17260890b"}, {0x50, 0x116, 0xf, "f3b783c6d57ebfa390699757396e7252cf788e20f862558c9f6a8316bccc6f53ac32c0552f7fa2f2c24f3241354d618724175fd52e1a19bba7e0579365c1ab2e"}, {0x20, 0x10c, 0x8, "e2d1e721f56b4f1f45685889"}], 0x1370}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x20048a, &(0x7f00000001c0)={[{@grpjquota}, {@noinit_itable}, {@abort}, {@bsdgroups}]}, 0x12, 0x51a, &(0x7f0000001200)="$eJzs3U9sI1cZAPBvJsnam6ZNCj0AKnQphQWt1k68bVT1QjlVCFVC9MhhGxInimLHUeyUJuwhe+SORCVOcOLMAYkDUk/ckTjAjUs5IBVYgRokJFx5bGedP06sbGJv499PGvnNvLG/93Y071mfN/MCGFu3ImI/Im5ExLsRMds5nnS2eLO9tc775NGD5YNHD5aTaDbf+WeS1beORc97Wp7pfGY+In7wVsSPkmNB/xRR393bWKpUytudQ8VGdatY3927u15dWiuvlTdLpcWFxfnX771WurS+vlT9zcc3I+L3v/vyR3/c/9ZPWs2a6dT19uMytbs+dRinZTIivncVwUZgotOfGxd584XexGVKI+JzEfFydv/PxkR2NY86epm+PcTWAQBXodmcjeZs7z4AcN2lWQ4sSQudXMBMpGmh0M7hvRDTaaVWb9xZre1srrRzZXMxla6uV8rznVzhXEwlq+uT5YWs3N2vlEvH9u9FxPMR8bPczWy/sFyrrIzyiw8AjLFnjs3//8m1538A4JrLPy7mRtkOAGB48qNuAAAwdOZ/ABg/5n8AGD/mfwAYP+Z/ABg/5n8AGCvff/vt1tY86Dz/euW93Z2N2nt3V8r1jUJ1Z7mwXNveKqzVamvZM3uq531epVbbWng1dt4vNsr1RrG+u3e/WtvZbNzPnut9vzw1lF4BAGd5/qUP/5JExP4bN7Mtep73f+5c/eJVtw64SumoGwCMzMSoGwCMzMnVvoBxIR8P4+v/zWYzetbujYiHh6Weh4H2/S9CHwwUJrVuKDx9bn/xCfL/wGea/D+Mr4vl/32Xh+tA/h/GV7OZWPMfAMaMHD+QnFPf+/v/fLNnZ7Df/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBamsm2JC101gKfiTQtFCKejYi5mEpW1yvl+Yh4LiL+nJvKtfYXIsK6QQDwWZb+Pems/3V79pWZ47U3cv/NZa8R8eNfvPPz95caje2FiBvJvw6PNz7oHC+Nov0AwHm683R3Hu/65NGD5e42zPZ8/J324qKtuAedrV0zGZPZaz7LNUz/O+nst7W+r0xcQvz9hxHxhdP6n2S5kbnOyqfH47diPzvU+OmR+GlW135t/Vt8/hLaAuPmw9b48+Zp918at7LX0+//fDZCPbnu+HdwYvxLD8e/iT7j361BY7z6h++eONicbdc9jPjSZMRB98N7xp9u/KRP/FcGjP/XF7/ycr+65i8jbsdp/U+OxCo2qlvF+u7e3fXq0lp5rbxZKi0uLM6/fu+1UjHLURe7meqT/vHGnef6xW/1f7pP/Pw5/f/6gP3/1f/e/eFXz4j/za+dfv1fOCN+a078xoDxl6Z/m+9X14q/0qf/513/OwPG/+hveysDngoADEF9d29jqVIpbz95IX/mOellhBigkETsX3GIx4Xcr3/61vkn54bWngsWol/VxNPSwmtTyD0dzRigMOqRCbhqj2/6UbcEAAAAAAAAAAAAAADoZxh/TjTqPgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB9fRoAAP//j4/W2A==") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000001740)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x9, 0x700, 0x7}, {0xffffffff, 0x1, 0x1, 0xfefffffffffffffc, 0x0, 0x40000000000000}]}) 4m11.213645802s ago: executing program 5 (id=3409): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) syz_open_procfs(0x0, &(0x7f0000000500)='net/ip_vs\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=0x0]) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x30, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x2) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x5, &(0x7f0000000300), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x2, @empty, 0xa09c}, {0xa, 0x2, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}}, 0xffffffffffffffff, 0x40099d}}, 0x37) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0xff7fffff}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000180)=0x4000000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00000500070088000000060005404e220000dc95b6e639a934228f2e6ea7f8c86fa12361838baefdbcde56dffdd1c6bfdd82a0c38dcdcb39e8ab0c0f1f47c2e938569abe7aa4481b6010d0943ce2fc21e4e54c377b814b94be64690326d5e03f0b66edfebf2073fb26cc851ce367f0c86f39e48e50afb2b84d614af3878ec9b86e6422d6d03471eaac4e470743313b3b975745"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) write$qrtrtun(r3, &(0x7f0000000340)="66bb0b760dc0f4", 0x7) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x9}}, 0x40) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = epoll_create(0xeed) r9 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f00000000c0)={0x20000003}) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x4, 0x0, 0xa760}, 0x0, &(0x7f0000000240)={0x1d, 0x4, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3}, &(0x7f0000000280), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m55.057368635s ago: executing program 37 (id=3409): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) syz_open_procfs(0x0, &(0x7f0000000500)='net/ip_vs\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=0x0]) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x30, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x2) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x5, &(0x7f0000000300), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x2, @empty, 0xa09c}, {0xa, 0x2, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}}, 0xffffffffffffffff, 0x40099d}}, 0x37) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0xff7fffff}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000180)=0x4000000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00000500070088000000060005404e220000dc95b6e639a934228f2e6ea7f8c86fa12361838baefdbcde56dffdd1c6bfdd82a0c38dcdcb39e8ab0c0f1f47c2e938569abe7aa4481b6010d0943ce2fc21e4e54c377b814b94be64690326d5e03f0b66edfebf2073fb26cc851ce367f0c86f39e48e50afb2b84d614af3878ec9b86e6422d6d03471eaac4e470743313b3b975745"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) write$qrtrtun(r3, &(0x7f0000000340)="66bb0b760dc0f4", 0x7) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x9}}, 0x40) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = epoll_create(0xeed) r9 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f00000000c0)={0x20000003}) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x4, 0x0, 0xa760}, 0x0, &(0x7f0000000240)={0x1d, 0x4, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3}, &(0x7f0000000280), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m38.57869821s ago: executing program 6 (id=4688): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xfffffffffffff001}, 0x18) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0) sendmsg$SMC_PNETID_DEL(r2, 0x0, 0x4000) 2m38.512076336s ago: executing program 6 (id=4689): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1e00000003000000020000000400000000200200", @ANYRES32, @ANYBLOB="0001000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000002000000020000000500"/28], 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000001080)={[{@discard}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@quota}]}, 0x3, 0x43a, &(0x7f0000001100)="$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") r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x9001) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000180)=0xe98a, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) unshare(0xa000200) semtimedop(0x0, &(0x7f0000000040)=[{0x4, 0x6, 0x1000}], 0x1, 0x0) unshare(0x20060400) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000004980)={0x7, 'vlan0\x00', {0x3}, 0x6}) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) renameat2(r1, &(0x7f0000000140)='./file0\x00', r1, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x20, 0x700, 0x8000, 0x8, {{0x23, 0x4, 0x0, 0x10, 0x8c, 0x64, 0x0, 0xe, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x33}, @loopback, {[@timestamp_prespec={0x44, 0x24, 0xf7, 0x3, 0x7, [{@private=0xa010100, 0xfffff202}, {@rand_addr=0x64010102, 0x3}, {@broadcast, 0x7f}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x9}]}, @ra={0x94, 0x4}, @cipso={0x86, 0x4e, 0x3, [{0x0, 0x10, "ed99c0bb4b40fc116514a7ce943c"}, {0x0, 0xf, "72d6f6b9e63d7891c1c354184e"}, {0x2, 0x10, "5ca7bde5847f29c4b4c422414a95"}, {0x5, 0xf, "568832bafb41cbf2ef84c14a84"}, {0x6, 0xa, "daf7b346e5dd1924"}]}]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}]}, &(0x7f0000000240)='GPL\x00', 0x7f29da7d, 0x0, 0x0, 0x0, 0xd, '\x00', r6, 0x0, r1, 0x8, &(0x7f00000003c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x4, 0xe, 0x2, 0x5}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000580)=[{0x2, 0x1, 0x7, 0xc}, {0x4, 0x5, 0x2, 0x2}], 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000400)='sys_enter\x00', r5}, 0x18) io_setup(0x8, &(0x7f0000002740)=0x0) io_pgetevents(r7, 0x2, 0x2, &(0x7f0000000000)=[{}, {}], &(0x7f0000000080)={0x0, 0x989680}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000a40)={{{@in=@empty, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000740)=0xe8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000880)={&(0x7f0000001e80)=ANY=[@ANYBLOB="b40600001300020029bd7000ffdbdf2564010100000000000000000000000000ac1e00010000000000000000000000004e2200084e2100000a00802089000000", @ANYRES32=r6, @ANYRES32=0x0, @ANYBLOB="000000100000000001000000000000000200000000000000ff030000eeff0000ffff0000000000008200000000000000900000000000000000000000000000003b000000000000000100000000000080000800000000000089000000000000000800000000000000000000020000000008001e0007000000ac000700ff020000000000", @ANYRES32=r6, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0a010102000000000000000000000000000004d42b0000007f000001000000000000000000000000010001000000000003000000000000000e37000000000000080000000000000000000000000000000300000000000000ff7f000000000000ed000000000000004b03000000000000080000000000000008000000000000000100000000000000020000000f0000000101000025bd7000013500000200000f0200000000000000ac000700fc0100000000000000000000000000000a0101010000000000000000000000004e2300004e2400000200802000000000", @ANYRES32=r6, @ANYRES32=r8, @ANYBLOB="020000000000000010000000000000000700000000000000ffffffff0000000002000000000000000100000000000000050000000000000006000000000000000500000000000000000000000000000001000000000000800100000000000000e6911060b86b6e0001010202000000009c001100e000000100000000000000000000000000000000000000000000000000000001ac1414bb000000000000000000000000ff0200000000000000000000000000013c030000043500000a000a000000000000000000000000000000000000000000000000000000ffffac1e0101fc01000000000000000000000000000000000000000000000000ffffac141424330300000435000002000a003f0114006362636d61632d6165732d6e656f6e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000098070000a0000000783236aab2d88e3522cbbe9f30c45c2fa9a3c16b8303170c9a2ead34126da1c31290dedbdd97ca05557bd5f46a308cc481a89a17c647747bf781d46679dab8140f55889024888df58bf01742f50536517cd74ebd0e2ae83f742e9e2ec30cd3cd9345c265656935338811410bcb42c2d4b6484d7149037bf3d515115d8c88e55d1a8cbf687ac07bb3de2a5b912e3ce02f8683ddf892d37eecc463fe55cf2ab2366baf3077131900626d9fe24cb64d9c118c22280bb53480860600250dc17d7b6da816d96c9be4cb495dec3b5f0d21476ccfe3ef3f1df947a493c5a150eae8700af9e8a24a3b8dfc9cba0e972db008dcc15b854400240009000000000000000000c20f000000000000e6000000000000006205000000000000f20002006362632863616d656c6c69612900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050050000a90052f81f5dddedf8a05af5bcea711a7836a388c617ad4e7d014b440685f2766f27ad0101977f6e728ef1383ad6c2484758ee35cb7ff4bd26714334ea5b90bb649aaecf4af955eb99c534d24ec3dd5af53651423c90f4220b749437431d18b717903b5055759b527228ddf19938014fa84bc9aeb1cb0d485690708a53a9b306347f5b60093b673ce8f37a87a9d2da67de334b4d1b3c1cc76bd2297394a5a5a8f61c15e1b95380b6219d000008000c0006000000"], 0x6b4}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) 2m37.979438849s ago: executing program 6 (id=4702): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = io_uring_setup(0x6e1e, &(0x7f0000000100)={0x0, 0x23d4, 0x80, 0x0, 0x87}) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/4094, 0xffe}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20) 2m37.920361575s ago: executing program 6 (id=4704): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x12c5008, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r0, r2, 0x4e, 0x0) write$binfmt_script(r1, &(0x7f0000000200)={'#! ', './file1', [{0x20, '/dev?H\xa6t/t\x89;B'}], 0xa, "accadf0a429db504d823f49490e1e4c6553b1f870dd113e2ade2af77421b3e4106205de4a535932bc7f3804528ee0ad7ae83db0a25"}, 0x4e) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x500, 0x40) r4 = open_tree(r3, &(0x7f0000000300)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) rmdir(0x0) 2m37.791653098s ago: executing program 6 (id=4712): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x6, 0x0, 0xc, 0x0, 0x0, 0x100, 0x10020, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0xb}, 0x104812, 0x10000000000, 0xfffffffc, 0x6, 0x2ff, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$igmp(0x2, 0x3, 0x2) remap_file_pages(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x4, 0x100) setsockopt$MRT_ASSERT(r0, 0x0, 0xcf, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r1, 0x0, 0x0, 0x4}, 0x20) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0xfffffe51) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x8804, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) socketpair(0x1d, 0x2, 0x6, &(0x7f0000000300)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x18) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x48000) 2m37.506949827s ago: executing program 6 (id=4721): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f00000000c0)=""/160, 0xa0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000280)='htcp', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 2m37.490192718s ago: executing program 38 (id=4721): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f00000000c0)=""/160, 0xa0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000280)='htcp', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 2m21.231500471s ago: executing program 8 (id=5075): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x6, 0x0, 0xc, 0x0, 0x0, 0x100, 0x10020, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0xb}, 0x104812, 0x10000000000, 0xfffffffc, 0x6, 0x2ff, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$igmp(0x2, 0x3, 0x2) remap_file_pages(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x4, 0x100) setsockopt$MRT_ASSERT(r0, 0x0, 0xcf, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r1, 0x0, 0x0, 0x4}, 0x20) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0xfffffe51) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x18) creat(0x0, 0xecf86c37d53049cc) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x48000) 2m21.198805974s ago: executing program 8 (id=5076): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020a07b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6f, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r0}, 0x18) open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getpeername(r1, 0x0, 0x0) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') 2m21.114951243s ago: executing program 8 (id=5077): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303, 0x36}, "f1ff5ef2fe010017", "9e8ecc7bb5352776725e1047711330ff2bb17b5508000000000000009bc400", "c9063700", "46b0dc72b7b1d30e"}, 0x38) 2m21.035244511s ago: executing program 8 (id=5078): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x12c5008, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r0, r2, 0x4e, 0x0) write$binfmt_script(r1, &(0x7f0000000200)={'#! ', './file1', [{0x20, '/dev?H\xa6t/t\x89;B'}], 0xa, "accadf0a429db504d823f49490e1e4c6553b1f870dd113e2ade2af77421b3e4106205de4a535932bc7f3804528ee0ad7ae83db0a25"}, 0x4e) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x500, 0x40) r4 = open_tree(r3, &(0x7f0000000300)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) rmdir(0x0) 2m20.94328986s ago: executing program 8 (id=5080): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4084) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x40080) syz_io_uring_submit(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e00010063"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r3, 0x0, 0x200000000000006}, 0x18) 2m20.812316643s ago: executing program 8 (id=5083): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="06000000040000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) setgid(0x0) 2m20.811730713s ago: executing program 39 (id=5083): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="06000000040000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) setgid(0x0) 56.587141102s ago: executing program 7 (id=6891): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000040000000800000008", @ANYRESOCT], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) 56.540974307s ago: executing program 7 (id=6893): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x4788, &(0x7f0000000480)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @ipv4=@multicast2}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r3}]}]}, 0x28}}, 0x0) 56.539402727s ago: executing program 7 (id=6895): r0 = socket$inet_sctp(0x2, 0x5, 0x84) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) getpid() r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r6 = gettid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x18, 0x7ffc1fff}]}) rt_tgsigqueueinfo(0x0, r6, 0x7, &(0x7f00000019c0)={0x0, 0x3, 0x4}) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r7, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) syz_usbip_server_init(0x6) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd2d, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x300}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x3000000, 0x40000000}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8000, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x800000, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x80000001}, {}, {0x0, 0x10}, {0x0, 0x470a, 0x0, 0x8000000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x0, 0xffb}, {0x0, 0x0, 0x0, 0x8000000, 0x80000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x20000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3}, {0x0, 0x0, 0x0, 0xfffffffc, 0x5}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x60569add}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x2}, {}, {0x80}, {0x80}, {0x0, 0x0, 0x0, 0x5, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x2, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x8, 0x0, 0x3}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5, 0x0, 0x0, 0x0, 0x0, 0xd2f8}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x7}, {0x0, 0x2}, {0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9}, {0x0, 0xfffffffc, 0x200}, {0x0, 0x0, 0x0, 0x200}, {}, {0x4}, {}, {0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x3, 0xfffffffe}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, {0x0, 0xb}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x0, 0xec33, 0x0, 0x4}, {}, {0xb, 0x0, 0x0, 0x0, 0x0, 0xfe1}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0xfffffffc}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {0x0, 0x8, 0x0, 0x0, 0xfffffffe}, {0x4, 0x2, 0x2000000, 0x2, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0xe9d, 0x58a}, {0x2}, {0x2, 0x9, 0x20000000}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe600, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x10000, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x2d, 0x0, 0x10000}, {0x0, 0x0, 0x8000}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800, 0x4, 0x6}, {0x0, 0x3}, {0xffffffff, 0x0, 0x0, 0x0, 0xd}], [{}, {}, {}, {0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {0x5}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {0x4}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x5, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 55.478704573s ago: executing program 7 (id=6927): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a14000000000a050000000000000000000100000328000000030a010200000000000000000200000008000a40000000040900030073797a31000000008c000000060a010200000000000000000100000008000b40000000000900020073797a31000000000900010073797a300000000008000b40000000010c000340000000000000000144000480140001800e001900636f6e6e6c696d69740000002c0001800a00010071756f74610000001c0002800c00044000000000000000000c0004400000000000000006140000001100010000000000000000000500000a"], 0xf0}, 0x1, 0x0, 0x0, 0x20004014}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x3}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r2, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x3a}, 0xfffe}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@dstopts={{0x28, 0x29, 0x32, {0xff, 0x1, '\x00', [@ra={0x5, 0x2, 0xc0}, @jumbo={0xc2, 0x4, 0x8}]}}}], 0x28}, 0x40) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000080)=@ethtool_regs={0x12}}) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x20048a, &(0x7f00000001c0)={[{@grpjquota}, {@noinit_itable}, {@abort}, {@bsdgroups}]}, 0x12, 0x51a, &(0x7f0000001200)="$eJzs3U9sI1cZAPBvJsnam6ZNCj0AKnQphQWt1k68bVT1QjlVCFVC9MhhGxInimLHUeyUJuwhe+SORCVOcOLMAYkDUk/ckTjAjUs5IBVYgRokJFx5bGedP06sbGJv499PGvnNvLG/93Y071mfN/MCGFu3ImI/Im5ExLsRMds5nnS2eLO9tc775NGD5YNHD5aTaDbf+WeS1beORc97Wp7pfGY+In7wVsSPkmNB/xRR393bWKpUytudQ8VGdatY3927u15dWiuvlTdLpcWFxfnX771WurS+vlT9zcc3I+L3v/vyR3/c/9ZPWs2a6dT19uMytbs+dRinZTIivncVwUZgotOfGxd584XexGVKI+JzEfFydv/PxkR2NY86epm+PcTWAQBXodmcjeZs7z4AcN2lWQ4sSQudXMBMpGmh0M7hvRDTaaVWb9xZre1srrRzZXMxla6uV8rznVzhXEwlq+uT5YWs3N2vlEvH9u9FxPMR8bPczWy/sFyrrIzyiw8AjLFnjs3//8m1538A4JrLPy7mRtkOAGB48qNuAAAwdOZ/ABg/5n8AGD/mfwAYP+Z/ABg/5n8AGCvff/vt1tY86Dz/euW93Z2N2nt3V8r1jUJ1Z7mwXNveKqzVamvZM3uq531epVbbWng1dt4vNsr1RrG+u3e/WtvZbNzPnut9vzw1lF4BAGd5/qUP/5JExP4bN7Mtep73f+5c/eJVtw64SumoGwCMzMSoGwCMzMnVvoBxIR8P4+v/zWYzetbujYiHh6Weh4H2/S9CHwwUJrVuKDx9bn/xCfL/wGea/D+Mr4vl/32Xh+tA/h/GV7OZWPMfAMaMHD+QnFPf+/v/fLNnZ7Df/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBamsm2JC101gKfiTQtFCKejYi5mEpW1yvl+Yh4LiL+nJvKtfYXIsK6QQDwWZb+Pems/3V79pWZ47U3cv/NZa8R8eNfvPPz95caje2FiBvJvw6PNz7oHC+Nov0AwHm683R3Hu/65NGD5e42zPZ8/J324qKtuAedrV0zGZPZaz7LNUz/O+nst7W+r0xcQvz9hxHxhdP6n2S5kbnOyqfH47diPzvU+OmR+GlW135t/Vt8/hLaAuPmw9b48+Zp918at7LX0+//fDZCPbnu+HdwYvxLD8e/iT7j361BY7z6h++eONicbdc9jPjSZMRB98N7xp9u/KRP/FcGjP/XF7/ycr+65i8jbsdp/U+OxCo2qlvF+u7e3fXq0lp5rbxZKi0uLM6/fu+1UjHLURe7meqT/vHGnef6xW/1f7pP/Pw5/f/6gP3/1f/e/eFXz4j/za+dfv1fOCN+a078xoDxl6Z/m+9X14q/0qf/513/OwPG/+hveysDngoADEF9d29jqVIpbz95IX/mOellhBigkETsX3GIx4Xcr3/61vkn54bWngsWol/VxNPSwmtTyD0dzRigMOqRCbhqj2/6UbcEAAAAAAAAAAAAAADoZxh/TjTqPgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB9fRoAAP//j4/W2A==") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'sit0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) flock(0xffffffffffffffff, 0x2) r4 = open(&(0x7f0000000300)='.\x00', 0x102000, 0x0) flock(r4, 0x1) r5 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r5, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0xff, 0x1, 0x0, 0xfffe}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x200000, 0x0, 0xff, 0x0, 0x3ff, 0x72}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000300000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) 54.376139773s ago: executing program 7 (id=6943): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x20ffe, 0x0, 0x0, 0x40f00, 0xac, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)=""/20, 0x14}], 0x1) 54.022465708s ago: executing program 7 (id=6955): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x200000, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8004}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000008000000090000000300002001"], 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) 54.015519739s ago: executing program 40 (id=6955): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x200000, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8004}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000008000000090000000300002001"], 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) 46.309734428s ago: executing program 1 (id=7064): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x7fff}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x18) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = dup(r7) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a32000000000500010007000000140007800800134000000000080012"], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r9 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r9, 0x0) capset(0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r10}, 0x18) socket(0x10, 0x3, 0x9) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000380)) 46.18626134s ago: executing program 1 (id=7066): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) r2 = socket$inet6(0xa, 0x80802, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x1) sendmmsg$inet6(r2, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) 46.158861463s ago: executing program 1 (id=7068): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9ee6, 0x200000005}, 0x104022, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x7) lsetxattr$security_selinux(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180), 0x0, 0x0, 0xf245a8f55ac9a66f) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000000c0)=@chain) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 46.096109159s ago: executing program 1 (id=7071): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c45, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2a3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r1, 0x0, 0x1034}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) flock(r0, 0x1) 45.813941698s ago: executing program 1 (id=7073): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x10) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2", 0xc}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000080)={0x2000, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c002000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006203300000000000000000000000000fe8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x40000) 45.700284039s ago: executing program 1 (id=7076): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071105400000000001d400500000000004704000001ed00000f030000000000001d440000000000006b0a00fe000000007313000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff31a8fd3c0fd8b7ff831028e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a83469620c6e74e1f46132559c4f8700a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a920099c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3ba18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b4762302a271722fb515f31e0dd115a292f1e68481a62c49d15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc82300000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x8a42, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x8a42, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000300)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010030bd7400fddbdf251f0000002000018008000100", @ANYRES32=r6, @ANYBLOB="14000200776731"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x880) ioctl$KDDISABIO(r1, 0x4b37) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900), 0x0) (async) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001500)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000200)=[0x0, 0x0], 0x0, 0x80, &(0x7f00000004c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000400), &(0x7f0000000580), 0x8, 0xac, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r12}, 0x10) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r13}, 0x10) dup(r8) (async) r14 = dup(r8) r15 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000016c0), 0xc0900) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r15, 0x40505331, &(0x7f0000001700)={{0xc}, {0xc8}, 0x7fffffff, 0x6, 0x1}) (async) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r15, 0x40505331, &(0x7f0000001700)={{0xc}, {0xc8}, 0x7fffffff, 0x6, 0x1}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r14}, 0x2c, {[], [], 0x6b}}) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r14}, 0x2c, {[], [], 0x6b}}) r16 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001200), 0xa0000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r16, 0x40bc5311, &(0x7f00000000c0)={0x6, 0x2, 'client0\x00', 0x1, "3a3ec50df75ec853", "6000620b2e0672080dbcc46a8f93451eae018bff17d732e38bd859bb0ace0043", 0x8283, 0x2}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) 29.631832821s ago: executing program 41 (id=7076): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x8a42, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x8a42, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000300)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010030bd7400fddbdf251f0000002000018008000100", @ANYRES32=r6, @ANYBLOB="14000200776731"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x880) ioctl$KDDISABIO(r1, 0x4b37) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900), 0x0) (async) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001500)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000200)=[0x0, 0x0], 0x0, 0x80, &(0x7f00000004c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000400), &(0x7f0000000580), 0x8, 0xac, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r12}, 0x10) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r13}, 0x10) dup(r8) (async) r14 = dup(r8) r15 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000016c0), 0xc0900) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r15, 0x40505331, &(0x7f0000001700)={{0xc}, {0xc8}, 0x7fffffff, 0x6, 0x1}) (async) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r15, 0x40505331, &(0x7f0000001700)={{0xc}, {0xc8}, 0x7fffffff, 0x6, 0x1}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r14}, 0x2c, {[], [], 0x6b}}) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r14}, 0x2c, {[], [], 0x6b}}) r16 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001200), 0xa0000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r16, 0x40bc5311, &(0x7f00000000c0)={0x6, 0x2, 'client0\x00', 0x1, "3a3ec50df75ec853", "6000620b2e0672080dbcc46a8f93451eae018bff17d732e38bd859bb0ace0043", 0x8283, 0x2}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) 2.930154578s ago: executing program 9 (id=7808): r0 = socket$inet_sctp(0x2, 0x5, 0x84) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) getpid() r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="2b6853affe126c6220"], 0x9) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r6 = gettid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x18, 0x7ffc1fff}]}) rt_tgsigqueueinfo(0x0, r6, 0x7, &(0x7f00000019c0)={0x0, 0x3, 0x4}) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r7, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) syz_usbip_server_init(0x6) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd2d, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x300}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x3000000, 0x40000000}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8000, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x800000, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x80000001}, {}, {0x0, 0x10}, {0x0, 0x470a, 0x0, 0x8000000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x0, 0xffb}, {0x0, 0x0, 0x0, 0x8000000, 0x80000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x20000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3}, {0x0, 0x0, 0x0, 0xfffffffc, 0x5}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x60569add}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x2}, {}, {0x80}, {0x80}, {0x0, 0x0, 0x0, 0x5, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x2, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x8, 0x0, 0x3}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5, 0x0, 0x0, 0x0, 0x0, 0xd2f8}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x7}, {0x0, 0x2}, {0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9}, {0x0, 0xfffffffc, 0x200}, {0x0, 0x0, 0x0, 0x200}, {}, {0x4}, {}, {0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x3, 0xfffffffe}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, {0x0, 0xb}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x0, 0xec33, 0x0, 0x4}, {}, {0xb, 0x0, 0x0, 0x0, 0x0, 0xfe1}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0xfffffffc}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {0x0, 0x8, 0x0, 0x0, 0xfffffffe}, {0x4, 0x2, 0x2000000, 0x2, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0xe9d, 0x58a}, {0x2}, {0x2, 0x9, 0x20000000}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe600, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x10000, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x2d, 0x0, 0x10000}, {0x0, 0x0, 0x8000}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800, 0x4, 0x6}, {0x0, 0x3}, {0xffffffff, 0x0, 0x0, 0x0, 0xd}], [{}, {}, {}, {0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {0x5}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {0x4}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x5, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.175085793s ago: executing program 9 (id=7827): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7f, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xf, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000400"], 0x50) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}, 0x1, 0x0, 0x0, 0x44810}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=ANY=[@ANYBLOB="4c0000000906010400000000000000000500ffff240007801800018014000240fe8000000000000000000000000000aa08000a40000000020900020073797a310000000005000100070000"], 0x4c}}, 0x4000080) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000002000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x40, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1000000, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.644965466s ago: executing program 9 (id=7839): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x80000}, 0x18) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 1.576364333s ago: executing program 9 (id=7841): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x800000, &(0x7f00000016c0)=ANY=[@ANYBLOB="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", @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00']) close(r1) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty=0xffffffff}, 0x10) 1.519497298s ago: executing program 9 (id=7843): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00eb00390400"/18, @ANYRES32=r3, @ANYBLOB="01980000000000001c0012800b00010062726964676500000c00028005002a0001000000"], 0x3c}}, 0x0) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1", 0xe, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r3, 0x1, 0x4, 0x6, @local}, 0x14) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000080)=[{&(0x7f0000000500)='|', 0x1}], 0x1, 0x0) 1.50040216s ago: executing program 2 (id=7844): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x98, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x6c, 0x3, 0x0, 0x1, [{0x68, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x5c, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x10000}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}]}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xfc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.484950242s ago: executing program 2 (id=7845): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) pipe2$9p(&(0x7f0000000240), 0x800) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000180)={0x0, &(0x7f0000000080)}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r1, &(0x7f0000000080), &(0x7f0000000440)}, 0x20) syz_emit_ethernet(0xae, &(0x7f0000000440)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60f4adf700382900000000000000000000f9000000000000ff020000000000000000000000000001"], 0x0) 1.444358776s ago: executing program 2 (id=7847): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9ee6, 0x200000005}, 0x104022, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x7) lsetxattr$security_selinux(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180), 0x0, 0x0, 0xf245a8f55ac9a66f) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000000c0)=@chain) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 1.434503727s ago: executing program 2 (id=7848): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0xfec7, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) open(&(0x7f00000003c0)='.\x00', 0x800, 0x0) socket(0x2, 0x80805, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x68, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x7, @link='syz1\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x4, 0x0, 0x0) 1.317956239s ago: executing program 4 (id=7852): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001d002100000000"], 0x30}}, 0x0) 1.30023819s ago: executing program 4 (id=7853): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7f, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xf, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000400"], 0x50) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}, 0x1, 0x0, 0x0, 0x44810}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000030605000000000020000000000000000500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40010) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000002000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x40, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1000000, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.184267182s ago: executing program 0 (id=7855): r0 = socket(0x2, 0x2, 0x1) syz_read_part_table(0x1062, &(0x7f0000000000)="$eJzsz7FtAjEYBeDnnJPcVanSZ4EU6VKmS5E6EzAI+7ACEoiWEZgF6ZDvEGwAFN9XPMv2/yw53FXXtajfJe9fSb1e1AzzwJTPWe/r7nOTZJlxfG1n/Ty4/Wutt65PSg6/w1OSn5TzM8dxMa3T/qXFR7lU87+61T8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4JGdAgAA///pZQyK") syz_genetlink_get_family_id$mptcp(&(0x7f00000010c0), r0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x1}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x4) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001100)={'syzkaller0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000011c0)={'team0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000001380)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001340)={&(0x7f0000001400)=ANY=[@ANYRES16, @ANYRES32, @ANYRES32, @ANYBLOB="dea7ea963f123f37b3459ea0b98f153b5331ca4616672fc6b73555dfa532f3091b1325e803d6884c74b3903fa35a13f79e25dcb2a9967173fbcff549218011e381a6bf9a77d53c7029352a367741770fe147e704ab60", @ANYRES32=r4, @ANYBLOB, @ANYRES32=r5, @ANYBLOB, @ANYRES32, @ANYBLOB="08000300ac141419380006800800060018000000080007009565677c8af3242dda2ec36b56f784a606455d6d9c8eab908776a37152eca855e7e06c837c0dd1d54db242b54c3a6ca6dec99ec7ffc84b581dd24271b99c4ffee8b07fbf8e573a2a7b67a312e44ca62b1ca6e5b3bac7aca55235cc4344e00bf765d1256e223c51bc0f6b74e5bff8267f0dee6801643a4f32dca703e41d2e7878755db52c8a2f1098150e2f63073c59fe77f1263ee3f7b2d4ce3686ac32b927bcc0d1da8b54e5335da7", @ANYRES32=r6, @ANYBLOB="060001000a00000014000400fe8000000000000000000000000000bb050002008000000014000680060005004e2100000800070085261defc9804f1dbefa4aa2741fe3a09e344b90336722dd5b6dd9adc0c5a783291386d5", @ANYRES32=0x0, @ANYBLOB="8c8b"], 0x104}, 0x1, 0x0, 0x0, 0x4040054}, 0x20044041) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) mmap$usbmon(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', 0x0}) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r8}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r9, 0x0, 0x4}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000004009c00000000000100000095000000"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xe, 0x1}, {0x0, 0x3}}}, 0x24}}, 0x800) 1.057904675s ago: executing program 4 (id=7856): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7f, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xf, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000400"], 0x50) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}, 0x1, 0x0, 0x0, 0x44810}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000030605000000000020000000000000000500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40010) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000002000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x40, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1000000, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.057253585s ago: executing program 0 (id=7857): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) pipe2$9p(&(0x7f0000000240), 0x800) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000180)={0x0, &(0x7f0000000080)}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r1, &(0x7f0000000080), &(0x7f0000000440)}, 0x20) syz_emit_ethernet(0xae, &(0x7f0000000440)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60f4adf700382900000000000000000000f9000000000000ff020000000000000000000000000001"], 0x0) 1.029468117s ago: executing program 0 (id=7858): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x8000, 0x1, 0x7b3f000, 0xffffff22, {{0x7, 0x4, 0x3, 0x7, 0x1c, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x2b}, {[@end, @ra={0x94, 0x4, 0x1}]}}}}}) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', r1}, 0x94) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x80000002}, 0x0) r2 = gettid() rt_sigqueueinfo(r2, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000140), 0x8000000100000002, 0x842) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x800000, &(0x7f00000016c0)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d1810975acb6adc692d81e76e3ac15ff1305a0b30055565a7f62df64ca715529bd39046add7a699a8b3221127b589f82c5423f314aa8b89229c1f14c9a5d290182a1fa334ba193803880baa79cbc1ec3a56954b83a3457e69bca8d0a1b525622c6e3629ebf79defdb5de612e6e6173c09bb01d452e610e680f6f5c4ddce225c5210622534cbce225388363af8468b6a2ca2f66f6e88cda2c4de6fc8531925fc0d059c5546d827d6be58a0afb1b28bfeea9aff96e90017d09a3c4cc3495bd1cf8dd841054e86316d37f76a9bd862e995689100967042b4006ff0d9db2d921e7203934459d3c12048fe58557549fcf74b2c2de8cfc81341b03ab064eb9029f1ab0f8c7eda72cdf1313703cc29ba2a", @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',\x00']) close(r3) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) 982.524372ms ago: executing program 0 (id=7859): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9ee6, 0x200000005}, 0x104022, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) lsetxattr$security_selinux(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180), 0x0, 0x0, 0xf245a8f55ac9a66f) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000000c0)=@chain) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 981.179352ms ago: executing program 0 (id=7860): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0xfec7, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x4, 0x0, 0x0) 784.693262ms ago: executing program 4 (id=7861): syz_emit_ethernet(0x4a, &(0x7f0000000900)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd608a96460014040000ffff00000000000000000000000000fe8000000000000000000000000000aa"], 0x0) 771.840313ms ago: executing program 4 (id=7862): r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e00)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x121}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb080000000030fffe000000019078ac1e0001640101020304907812fe183f2500000000680000040000027f0000017f000001"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b040000030000000000020000003800048034000180090001fb6861736800000000240002800800074000000001080004400004"], 0x8c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000940)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRESHEX=r1, @ANYBLOB="23000000000000e427800000010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001000)='/sys/kernel/uevent_seqnum', 0x40, 0x181) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000010c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000001040), &(0x7f0000001080)=r3}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x20, 0xc, &(0x7f0000000180)=ANY=[@ANYRES64=0x0, @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="0e000000fbff0000d5ff00000200000040490000", @ANYRES32=0x0, @ANYBLOB="7669000000000000fdd80d058b1efc9303000000", @ANYRESOCT=r3, @ANYRES32, @ANYBLOB="02000000020000000000000000158000020000000000000000000000435943583ef210951fc71046989f38cb07f265132af62e13962528bce585dccfbc94ad7a459095b53c856f1c771943a4180873c803ad04f123b04fb32c2af78f0a24c29bb3d20736f80660ba848e383a"], 0x50) r10 = openat$incfs(0xffffffffffffff9c, &(0x7f0000001180)='.pending_reads\x00', 0x270883, 0xa3) r11 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/llc/core\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001300)={0x6, 0x25, &(0x7f0000000a00)=ANY=[@ANYRES64=r4, @ANYBLOB="3b6d1b3754f360bab9c343677cbe6043f28134f51c570db9ae7f7eadcc5085c2fb4b0f6b0cc666881e15088e75eb51a810d29878bf1c", @ANYRES16=r10, @ANYRES64], &(0x7f0000000a80)='GPL\x00', 0x3, 0x22, &(0x7f0000000ac0)=""/34, 0x41000, 0x16, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000b40)={0x3, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001200)=[0xffffffffffffffff, r0, r6, r7, 0x1, r8, r9, r10, r11], &(0x7f0000001240)=[{0x1, 0x4, 0x6, 0x3}, {0x4, 0x5, 0xb, 0x9}, {0x5, 0x3, 0x8}, {0x4, 0x5, 0xe, 0xc}], 0x10, 0xacf}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xfffb, 0xfff3}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="dd99401b1f441a835c3dfe053e0e094515e504b6316f2a67a040e860c8118441fc09df1fd193dfa63fcceb82dbd8c0c71b933214389bdf97fd6c3e72b4b836a0ee9b4d75f459e9e7a400ad5c01c749b8e8c6fc439e19077b742f12af535044eab14e1a16e1ed9b2552408b230507bb3d8db6c4b28f2bc0e55df68ae70f3f51e1a6f9a3931a26f5"], 0x2, 0x699, &(0x7f0000000140)="$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") r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='kfree\x00', r12}, 0x18) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f00000015c0)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="000000000003000066089821a0f88d8c8500d77895da000000000000180000000000000800000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000641cd009500000000000000563f334e4b2290f8100b6d2740f3eb9c2131cd3679823c2bdb2abb6f54acb8258ec92776cd8aaae6eb80589059af94e24987abd73ac762041c2373c85ba8893c2fe4d78badd4d7607b52575415e6d3cde52e334fe858fd4cd8675ada1aeaf9fb34ded88df5008532137753e67fa42219bffb64cc24655e083fb9164226eb31cec8c386a373337472d1cdb64e7559832310e9cce880cbc841a26fd3dfb1eaa60af700a7"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) sched_yield() write$binfmt_script(r0, &(0x7f00000012c0)={'#! ', './file0'}, 0xb) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r14, 0x89f2, &(0x7f00000008c0)={'ip6_vti0\x00', &(0x7f0000000840)={'ip6tnl0\x00', 0x0, 0x2f, 0x4, 0xc1, 0x5, 0xf, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x7800, 0x101, 0x5}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r13, 0x40189429, &(0x7f0000000900)={0x0, 0x7f, 0xf}) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 660.415285ms ago: executing program 4 (id=7865): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x40000}, 0x18) syz_usb_disconnect(0xffffffffffffffff) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) mq_getsetattr(r1, &(0x7f0000000200)={0x8000, 0x4, 0xf, 0xcf2a}, &(0x7f0000000240)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f0000000340)='GPL\x00', 0x7, 0x80, &(0x7f00000006c0)=""/128, 0x41100, 0x34, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000740)={0xa, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0), 0x10, 0x1ff}, 0x94) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000180)={'\x00', 0xffff, 0x400, 0x10001, 0xfffffffffffffffa, 0x5, 0x0}) mq_notify(r1, &(0x7f0000000000)={0x110c230000, 0x3, 0x1, @tid=r2}) 529.229507ms ago: executing program 2 (id=7868): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x98, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x6c, 0x3, 0x0, 0x1, [{0x68, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x5c, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x10000}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}]}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xfc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 516.212829ms ago: executing program 9 (id=7869): r0 = socket$inet_sctp(0x2, 0x5, 0x84) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="2b6853affe126c6220"], 0x9) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r7 = gettid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x18, 0x7ffc1fff}]}) rt_tgsigqueueinfo(0x0, r7, 0x7, &(0x7f00000019c0)={0x0, 0x3, 0x4}) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r8, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) syz_usbip_server_init(0x6) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd2d, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x300}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x3000000, 0x40000000}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8000, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x800000, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x80000001}, {}, {0x0, 0x10}, {0x0, 0x470a, 0x0, 0x8000000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x0, 0xffb}, {0x0, 0x0, 0x0, 0x8000000, 0x80000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x20000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3}, {0x0, 0x0, 0x0, 0xfffffffc, 0x5}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x60569add}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x2}, {}, {0x80}, {0x80}, {0x0, 0x0, 0x0, 0x5, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x2, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x8, 0x0, 0x3}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5, 0x0, 0x0, 0x0, 0x0, 0xd2f8}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x7}, {0x0, 0x2}, {0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9}, {0x0, 0xfffffffc, 0x200}, {0x0, 0x0, 0x0, 0x200}, {}, {0x4}, {}, {0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x3, 0xfffffffe}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, {0x0, 0xb}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x0, 0xec33, 0x0, 0x4}, {}, {0xb, 0x0, 0x0, 0x0, 0x0, 0xfe1}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0xfffffffc}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {0x0, 0x8, 0x0, 0x0, 0xfffffffe}, {0x4, 0x2, 0x2000000, 0x2, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0xe9d, 0x58a}, {0x2}, {0x2, 0x9, 0x20000000}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe600, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x10000, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x2d, 0x0, 0x10000}, {0x0, 0x0, 0x8000}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800, 0x4, 0x6}, {0x0, 0x3}, {0xffffffff, 0x0, 0x0, 0x0, 0xd}], [{}, {}, {}, {0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {0x5}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {0x4}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x5, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 511.104639ms ago: executing program 2 (id=7870): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x28000600) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000500)='|', 0x1}], 0x1, 0x0) 416.007138ms ago: executing program 3 (id=7871): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x245ce000) getrlimit(0xc, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r0}, 0x18) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) recvmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) 287.914272ms ago: executing program 3 (id=7872): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000000306010100000000000000aa010000000500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x38000016) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f000000a780), 0xffffffffffffffff) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x1) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x8040) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x80) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010300000ae6f72087a003"], 0x3c}}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="230200000000000000000300000008000200050000001400010000edff"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0xa800) 97.21843ms ago: executing program 3 (id=7873): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) pipe2$9p(&(0x7f0000000240), 0x800) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000180)={0x0, &(0x7f0000000080)}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r1, &(0x7f0000000080), &(0x7f0000000440)}, 0x20) syz_emit_ethernet(0xae, &(0x7f0000000440)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60f4adf700382900000000000000000000f9000000000000ff020000000000000000000000000001"], 0x0) 82.241182ms ago: executing program 3 (id=7874): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='gtp\x00\xe4\xaa\xae\xdf~2\xa6X\x14\x92\xdarV\xf4U\xf7\xa2\xc3l\x1b@\xaf\xf9\xc9\xa9#\xf0S\xd9=q\xd6\x14\xedt\xc8!W\xe9@\xeb\x7f~\tB0EE\x9a:\xb7\xff\xc1\xfc\x9a\x1f\xf2\xfb\x19\xda#x\xc5F\x1c~\x8c\xe1\xdf\xdc\x01k\f\xde0~\x95\r\xa2\x80\b4M\x14\xe7\xd0\t`n!g\x14\xe6\xd1\xc2\xd3\x88\xf8cVtd\xbeY\xa5\xe7\x16sD\x96}7\n\x88e\x00\xf0\xff\xff\xf0\xcb\x94\xb4S\x00\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140"], 0xfc}}, 0x0) 58.826434ms ago: executing program 0 (id=7875): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @loopback, 0x10000bff}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8ed50f638facd57de629163"}, 0x8000000000000001, 0x2, 0x3}}}, 0x118) syz_usb_connect$cdc_ecm(0x7, 0x72, &(0x7f0000000340)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x1, 0x1, 0x0, 0x80, 0x2, [{{0x9, 0x4, 0x0, 0xbc, 0x3, 0x2, 0x6, 0x0, 0x4, {{0xb, 0x24, 0x6, 0x0, 0x0, "078d84ab8dd1"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x1, 0x9500, 0x7}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x6f}, @obex={0x5, 0x24, 0x15, 0x7}, @mdlm={0x15, 0x24, 0x12, 0x6}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x8c, 0x80, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x2, 0x7, 0x9}}}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0xcd, 0xd0, 0xbf, 0x8, 0x4}, 0xf3, &(0x7f00000003c0)={0x5, 0xf, 0xf3, 0x4, [@generic={0xd0, 0x10, 0x3, "54643dab6186f7bfe2186b76c7d444c35853e0b6089b7f8e1bc8a98eed162356ba5e370e18f1b0376787ae814abb7e9aadba1da82aa43daac588c162159c62b32479a822df9457141a473d4ba3e23c51d13af203df59b6f41291a1065be7a2eab6ecd2afc7f8f3351df26a73dbbcc739558a789c83563456019aee03f3b215447810c9e07a436c5f0733c1bb1f272141d3d2d68faf0d596a4f6ada76e71d60d804a330646274863d60f5a06d3387967561f697456587621506d994e100e09bf340eb9f5dd3b5d3f171805f5bfd"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "ea06a4df7ea578221650891ed3627181"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x3, 0x5, 0x39}]}, 0x4, [{0x44, &(0x7f00000004c0)=@string={0x44, 0x3, "04b8e19d3afc9b0eca363ef962f888b5601c0113e80854bbecf340705d8430dae8a86f61183aa5ab4efa1b13815ce4699a8bb9f152e1b00a5a6d4581354ee3feb8f7"}}, {0xc6, &(0x7f0000000600)=@string={0xc6, 0x3, "b0e48ffbe77e1afa3b44d76197f2f0f4d692aec8deff6d5526a34aa8b4e46f26230246f0511ce69ca66c49fd7d8571888cf7d9f6ffdb09b8743fdbd0f78eb34eb7274b144ab353d6e1a416bb6ebf98e9dc6a37e651aa998769cd570c1ffc69c05c6a30385f3dd827ae5007765cd0c6de8eef99b16666bd921eff376c55dd238dc33afc5b94867a2585e483c56226400a89dc41f2966cd9a5a9600e630d61de87c588148b7899fd094059c842d17b975c263477fb5d30180e40b995e504055839cf348180"}}, {0xa8, &(0x7f0000000700)=@string={0xa8, 0x3, "a7114a8a10a9f376286effab1daf2139b767ba1cb8ed2660d0a59ce1a92c613f3cc6f323114f9da1f481eef93b83d00eac2b022ce1468b28a6189ba5c7adcaf0521d351b48d1aec692fcfb71af535fbd9397b717a08e7083f25b5756cc1591abe00281b6cdd5205e8a89f4729cd86437532766a6a829af33527f9b5914786b6b99b983f2d6230a63d16e8960ed969027b3de08be4e184eddeffbd9ecad923b721fb929bce6f5"}}, {0xca, &(0x7f00000007c0)=@string={0xca, 0x3, "ac3bfa9f6104db7f13df26fb34908a88b55a18d2d6960f014dd02090ecca6dbd17b4ae9c6759b75a5511349a74d8461c697d89397ead043fc770d664c4267db4f8ab21937fa14f60883702f9722c0d0cdd5d10b40281a43443d7bb2c2a41b5e1db482bad216dd66d1cf8e093f91a08eda52340c671c3d53b1c8e3a8d6546165dd467cd09a3a7ffc818435b34300bb2da45b728c96fefcfb93089d86ed47f373b7d3c9c47cfa933ba7017e4e079fdd0f65d693708c0da94ab9f1ff4495c7632cbb4dbfdef79545063"}}]}) 56.303454ms ago: executing program 3 (id=7876): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x558}}, 0x40) 0s ago: executing program 3 (id=7877): syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="00b94049504d1d4c23d692e4c1ae3da81457ad223dad027cd2412bda37151c79aca171fa844c3b01f84323acc83100610a47da7bbb5f", @ANYBLOB="2087c3964e04d543d44482b9ffb34b7aca30352b30a934804ea7a43f10e30ec41d1569808f2f256b3d8b071397655f588b802e4f8160e6f476666513260a88baae0cb9edd72cfd903a97a41cae56360d94bb0de0302e813406b8227c3465290f4eb36b107be9745ec3d7834d75a45ca7db5b5b9e0f68348dad66fc617bad7492b80e87e94126eb45bdd0697f0c0c8bedd559b2f2afadfddc44a08e2b0ac1fd25146198af1b8ee5d1829a7afaa9ae02b0782252d3a0c2b08f5bec65e2a9b2176f3865e3d46d8c0a7225", @ANYRESOCT, @ANYRES32=0x0, @ANYRES16, @ANYRES16, @ANYRESDEC], 0x9, 0x3a7, &(0x7f00000003c0)="$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") (async, rerun: 32) r0 = getpid() (rerun: 32) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r4, 0x0, 0xfffffffffffffff4}, 0x18) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@errors_remount}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") (async) r5 = syz_pidfd_open(r2, 0x0) setns(r5, 0x24020000) (async) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x4480, &(0x7f0000000180)=ANY=[@ANYBLOB="6d706f6c3d696e742c342c372c0022e709dc00000000435044b9f221b79ddf0fe6db5c8d14fa4db4065eee551e40d55b47b4538b9103794696d54abdb276aaa44a858e9b4d95aeee5d2eaa8f6d85c841f95c04f07861894f31dc6e21f5cdfb9d3301da1d7f8a26121c586bec0bcfaf8c87b8c07e3044331f636334706ef8d3eb8ec03b2cd62af17a5c744435f3914a150c6d"]) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) (async, rerun: 64) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r6, 0x0, 0xfffffffffffffffc}, 0x18) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, 0x0) syz_emit_ethernet(0xd2, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffbfff00000000000086dd600489f1009c1100fc010000000000000025030000000000ff020000000000000000000000000001"], 0x0) mount(0x0, &(0x7f0000000140)='.\x00', 0x0, 0x90b062, 0x0) kernel console output (not intermixed with test programs): [ 422.221316][T30309] simple_read_from_buffer+0xb5/0x130 [ 422.221344][T30309] proc_fail_nth_read+0x10e/0x150 [ 422.221428][T30309] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 422.221461][T30309] vfs_read+0x1a8/0x770 [ 422.221533][T30309] ? __rcu_read_unlock+0x4f/0x70 [ 422.221555][T30309] ? __fget_files+0x184/0x1c0 [ 422.221625][T30309] ksys_read+0xda/0x1a0 [ 422.221647][T30309] __x64_sys_read+0x40/0x50 [ 422.221668][T30309] x64_sys_call+0x27c0/0x3000 [ 422.221730][T30309] do_syscall_64+0xd2/0x200 [ 422.221747][T30309] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 422.221834][T30309] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 422.221873][T30309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.221896][T30309] RIP: 0033:0x7f686dcde0dc [ 422.221911][T30309] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 422.221997][T30309] RSP: 002b:00007f686c747030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 422.222014][T30309] RAX: ffffffffffffffda RBX: 00007f686df35fa0 RCX: 00007f686dcde0dc [ 422.222027][T30309] RDX: 000000000000000f RSI: 00007f686c7470a0 RDI: 0000000000000004 [ 422.222038][T30309] RBP: 00007f686c747090 R08: 0000000000000000 R09: 0000000000000000 [ 422.222048][T30309] R10: 000000000000fe44 R11: 0000000000000246 R12: 0000000000000001 [ 422.222059][T30309] R13: 00007f686df36038 R14: 00007f686df35fa0 R15: 00007fff9dbb2318 [ 422.222076][T30309] [ 422.432970][ T3559] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.442070][ T3559] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.450498][ T3559] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.458686][ T3559] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.520489][T29815] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 422.528498][T30326] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 422.530199][T29815] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 422.535149][T30326] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 422.535248][T30326] vhci_hcd vhci_hcd.0: Device attached [ 422.611946][T30346] vhci_hcd: connection closed [ 422.612291][ T3559] vhci_hcd: stop threads [ 422.621434][ T3559] vhci_hcd: release socket [ 422.625928][ T3559] vhci_hcd: disconnect device [ 422.633263][T29815] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 422.643108][T29815] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 422.672002][ T3586] IPVS: stop unused estimator thread 0... [ 422.712796][T29815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.727753][T29815] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.754838][ T3559] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.761910][ T3559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.771731][ T3559] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.778873][ T3559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.794716][T29815] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 422.805248][T29815] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 422.913555][T30376] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6997'. [ 422.922576][T30376] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6997'. [ 422.946907][T30376] loop9: detected capacity change from 0 to 512 [ 422.989843][T30376] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 422.997897][T30376] EXT4-fs (loop9): orphan cleanup on readonly fs [ 423.007049][T30376] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #16: comm +}[@: corrupted inode contents [ 423.019270][T30376] EXT4-fs (loop9): Remounting filesystem read-only [ 423.025893][T30376] EXT4-fs (loop9): 1 truncate cleaned up [ 423.169532][ T3559] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 423.180147][ T3559] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 423.207605][ T3559] EXT4-fs (loop9): Quota write (off=8, len=24) cancelled because transaction is not started [ 423.225546][T30376] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 423.306752][T29815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 423.428655][T29815] veth0_vlan: entered promiscuous mode [ 423.438654][T29815] veth1_vlan: entered promiscuous mode [ 423.471654][T29815] veth0_macvtap: entered promiscuous mode [ 423.488330][T29815] veth1_macvtap: entered promiscuous mode [ 423.510174][T29815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 423.524557][T29815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 423.544907][ T3586] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.610650][T25029] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.622031][ T3586] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.650380][ T3572] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.667432][ T3572] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.710028][T30412] sd 0:0:1:0: device reset [ 423.773995][T30421] loop1: detected capacity change from 0 to 512 [ 423.784989][T30421] ext4: Unknown parameter 'uid<00000000000000000000' [ 423.803474][ T29] kauditd_printk_skb: 214 callbacks suppressed [ 423.803489][ T29] audit: type=1400 audit(404.758:32168): avc: denied { setopt } for pid=30416 comm="syz.9.7006" laddr=::ac14:14aa lport=56363 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 423.842966][T30426] serio: Serial port ptm1 [ 423.924416][ T29] audit: type=1400 audit(404.861:32169): avc: denied { tracepoint } for pid=30437 comm="syz.0.7011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 423.960014][ T29] audit: type=1400 audit(404.898:32170): avc: denied { write } for pid=30437 comm="syz.0.7011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 423.979294][ T29] audit: type=1326 audit(404.898:32171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30437 comm="syz.0.7011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f906427f6c9 code=0x7ffc0000 [ 424.002389][ T29] audit: type=1326 audit(404.898:32172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30437 comm="syz.0.7011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f906427f6c9 code=0x7ffc0000 [ 424.025949][ T29] audit: type=1326 audit(404.898:32173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30437 comm="syz.0.7011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f906427f6c9 code=0x7ffc0000 [ 424.048938][ T29] audit: type=1326 audit(404.898:32174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30437 comm="syz.0.7011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f906427f6c9 code=0x7ffc0000 [ 424.071973][ T29] audit: type=1326 audit(404.898:32175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30437 comm="syz.0.7011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f906427f6c9 code=0x7ffc0000 [ 424.094982][ T29] audit: type=1326 audit(404.898:32176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30437 comm="syz.0.7011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f906427f6c9 code=0x7ffc0000 [ 424.118007][ T29] audit: type=1326 audit(404.898:32177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30437 comm="syz.0.7011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f906427f6c9 code=0x7ffc0000 [ 424.719214][T30451] loop9: detected capacity change from 0 to 736 [ 424.777252][T30472] loop9: detected capacity change from 0 to 512 [ 424.804614][T30475] loop1: detected capacity change from 0 to 512 [ 424.934949][T30472] EXT4-fs (loop9): orphan cleanup on readonly fs [ 424.942330][T30472] EXT4-fs error (device loop9): ext4_orphan_get:1418: comm syz.9.7021: bad orphan inode 13 [ 424.961336][T30472] ext4_test_bit(bit=12, block=18) = 1 [ 424.966876][T30472] is_bad_inode(inode)=0 [ 424.971035][T30472] NEXT_ORPHAN(inode)=2130706432 [ 424.975902][T30472] max_ino=32 [ 424.979135][T30472] i_nlink=1 [ 424.986380][T30475] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 425.032860][T30472] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 425.138272][T30472] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended [ 425.159583][T29815] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.173612][T30489] netlink: 96 bytes leftover after parsing attributes in process `syz.3.7025'. [ 425.194299][T30472] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 425.201882][T30494] EXT4-fs error (device loop9): ext4_lookup:1787: inode #15: comm syz.9.7021: iget: bad i_size value: 360287970189639690 [ 425.221533][T30472] EXT4-fs error (device loop9): ext4_lookup:1787: inode #15: comm syz.9.7021: iget: bad i_size value: 360287970189639690 [ 425.330548][T30472] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.389386][T30472] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.613095][T30472] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.652758][T30528] FAULT_INJECTION: forcing a failure. [ 425.652758][T30528] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 425.666436][T30528] CPU: 1 UID: 0 PID: 30528 Comm: syz.1.7036 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 425.666488][T30528] Tainted: [W]=WARN [ 425.666496][T30528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 425.666512][T30528] Call Trace: [ 425.666519][T30528] [ 425.666528][T30528] __dump_stack+0x1d/0x30 [ 425.666556][T30528] dump_stack_lvl+0xe8/0x140 [ 425.666581][T30528] dump_stack+0x15/0x1b [ 425.666598][T30528] should_fail_ex+0x265/0x280 [ 425.666722][T30528] should_fail+0xb/0x20 [ 425.666738][T30528] should_fail_usercopy+0x1a/0x20 [ 425.666805][T30528] _copy_from_user+0x1c/0xb0 [ 425.666838][T30528] __sys_bpf+0x183/0x7c0 [ 425.666927][T30528] __x64_sys_bpf+0x41/0x50 [ 425.666964][T30528] x64_sys_call+0x2aee/0x3000 [ 425.667039][T30528] do_syscall_64+0xd2/0x200 [ 425.667063][T30528] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 425.667099][T30528] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 425.667142][T30528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.667291][T30528] RIP: 0033:0x7f0a99a6f6c9 [ 425.667310][T30528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.667334][T30528] RSP: 002b:00007f0a984cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 425.667359][T30528] RAX: ffffffffffffffda RBX: 00007f0a99cc5fa0 RCX: 00007f0a99a6f6c9 [ 425.667375][T30528] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 425.667392][T30528] RBP: 00007f0a984cf090 R08: 0000000000000000 R09: 0000000000000000 [ 425.667411][T30528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 425.667423][T30528] R13: 00007f0a99cc6038 R14: 00007f0a99cc5fa0 R15: 00007fff37474f68 [ 425.667525][T30528] [ 425.854426][T30472] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.939780][ T3559] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.957530][ T3559] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.970248][ T3559] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.978649][ T3559] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.979007][T25029] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.006082][T30550] syz_tun: entered allmulticast mode [ 426.016555][T30549] syz_tun: left allmulticast mode [ 426.094647][T30558] sd 0:0:1:0: device reset [ 426.472286][T30594] serio: Serial port ptm0 [ 427.130194][T30610] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7049'. [ 427.139359][T30610] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7049'. [ 427.408388][T30624] sd 0:0:1:0: device reset [ 427.711126][T30657] netlink: 'syz.9.7069': attribute type 1 has an invalid length. [ 428.223152][T30709] netlink: 'syz.9.7080': attribute type 1 has an invalid length. [ 428.398626][T30725] sd 0:0:1:0: device reset [ 428.426310][T30727] FAULT_INJECTION: forcing a failure. [ 428.426310][T30727] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 428.439409][T30727] CPU: 1 UID: 0 PID: 30727 Comm: syz.0.7086 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 428.439445][T30727] Tainted: [W]=WARN [ 428.439453][T30727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 428.439532][T30727] Call Trace: [ 428.439539][T30727] [ 428.439548][T30727] __dump_stack+0x1d/0x30 [ 428.439572][T30727] dump_stack_lvl+0xe8/0x140 [ 428.439594][T30727] dump_stack+0x15/0x1b [ 428.439611][T30727] should_fail_ex+0x265/0x280 [ 428.439703][T30727] should_fail+0xb/0x20 [ 428.439721][T30727] should_fail_usercopy+0x1a/0x20 [ 428.439745][T30727] _copy_from_user+0x1c/0xb0 [ 428.439851][T30727] __sys_bpf+0x183/0x7c0 [ 428.439880][T30727] __x64_sys_bpf+0x41/0x50 [ 428.439908][T30727] x64_sys_call+0x2aee/0x3000 [ 428.440012][T30727] do_syscall_64+0xd2/0x200 [ 428.440039][T30727] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 428.440126][T30727] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 428.440222][T30727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.440245][T30727] RIP: 0033:0x7f906427f6c9 [ 428.440259][T30727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 428.440276][T30727] RSP: 002b:00007f9062ce7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 428.440295][T30727] RAX: ffffffffffffffda RBX: 00007f90644d5fa0 RCX: 00007f906427f6c9 [ 428.440353][T30727] RDX: 000000000000000c RSI: 0000200000000400 RDI: 0000000000000023 [ 428.440371][T30727] RBP: 00007f9062ce7090 R08: 0000000000000000 R09: 0000000000000000 [ 428.440450][T30727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.440461][T30727] R13: 00007f90644d6038 R14: 00007f90644d5fa0 R15: 00007ffd53aa23a8 [ 428.440480][T30727] [ 428.632645][T30731] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.659918][T30739] netlink: 'syz.9.7091': attribute type 1 has an invalid length. [ 428.712716][T30731] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.752345][T30731] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.816575][T30731] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.900693][ T3572] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.916289][T30765] SELinux: security_context_str_to_sid (]6P9A;J [ 428.916289][T30765] Bg會m2w"uw6buD2P/I{)$k#>Og?ٓмhP[~݌T?S[LY0LԶv0}d>H&x/##ҵ'[KO8weq>L8~Y<݄-$Fh<6d) failed with errno=-22 [ 428.950378][ T3585] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.967385][ T3585] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.976653][ T3585] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.985277][T30765] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7095'. [ 429.053409][T30765] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7095'. [ 429.619812][T30815] netlink: 'syz.4.7103': attribute type 1 has an invalid length. [ 429.676262][ T29] kauditd_printk_skb: 564 callbacks suppressed [ 429.676276][ T29] audit: type=1326 audit(410.248:32742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30816 comm="syz.4.7104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eb620f6c9 code=0x7ffc0000 [ 429.695075][T30817] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12) [ 429.712075][T30817] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 429.720314][T30817] vhci_hcd vhci_hcd.0: Device attached [ 429.727245][ T29] audit: type=1326 audit(410.248:32743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30816 comm="syz.4.7104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eb620f6c9 code=0x7ffc0000 [ 429.750266][ T29] audit: type=1326 audit(410.248:32744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30816 comm="syz.4.7104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f3eb620f6c9 code=0x7ffc0000 [ 429.773387][ T29] audit: type=1326 audit(410.248:32745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30816 comm="syz.4.7104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eb620f6c9 code=0x7ffc0000 [ 429.796521][ T29] audit: type=1326 audit(410.248:32746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30816 comm="syz.4.7104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eb620f6c9 code=0x7ffc0000 [ 429.819513][ T29] audit: type=1326 audit(410.248:32747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30816 comm="syz.4.7104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3eb620f6c9 code=0x7ffc0000 [ 429.842426][ T29] audit: type=1326 audit(410.248:32748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30816 comm="syz.4.7104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eb620f6c9 code=0x7ffc0000 [ 429.865422][ T29] audit: type=1326 audit(410.248:32749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30816 comm="syz.4.7104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3eb620f6c9 code=0x7ffc0000 [ 429.888388][ T29] audit: type=1326 audit(410.248:32750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30816 comm="syz.4.7104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eb620f6c9 code=0x7ffc0000 [ 429.911365][ T29] audit: type=1326 audit(410.248:32751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30816 comm="syz.4.7104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f3eb620f6c9 code=0x7ffc0000 [ 429.934700][T30818] vhci_hcd: connection closed [ 429.935522][ T3572] vhci_hcd: stop threads [ 429.944503][ T3572] vhci_hcd: release socket [ 429.949060][ T3572] vhci_hcd: disconnect device [ 430.219834][T30833] xt_CT: You must specify a L4 protocol and not use inversions on it [ 430.633395][T30843] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12) [ 430.640057][T30843] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 430.648287][T30843] vhci_hcd vhci_hcd.0: Device attached [ 430.658999][T30844] vhci_hcd: connection closed [ 430.659147][ T3586] vhci_hcd: stop threads [ 430.668133][ T3586] vhci_hcd: release socket [ 430.672568][ T3586] vhci_hcd: disconnect device [ 430.675595][T30847] netlink: 'syz.3.7114': attribute type 1 has an invalid length. [ 430.968181][T30862] loop9: detected capacity change from 0 to 512 [ 430.974879][T30862] ext4: Unknown parameter 'uid<00000000000000000000' [ 431.156914][T30875] loop9: detected capacity change from 0 to 1024 [ 431.163581][T30875] EXT4-fs: Ignoring removed orlov option [ 431.171716][T30875] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 431.195600][T30875] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(12) [ 431.202206][T30875] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 431.210386][T30875] vhci_hcd vhci_hcd.0: Device attached [ 431.217295][T30880] vhci_hcd: connection closed [ 431.218002][ T3585] vhci_hcd: stop threads [ 431.226959][ T3585] vhci_hcd: release socket [ 431.231407][ T3585] vhci_hcd: disconnect device [ 431.272757][T30884] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 431.282502][T30883] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 431.300352][T30883] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7124'. [ 431.309987][T30884] SELinux: Context system_u:object_r:getty_etc_t:s0 is not valid (left unmapped). [ 431.725523][T30896] chnl_net:caif_netlink_parms(): no params data found [ 431.763301][T25029] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.783116][T30896] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.787667][T31065] loop9: detected capacity change from 0 to 256 [ 431.790430][T30896] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.803710][T30896] bridge_slave_0: entered allmulticast mode [ 431.803690][T31065] FAT-fs (loop9): Directory bread(block 64) failed [ 431.810353][T30896] bridge_slave_0: entered promiscuous mode [ 431.817047][T31065] FAT-fs (loop9): Directory bread(block 65) failed [ 431.824588][T30896] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.829226][T31065] FAT-fs (loop9): Directory bread(block 66) failed [ 431.835598][T30896] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.842417][T31065] FAT-fs (loop9): Directory bread(block 67) failed [ 431.849721][T30896] bridge_slave_1: entered allmulticast mode [ 431.855767][T31065] FAT-fs (loop9): Directory bread(block 68) failed [ 431.862485][T30896] bridge_slave_1: entered promiscuous mode [ 431.868357][T31065] FAT-fs (loop9): Directory bread(block 69) failed [ 431.883117][T31065] FAT-fs (loop9): Directory bread(block 70) failed [ 431.891310][T31065] FAT-fs (loop9): Directory bread(block 71) failed [ 431.892332][T30896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.898088][T31065] FAT-fs (loop9): Directory bread(block 72) failed [ 431.908899][T30896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.914478][T31065] FAT-fs (loop9): Directory bread(block 73) failed [ 431.938855][T30896] team0: Port device team_slave_0 added [ 431.947429][T30896] team0: Port device team_slave_1 added [ 431.964519][T30896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 431.971533][T30896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 431.997484][T30896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 432.008907][T30896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.015922][T30896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 432.042025][T30896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 432.069256][T30896] hsr_slave_0: entered promiscuous mode [ 432.075208][T30896] hsr_slave_1: entered promiscuous mode [ 432.081818][T30896] debugfs: 'hsr0' already exists in 'hsr' [ 432.087559][T30896] Cannot create hsr debugfs directory [ 432.139931][T30896] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.194396][T30896] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.247779][T30896] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.290553][T30896] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.368321][T30896] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 432.376970][T30896] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 432.385519][T30896] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 432.394001][T30896] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 432.408824][T30896] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.415965][T30896] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.423210][T30896] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.430256][T30896] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.461391][T30896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.473295][ T3586] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.482486][ T3586] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.495109][T30896] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.505446][ T3586] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.512532][ T3586] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.523241][ T3565] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.530354][ T3565] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.598550][T30896] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.679458][T30896] veth0_vlan: entered promiscuous mode [ 432.688424][T30896] veth1_vlan: entered promiscuous mode [ 432.705532][T30896] veth0_macvtap: entered promiscuous mode [ 432.714199][T30896] veth1_macvtap: entered promiscuous mode [ 432.721153][T31273] netlink: 128 bytes leftover after parsing attributes in process `syz.4.7136'. [ 432.728847][T30896] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 432.743603][T30896] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 432.755719][ T3565] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.766376][ T3565] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.801454][ T3565] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.819578][ T3565] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.112756][T31301] sch_tbf: burst 2061 is lower than device lo mtu (65550) ! [ 433.782358][T31321] Process accounting resumed [ 433.811388][ T3572] Bluetooth: hci0: Frame reassembly failed (-84) [ 433.866157][T31331] loop9: detected capacity change from 0 to 8192 [ 433.925371][T31331] loop9: p1 p3 [ 433.928976][T31331] loop9: p1 start 51314688 is beyond EOD, truncated [ 433.935648][T31331] loop9: p3 start 65536 is beyond EOD, truncated [ 433.963937][T31331] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7152'. [ 433.977421][T31331] team0 (unregistering): Port device team_slave_0 removed [ 433.986495][T31331] team0 (unregistering): Port device team_slave_1 removed [ 433.998474][T14018] syz!: Port: 1 Link DOWN [ 434.098918][T31376] sd 0:0:1:0: device reset [ 435.062334][ T29] kauditd_printk_skb: 293 callbacks suppressed [ 435.062407][ T29] audit: type=1326 audit(415.281:33045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31400 comm="syz.9.7165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9398df6c9 code=0x7ffc0000 [ 435.091828][ T29] audit: type=1326 audit(415.281:33046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31400 comm="syz.9.7165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9398df6c9 code=0x7ffc0000 [ 435.114965][ T29] audit: type=1326 audit(415.281:33047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31400 comm="syz.9.7165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7fb9398df6c9 code=0x7ffc0000 [ 435.124977][T31403] loop9: detected capacity change from 0 to 512 [ 435.138016][ T29] audit: type=1326 audit(415.281:33048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31400 comm="syz.9.7165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9398df6c9 code=0x7ffc0000 [ 435.138253][ T29] audit: type=1326 audit(415.318:33049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31402 comm="syz.9.7166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9398df6c9 code=0x7ffc0000 [ 435.177258][T31403] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 435.190238][ T29] audit: type=1326 audit(415.318:33050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31402 comm="syz.9.7166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9398df6c9 code=0x7ffc0000 [ 435.225650][ T29] audit: type=1326 audit(415.318:33051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31402 comm="syz.9.7166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb9398df6c9 code=0x7ffc0000 [ 435.248799][ T29] audit: type=1326 audit(415.318:33052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31402 comm="syz.9.7166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9398df6c9 code=0x7ffc0000 [ 435.271902][ T29] audit: type=1326 audit(415.318:33053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31402 comm="syz.9.7166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9398df6c9 code=0x7ffc0000 [ 435.295045][ T29] audit: type=1326 audit(415.318:33054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31402 comm="syz.9.7166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb9398df6c9 code=0x7ffc0000 [ 435.329229][T25029] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.444087][T31415] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 435.444087][T31415] program syz.3.7168 not setting count and/or reply_len properly [ 435.490287][T31421] netlink: 'syz.0.7171': attribute type 1 has an invalid length. [ 436.009973][T29722] Bluetooth: hci0: command 0x1003 tx timeout [ 436.010349][ T3669] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 436.576519][T31443] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(14) [ 436.583203][T31443] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 436.591437][T31443] vhci_hcd vhci_hcd.0: Device attached [ 436.640565][T31444] vhci_hcd: connection closed [ 436.640795][ T3586] vhci_hcd: stop threads [ 436.649749][ T3586] vhci_hcd: release socket [ 436.654183][ T3586] vhci_hcd: disconnect device [ 437.176072][T31526] loop9: detected capacity change from 0 to 8192 [ 437.207445][T31526] loop9: p1 p3 [ 437.211023][T31526] loop9: p1 start 51314688 is beyond EOD, truncated [ 437.217716][T31526] loop9: p3 start 65536 is beyond EOD, truncated [ 437.263844][T31526] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7198'. [ 437.969470][T31582] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 437.976237][T31582] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 437.984402][T31582] vhci_hcd vhci_hcd.0: Device attached [ 438.002159][T31586] vhci_hcd: connection closed [ 438.002371][ T3586] vhci_hcd: stop threads [ 438.011356][ T3586] vhci_hcd: release socket [ 438.015778][ T3586] vhci_hcd: disconnect device [ 438.020885][T31590] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(14) [ 438.027505][T31590] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 438.035737][T31590] vhci_hcd vhci_hcd.0: Device attached [ 438.044905][T31591] vhci_hcd: connection closed [ 438.045105][ T3586] vhci_hcd: stop threads [ 438.054124][ T3586] vhci_hcd: release socket [ 438.058542][ T3586] vhci_hcd: disconnect device [ 438.127534][T31594] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7211'. [ 438.246824][T31605] loop9: detected capacity change from 0 to 512 [ 438.255977][T31605] EXT4-fs error (device loop9): ext4_acquire_dquot:6945: comm syz.9.7214: Failed to acquire dquot type 1 [ 438.268088][T31605] EXT4-fs (loop9): 1 truncate cleaned up [ 438.274264][T31605] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 438.312390][T25029] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.405421][T31619] loop9: detected capacity change from 0 to 8192 [ 438.447434][T31619] loop9: p1 p3 [ 438.451061][T31619] loop9: p1 start 51314688 is beyond EOD, truncated [ 438.457674][T31619] loop9: p3 start 65536 is beyond EOD, truncated [ 438.484233][T31630] IPv6: NLM_F_CREATE should be specified when creating new route [ 438.503880][T31619] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7218'. [ 438.556790][T31638] loop9: detected capacity change from 0 to 8192 [ 438.587248][T31638] loop9: p1 p3 [ 438.591070][T31638] loop9: p1 start 51314688 is beyond EOD, truncated [ 438.597773][T31638] loop9: p3 start 65536 is beyond EOD, truncated [ 438.662107][T31638] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7223'. [ 439.171139][T31700] netlink: 'syz.9.7233': attribute type 13 has an invalid length. [ 439.188425][T31700] gretap0: refused to change device tx_queue_len [ 439.194784][T31700] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 439.244618][T31704] loop9: detected capacity change from 0 to 1024 [ 439.251318][T31704] EXT4-fs: Ignoring removed orlov option [ 439.258667][T31704] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 439.289594][T31704] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(12) [ 439.296297][T31704] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 439.304420][T31704] vhci_hcd vhci_hcd.0: Device attached [ 439.312581][T31708] vhci_hcd: connection closed [ 439.313002][ T3572] vhci_hcd: stop threads [ 439.321979][ T3572] vhci_hcd: release socket [ 439.326411][ T3572] vhci_hcd: disconnect device [ 439.578517][T31719] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 439.578517][T31719] program syz.4.7239 not setting count and/or reply_len properly [ 439.595194][T31721] sd 0:0:1:0: device reset [ 439.881187][T25029] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.682008][ T29] kauditd_printk_skb: 328 callbacks suppressed [ 440.682026][ T29] audit: type=1400 audit(420.547:33381): avc: denied { ioctl } for pid=31780 comm="syz.4.7252" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 440.716386][T31781] netlink: 'syz.4.7252': attribute type 11 has an invalid length. [ 440.794384][T31788] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7253'. [ 440.810270][T31788] team0 (unregistering): Port device team_slave_0 removed [ 440.819334][T31788] team0 (unregistering): Port device team_slave_1 removed [ 440.862807][T31796] serio: Serial port ptm4 [ 440.936682][T31843] serio: Serial port ptm5 [ 440.947960][ T29] audit: type=1400 audit(420.790:33382): avc: denied { shutdown } for pid=31846 comm="syz.0.7264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 440.967436][ T29] audit: type=1326 audit(420.790:33383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31846 comm="syz.0.7264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a2461f6c9 code=0x7ffc0000 [ 440.990582][ T29] audit: type=1326 audit(420.790:33384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31846 comm="syz.0.7264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7a2461f6c9 code=0x7ffc0000 [ 441.013630][ T29] audit: type=1326 audit(420.790:33385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31846 comm="syz.0.7264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a2461f6c9 code=0x7ffc0000 [ 441.036627][ T29] audit: type=1326 audit(420.790:33386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31846 comm="syz.0.7264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7a2461f6c9 code=0x7ffc0000 [ 441.059660][ T29] audit: type=1326 audit(420.790:33387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31846 comm="syz.0.7264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a2461f6c9 code=0x7ffc0000 [ 441.082862][ T29] audit: type=1326 audit(420.790:33388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31846 comm="syz.0.7264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7a2461f6c9 code=0x7ffc0000 [ 441.105889][ T29] audit: type=1326 audit(420.790:33389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31846 comm="syz.0.7264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a2461f6c9 code=0x7ffc0000 [ 441.128966][ T29] audit: type=1326 audit(420.790:33390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31846 comm="syz.0.7264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7a2461f6c9 code=0x7ffc0000 [ 441.185759][T31856] sd 0:0:1:0: device reset [ 441.208261][T31860] netlink: 32 bytes leftover after parsing attributes in process `syz.9.7269'. [ 441.253380][T31868] netlink: 72 bytes leftover after parsing attributes in process `gtp'. [ 441.329955][T31878] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 441.329955][T31878] program syz.0.7272 not setting count and/or reply_len properly [ 441.331196][T31881] FAULT_INJECTION: forcing a failure. [ 441.331196][T31881] name failslab, interval 1, probability 0, space 0, times 0 [ 441.359451][T31881] CPU: 0 UID: 0 PID: 31881 Comm: syz.4.7277 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 441.359487][T31881] Tainted: [W]=WARN [ 441.359495][T31881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 441.359576][T31881] Call Trace: [ 441.359582][T31881] [ 441.359590][T31881] __dump_stack+0x1d/0x30 [ 441.359658][T31881] dump_stack_lvl+0xe8/0x140 [ 441.359682][T31881] dump_stack+0x15/0x1b [ 441.359766][T31881] should_fail_ex+0x265/0x280 [ 441.359805][T31881] should_failslab+0x8c/0xb0 [ 441.359839][T31881] __kvmalloc_node_noprof+0x12e/0x670 [ 441.359921][T31881] ? alloc_netdev_mqs+0x55d/0xa50 [ 441.359947][T31881] alloc_netdev_mqs+0x55d/0xa50 [ 441.359972][T31881] ip6gre_tunnel_locate+0x1d8/0x510 [ 441.359996][T31881] ? should_fail_ex+0xdb/0x280 [ 441.360095][T31881] ? gre_flags_to_tnl_flags+0x1c1/0x1f0 [ 441.360122][T31881] ip6gre_tunnel_siocdevprivate+0x51a/0x6f0 [ 441.360161][T31881] dev_ifsioc+0x8f8/0xaa0 [ 441.360190][T31881] dev_ioctl+0x78d/0x960 [ 441.360284][T31881] sock_ioctl+0x593/0x610 [ 441.360308][T31881] ? __pfx_sock_ioctl+0x10/0x10 [ 441.360335][T31881] __se_sys_ioctl+0xce/0x140 [ 441.360363][T31881] __x64_sys_ioctl+0x43/0x50 [ 441.360388][T31881] x64_sys_call+0x1816/0x3000 [ 441.360475][T31881] do_syscall_64+0xd2/0x200 [ 441.360501][T31881] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 441.360568][T31881] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 441.360609][T31881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.360630][T31881] RIP: 0033:0x7f3eb620f6c9 [ 441.360645][T31881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 441.360665][T31881] RSP: 002b:00007f3eb4c77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 441.360709][T31881] RAX: ffffffffffffffda RBX: 00007f3eb6465fa0 RCX: 00007f3eb620f6c9 [ 441.360804][T31881] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000005 [ 441.360821][T31881] RBP: 00007f3eb4c77090 R08: 0000000000000000 R09: 0000000000000000 [ 441.360836][T31881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 441.360851][T31881] R13: 00007f3eb6466038 R14: 00007f3eb6465fa0 R15: 00007ffe5b685d78 [ 441.360875][T31881] [ 441.384235][T31864] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7271'. [ 441.631161][T31898] block device autoloading is deprecated and will be removed. [ 441.656320][T31904] sd 0:0:1:0: device reset [ 441.698724][T31914] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7284'. [ 441.887689][T31927] SELinux: security_context_str_to_sid (r) failed with errno=-22 [ 442.167755][T31934] sd 0:0:1:0: device reset [ 442.194066][T31936] loop0: detected capacity change from 0 to 1024 [ 442.201086][T31936] EXT4-fs: inline encryption not supported [ 442.213423][T31936] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 442.246324][T30896] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.353495][T31958] program syz.0.7301 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 442.399996][T31964] sd 0:0:1:0: device reset [ 442.408128][T31960] SELinux: failed to load policy [ 442.441884][T31968] loop0: detected capacity change from 0 to 1024 [ 442.448866][T31968] EXT4-fs: Ignoring removed orlov option [ 442.457471][T31968] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 442.484411][T31968] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(15) [ 442.491095][T31968] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 442.499368][T31968] vhci_hcd vhci_hcd.0: Device attached [ 442.506661][T31972] vhci_hcd: connection closed [ 442.507097][ T3559] vhci_hcd: stop threads [ 442.516146][ T3559] vhci_hcd: release socket [ 442.520615][ T3559] vhci_hcd: disconnect device [ 442.666556][T31982] FAULT_INJECTION: forcing a failure. [ 442.666556][T31982] name failslab, interval 1, probability 0, space 0, times 0 [ 442.679258][T31982] CPU: 0 UID: 0 PID: 31982 Comm: syz.4.7307 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 442.679297][T31982] Tainted: [W]=WARN [ 442.679303][T31982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 442.679313][T31982] Call Trace: [ 442.679319][T31982] [ 442.679390][T31982] __dump_stack+0x1d/0x30 [ 442.679410][T31982] dump_stack_lvl+0xe8/0x140 [ 442.679428][T31982] dump_stack+0x15/0x1b [ 442.679443][T31982] should_fail_ex+0x265/0x280 [ 442.679551][T31982] ? __tipc_nl_bearer_enable+0x7e3/0xda0 [ 442.679579][T31982] should_failslab+0x8c/0xb0 [ 442.679604][T31982] __kmalloc_cache_noprof+0x4c/0x4a0 [ 442.679646][T31982] __tipc_nl_bearer_enable+0x7e3/0xda0 [ 442.679683][T31982] tipc_nl_compat_doit+0x277/0x360 [ 442.679708][T31982] tipc_nl_compat_recv+0x689/0x800 [ 442.679773][T31982] ? __pfx___tipc_nl_bearer_enable+0x10/0x10 [ 442.679802][T31982] ? __pfx_tipc_nl_compat_bearer_enable+0x10/0x10 [ 442.679826][T31982] genl_family_rcv_msg_doit+0x143/0x1b0 [ 442.679856][T31982] genl_rcv_msg+0x422/0x460 [ 442.680023][T31982] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 442.680050][T31982] netlink_rcv_skb+0x123/0x220 [ 442.680083][T31982] ? __pfx_genl_rcv_msg+0x10/0x10 [ 442.680239][T31982] genl_rcv+0x28/0x40 [ 442.680261][T31982] netlink_unicast+0x5c0/0x690 [ 442.680295][T31982] netlink_sendmsg+0x58b/0x6b0 [ 442.680342][T31982] ? __pfx_netlink_sendmsg+0x10/0x10 [ 442.680363][T31982] __sock_sendmsg+0x145/0x180 [ 442.680389][T31982] ____sys_sendmsg+0x31e/0x4e0 [ 442.680425][T31982] ___sys_sendmsg+0x17b/0x1d0 [ 442.680459][T31982] __x64_sys_sendmsg+0xd4/0x160 [ 442.680483][T31982] x64_sys_call+0x191e/0x3000 [ 442.680525][T31982] do_syscall_64+0xd2/0x200 [ 442.680553][T31982] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 442.680586][T31982] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 442.680679][T31982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.680701][T31982] RIP: 0033:0x7f3eb620f6c9 [ 442.680717][T31982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 442.680735][T31982] RSP: 002b:00007f3eb4c77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 442.680786][T31982] RAX: ffffffffffffffda RBX: 00007f3eb6465fa0 RCX: 00007f3eb620f6c9 [ 442.680800][T31982] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 442.680812][T31982] RBP: 00007f3eb4c77090 R08: 0000000000000000 R09: 0000000000000000 [ 442.680861][T31982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 442.680873][T31982] R13: 00007f3eb6466038 R14: 00007f3eb6465fa0 R15: 00007ffe5b685d78 [ 442.680892][T31982] [ 442.941749][T31987] syzkaller0: entered promiscuous mode [ 442.947268][T31987] syzkaller0: entered allmulticast mode [ 442.952877][T31986] netlink: 48 bytes leftover after parsing attributes in process `gtp'. [ 443.089485][T32012] loop9: detected capacity change from 0 to 512 [ 443.097242][T32012] EXT4-fs error (device loop9): ext4_orphan_get:1392: inode #15: comm syz.9.7317: inode has both inline data and extents flags [ 443.110745][T32012] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.7317: couldn't read orphan inode 15 (err -117) [ 443.123552][T32012] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 443.147349][T25029] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.166444][T32019] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7318'. [ 443.176380][T32019] bridge_slave_0: default FDB implementation only supports local addresses [ 443.199574][T32021] netlink: 'syz.9.7319': attribute type 25 has an invalid length. [ 443.275394][T30896] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.328461][T32044] smc: ib device syz2 ibport 1 applied user defined pnetid S [ 443.401514][T32061] loop0: detected capacity change from 0 to 1024 [ 443.408703][T32061] EXT4-fs: Ignoring removed orlov option [ 443.416428][T32061] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 443.443102][T32061] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(15) [ 443.449750][T32061] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 443.457945][T32061] vhci_hcd vhci_hcd.0: Device attached [ 443.466008][T32068] vhci_hcd: connection closed [ 443.466110][ T3585] vhci_hcd: stop threads [ 443.475125][ T3585] vhci_hcd: release socket [ 443.479548][ T3585] vhci_hcd: disconnect device [ 444.028779][T30896] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.290751][T32105] SELinux: failed to load policy [ 444.309900][T32105] 9p: Unknown access argument rom: -22 [ 444.489765][T32124] loop0: detected capacity change from 0 to 512 [ 444.510847][T32124] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #18: comm syz.0.7355: iget: bad extra_isize 90 (inode size 256) [ 444.551978][T32124] EXT4-fs (loop0): Remounting filesystem read-only [ 444.582768][T32124] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -30) [ 444.621767][T32124] EXT4-fs (loop0): 1 orphan inode deleted [ 444.653601][T32124] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 444.695730][T32110] chnl_net:caif_netlink_parms(): no params data found [ 444.763132][T32110] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.770327][T32110] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.778653][T32110] bridge_slave_0: entered allmulticast mode [ 444.785238][T32110] bridge_slave_0: entered promiscuous mode [ 444.792341][T32110] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.799411][T32110] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.806589][T32110] bridge_slave_1: entered allmulticast mode [ 444.813733][T32110] bridge_slave_1: entered promiscuous mode [ 444.837553][T32110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 444.854282][T32110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.867195][T32313] FAULT_INJECTION: forcing a failure. [ 444.867195][T32313] name failslab, interval 1, probability 0, space 0, times 0 [ 444.879941][T32313] CPU: 0 UID: 0 PID: 32313 Comm: syz.9.7362 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 444.880029][T32313] Tainted: [W]=WARN [ 444.880036][T32313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 444.880052][T32313] Call Trace: [ 444.880061][T32313] [ 444.880070][T32313] __dump_stack+0x1d/0x30 [ 444.880098][T32313] dump_stack_lvl+0xe8/0x140 [ 444.880143][T32313] dump_stack+0x15/0x1b [ 444.880162][T32313] should_fail_ex+0x265/0x280 [ 444.880280][T32313] ? percpu_ref_init+0x9c/0x250 [ 444.880303][T32313] should_failslab+0x8c/0xb0 [ 444.880334][T32313] ? __pfx_active_io_release+0x10/0x10 [ 444.880360][T32313] __kmalloc_cache_noprof+0x4c/0x4a0 [ 444.880404][T32313] ? __pfx_active_io_release+0x10/0x10 [ 444.880509][T32313] percpu_ref_init+0x9c/0x250 [ 444.880527][T32313] ? __pfx_md_probe+0x10/0x10 [ 444.880586][T32313] mddev_init+0x47/0x420 [ 444.880624][T32313] ? __pfx_md_probe+0x10/0x10 [ 444.880650][T32313] md_alloc+0x99/0x9c0 [ 444.880686][T32313] ? __pfx_md_probe+0x10/0x10 [ 444.880706][T32313] md_alloc_and_put+0x18/0x170 [ 444.880734][T32313] md_probe+0x68/0x80 [ 444.880817][T32313] blk_request_module+0x1bd/0x1e0 [ 444.880841][T32313] blkdev_get_no_open+0x4b/0x100 [ 444.880866][T32313] bdev_file_open_by_dev+0xa5/0x250 [ 444.880946][T32313] swsusp_check+0x3f/0x290 [ 444.880976][T32313] software_resume+0x41/0x2f0 [ 444.881004][T32313] resume_store+0x2d9/0x3d0 [ 444.881042][T32313] ? __pfx_resume_store+0x10/0x10 [ 444.881071][T32313] kobj_attr_store+0x4a/0x70 [ 444.881104][T32313] ? __pfx_kobj_attr_store+0x10/0x10 [ 444.881201][T32313] sysfs_kf_write+0xfe/0x120 [ 444.881247][T32313] ? __pfx_sysfs_kf_write+0x10/0x10 [ 444.881274][T32313] kernfs_fop_write_iter+0x1eb/0x300 [ 444.881299][T32313] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 444.881330][T32313] vfs_write+0x52a/0x960 [ 444.881361][T32313] ksys_write+0xda/0x1a0 [ 444.881384][T32313] __x64_sys_write+0x40/0x50 [ 444.881406][T32313] x64_sys_call+0x2802/0x3000 [ 444.881450][T32313] do_syscall_64+0xd2/0x200 [ 444.881469][T32313] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 444.881533][T32313] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 444.881568][T32313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.881601][T32313] RIP: 0033:0x7fb9398df6c9 [ 444.881616][T32313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 444.881636][T32313] RSP: 002b:00007fb938347038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 444.881658][T32313] RAX: ffffffffffffffda RBX: 00007fb939b35fa0 RCX: 00007fb9398df6c9 [ 444.881672][T32313] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 0000000000000003 [ 444.881688][T32313] RBP: 00007fb938347090 R08: 0000000000000000 R09: 0000000000000000 [ 444.881702][T32313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 444.881714][T32313] R13: 00007fb939b36038 R14: 00007fb939b35fa0 R15: 00007ffc84169b38 [ 444.881731][T32313] [ 444.881742][T32313] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 445.033030][T32247] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(14) [ 445.189275][T32247] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 445.197627][T32247] vhci_hcd vhci_hcd.0: Device attached [ 445.206983][T32327] vhci_hcd: connection closed [ 445.217663][ T3559] vhci_hcd: stop threads [ 445.226647][ T3559] vhci_hcd: release socket [ 445.231127][ T3559] vhci_hcd: disconnect device [ 445.255649][T32110] team0: Port device team_slave_0 added [ 445.269239][T32110] team0: Port device team_slave_1 added [ 445.298855][T32110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 445.306050][T32110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 445.331948][T32110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 445.343229][T32110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 445.350201][T32110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 445.376198][T32110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 445.407118][T32110] hsr_slave_0: entered promiscuous mode [ 445.413511][T32110] hsr_slave_1: entered promiscuous mode [ 445.419484][T32110] debugfs: 'hsr0' already exists in 'hsr' [ 445.425272][T32110] Cannot create hsr debugfs directory [ 445.467009][T32438] loop9: detected capacity change from 0 to 512 [ 445.473637][T32438] ext4: Unknown parameter 'uid<00000000000000000000' [ 445.537392][T30896] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.578862][T32486] Timeout policy `syz0' can only be used by L3 protocol number 8939 [ 446.685220][ T29] kauditd_printk_skb: 1916 callbacks suppressed [ 446.685313][ T29] audit: type=1326 audit(426.150:35307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32552 comm="syz.3.7378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686dcdf6c9 code=0x7ffc0000 [ 446.718573][T32110] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 446.732824][ T29] audit: type=1326 audit(426.188:35308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32552 comm="syz.3.7378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7f686dcdf6c9 code=0x7ffc0000 [ 446.736808][T32110] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 446.755863][ T29] audit: type=1326 audit(426.188:35309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32552 comm="syz.3.7378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686dcdf6c9 code=0x7ffc0000 [ 446.858689][T32110] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 446.938181][T32110] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 446.997593][T32597] serio: Serial port ptm6 [ 447.007344][T32110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 447.031390][T32110] 8021q: adding VLAN 0 to HW filter on device team0 [ 447.050627][ T3585] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.057712][ T3585] bridge0: port 1(bridge_slave_0) entered forwarding state [ 447.102950][ T3586] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.110040][ T3586] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.138383][T32604] loop0: detected capacity change from 0 to 8192 [ 447.152309][T32609] serio: Serial port ptm7 [ 447.194136][ T29] audit: type=1400 audit(426.637:35310): avc: denied { create } for pid=32615 comm="syz.9.7391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 447.213658][T32604] loop0: p1 p3 [ 447.217431][T32604] loop0: p1 start 51314688 is beyond EOD, truncated [ 447.224046][T32604] loop0: p3 start 65536 is beyond EOD, truncated [ 447.238988][T32110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 447.269316][T32604] __nla_validate_parse: 4 callbacks suppressed [ 447.269331][T32604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7389'. [ 447.319370][T32110] veth0_vlan: entered promiscuous mode [ 447.327759][T32110] veth1_vlan: entered promiscuous mode [ 447.353385][T32110] veth0_macvtap: entered promiscuous mode [ 447.368694][T32110] veth1_macvtap: entered promiscuous mode [ 447.391846][T32110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 447.404273][T32643] loop0: detected capacity change from 0 to 512 [ 447.411279][T32643] ext4: Unknown parameter 'uid<00000000000000000000' [ 447.419676][T32110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 447.437160][ T3586] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.462077][ T3586] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.487892][ T3586] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.500893][ T3586] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.515345][T32669] netlink: 32 bytes leftover after parsing attributes in process `gtp'. [ 447.553479][T32674] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7354'. [ 447.602139][T32681] serio: Serial port ptm7 [ 447.668793][T32688] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7401'. [ 447.680519][T32688] bond0: mtu less than device minimum [ 447.724935][T32688] netlink: 120 bytes leftover after parsing attributes in process `syz.0.7401'. [ 447.769925][T32691] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7402'. [ 447.787110][T32691] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7402'. [ 447.877832][ T29] audit: type=1326 audit(427.273:35311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32701 comm="syz.0.7406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a2461f6c9 code=0x7ffc0000 [ 447.900938][ T29] audit: type=1326 audit(427.273:35312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32701 comm="syz.0.7406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a2461f6c9 code=0x7ffc0000 [ 447.938372][ T29] audit: type=1326 audit(427.273:35313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32701 comm="syz.0.7406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f7a2461f6c9 code=0x7ffc0000 [ 447.961341][ T29] audit: type=1326 audit(427.329:35314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32701 comm="syz.0.7406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a2461f6c9 code=0x7ffc0000 [ 447.984369][ T29] audit: type=1326 audit(427.329:35315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32701 comm="syz.0.7406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7a2461f6c9 code=0x7ffc0000 [ 448.007318][ T29] audit: type=1326 audit(427.329:35316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32701 comm="syz.0.7406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a2461f6c9 code=0x7ffc0000 [ 448.326821][T32702] loop0: detected capacity change from 0 to 8192 [ 448.414507][T32732] IPv6: addrconf: prefix option has invalid lifetime [ 448.483548][T32708] chnl_net:caif_netlink_parms(): no params data found [ 448.572713][ T412] loop9: detected capacity change from 0 to 8192 [ 448.599716][T32708] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.606864][T32708] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.625032][ T412] loop9: p1 p3 [ 448.625561][T32708] bridge_slave_0: entered allmulticast mode [ 448.629026][ T412] loop9: p1 start 51314688 is beyond EOD, truncated [ 448.635718][T32708] bridge_slave_0: entered promiscuous mode [ 448.641503][ T412] loop9: p3 start 65536 is beyond EOD, truncated [ 448.654358][T32708] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.661561][T32708] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.681696][T32708] bridge_slave_1: entered allmulticast mode [ 448.688326][T32708] bridge_slave_1: entered promiscuous mode [ 448.696389][ T447] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7420'. [ 448.705413][ T447] bridge_slave_0: default FDB implementation only supports local addresses [ 448.714875][ T447] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7420'. [ 448.724036][ T447] bridge_slave_0: default FDB implementation only supports local addresses [ 448.739942][ T447] FAULT_INJECTION: forcing a failure. [ 448.739942][ T447] name failslab, interval 1, probability 0, space 0, times 0 [ 448.752645][ T447] CPU: 1 UID: 0 PID: 447 Comm: syz.3.7420 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 448.752703][ T447] Tainted: [W]=WARN [ 448.752709][ T447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 448.752719][ T447] Call Trace: [ 448.752792][ T447] [ 448.752801][ T447] __dump_stack+0x1d/0x30 [ 448.752843][ T447] dump_stack_lvl+0xe8/0x140 [ 448.752898][ T447] dump_stack+0x15/0x1b [ 448.752914][ T447] should_fail_ex+0x265/0x280 [ 448.752948][ T447] should_failslab+0x8c/0xb0 [ 448.752991][ T447] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 448.753091][ T447] ? __alloc_skb+0x101/0x320 [ 448.753116][ T447] ? __rtnl_unlock+0x95/0xb0 [ 448.753149][ T447] __alloc_skb+0x101/0x320 [ 448.753184][ T447] netlink_ack+0xfd/0x500 [ 448.753293][ T447] netlink_rcv_skb+0x192/0x220 [ 448.753329][ T447] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 448.753393][ T447] rtnetlink_rcv+0x1c/0x30 [ 448.753481][ T447] netlink_unicast+0x5c0/0x690 [ 448.753560][ T447] netlink_sendmsg+0x58b/0x6b0 [ 448.753580][ T447] ? __pfx_netlink_sendmsg+0x10/0x10 [ 448.753692][ T447] __sock_sendmsg+0x145/0x180 [ 448.753714][ T447] ____sys_sendmsg+0x345/0x4e0 [ 448.753732][ T447] ___sys_sendmsg+0x17b/0x1d0 [ 448.753763][ T447] __sys_sendmmsg+0x178/0x300 [ 448.753801][ T447] __x64_sys_sendmmsg+0x57/0x70 [ 448.753816][ T447] x64_sys_call+0x1c4a/0x3000 [ 448.753836][ T447] do_syscall_64+0xd2/0x200 [ 448.753858][ T447] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 448.753896][ T447] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 448.753937][ T447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.753955][ T447] RIP: 0033:0x7f686dcdf6c9 [ 448.753970][ T447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 448.754047][ T447] RSP: 002b:00007f686c747038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 448.754068][ T447] RAX: ffffffffffffffda RBX: 00007f686df35fa0 RCX: 00007f686dcdf6c9 [ 448.754079][ T447] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000004 [ 448.754089][ T447] RBP: 00007f686c747090 R08: 0000000000000000 R09: 0000000000000000 [ 448.754101][ T447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 448.754111][ T447] R13: 00007f686df36038 R14: 00007f686df35fa0 R15: 00007fff9dbb2318 [ 448.754127][ T447] [ 448.911113][ T464] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7417'. [ 449.007700][T32708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 449.029932][T32708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 449.051457][T32708] team0: Port device team_slave_0 added [ 449.075036][T32708] team0: Port device team_slave_1 added [ 449.116325][T32708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 449.123335][T32708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 449.149323][T32708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 449.190155][T32708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 449.197168][T32708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 449.223115][T32708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 449.266791][ T558] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 449.304654][T32708] hsr_slave_0: entered promiscuous mode [ 449.305204][ T576] FAULT_INJECTION: forcing a failure. [ 449.305204][ T576] name failslab, interval 1, probability 0, space 0, times 0 [ 449.312148][T32708] hsr_slave_1: entered promiscuous mode [ 449.323098][ T576] CPU: 1 UID: 0 PID: 576 Comm: syz.3.7427 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 449.323135][ T576] Tainted: [W]=WARN [ 449.323143][ T576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 449.323160][ T576] Call Trace: [ 449.323168][ T576] [ 449.323176][ T576] __dump_stack+0x1d/0x30 [ 449.323203][ T576] dump_stack_lvl+0xe8/0x140 [ 449.323284][ T576] dump_stack+0x15/0x1b [ 449.323298][ T576] should_fail_ex+0x265/0x280 [ 449.323334][ T576] should_failslab+0x8c/0xb0 [ 449.323446][ T576] kmem_cache_alloc_noprof+0x50/0x480 [ 449.323480][ T576] ? __proc_create+0x265/0x510 [ 449.323506][ T576] __proc_create+0x265/0x510 [ 449.323527][ T576] ? snprintf+0x86/0xb0 [ 449.323560][ T576] proc_mkdir+0x3c/0xc0 [ 449.323711][ T576] register_handler_proc+0x223/0x240 [ 449.323756][ T576] ? register_irq_proc+0x272/0x2a0 [ 449.323774][ T576] __setup_irq+0xf53/0x1210 [ 449.323832][ T576] ? __pfx_serial8250_interrupt+0x10/0x10 [ 449.323881][ T576] request_threaded_irq+0x22d/0x2c0 [ 449.323922][ T576] ? __pfx_serial8250_interrupt+0x10/0x10 [ 449.323954][ T576] univ8250_setup_irq+0x332/0x370 [ 449.323985][ T576] serial8250_do_startup+0xa9c/0x1c10 [ 449.324166][ T576] serial8250_startup+0x41/0x50 [ 449.324210][ T576] uart_startup+0x468/0x8e0 [ 449.324317][ T576] uart_ioctl+0xb99/0xe80 [ 449.324354][ T576] ? do_vfs_ioctl+0x866/0xe10 [ 449.324385][ T576] ? tty_jobctrl_ioctl+0x29e/0x810 [ 449.324504][ T576] tty_ioctl+0x7d8/0xb80 [ 449.324535][ T576] ? __pfx_tty_ioctl+0x10/0x10 [ 449.324567][ T576] __se_sys_ioctl+0xce/0x140 [ 449.324597][ T576] __x64_sys_ioctl+0x43/0x50 [ 449.324625][ T576] x64_sys_call+0x1816/0x3000 [ 449.324705][ T576] do_syscall_64+0xd2/0x200 [ 449.324732][ T576] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 449.324771][ T576] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 449.324817][ T576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.324882][ T576] RIP: 0033:0x7f686dcdf6c9 [ 449.324902][ T576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 449.324937][ T576] RSP: 002b:00007f686c747038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 449.324961][ T576] RAX: ffffffffffffffda RBX: 00007f686df35fa0 RCX: 00007f686dcdf6c9 [ 449.325052][ T576] RDX: 0000000000000000 RSI: 0000000000005453 RDI: 0000000000000003 [ 449.325073][ T576] RBP: 00007f686c747090 R08: 0000000000000000 R09: 0000000000000000 [ 449.325087][ T576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 449.325100][ T576] R13: 00007f686df36038 R14: 00007f686df35fa0 R15: 00007fff9dbb2318 [ 449.325122][ T576] [ 449.686945][T32708] debugfs: 'hsr0' already exists in 'hsr' [ 449.692706][T32708] Cannot create hsr debugfs directory [ 449.874096][T32708] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 450.050615][T32708] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 450.107928][ T692] loop9: detected capacity change from 0 to 512 [ 450.116824][T32708] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 450.125377][ T692] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 450.142327][ T692] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #2: comm syz.9.7434: corrupted inode contents [ 450.154922][ T692] EXT4-fs error (device loop9): ext4_dirty_inode:6517: inode #2: comm syz.9.7434: mark_inode_dirty error [ 450.166440][ T692] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #2: comm syz.9.7434: corrupted inode contents [ 450.199546][T25029] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.214829][T32708] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 450.353307][T32708] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 450.364192][T32708] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 450.375813][T32708] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 450.390243][T32708] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 450.448458][T32708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 450.461560][T32708] 8021q: adding VLAN 0 to HW filter on device team0 [ 450.471931][ T3586] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.479079][ T3586] bridge0: port 1(bridge_slave_0) entered forwarding state [ 450.491659][ T3559] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.498760][ T3559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 450.565910][T32708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 450.666258][ T750] loop0: detected capacity change from 0 to 764 [ 450.699962][T32708] veth0_vlan: entered promiscuous mode [ 450.707883][T32708] veth1_vlan: entered promiscuous mode [ 450.724824][T32708] veth0_macvtap: entered promiscuous mode [ 450.733172][T32708] veth1_macvtap: entered promiscuous mode [ 450.747714][T32708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 450.760129][T32708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 450.772792][ T3586] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.783466][ T3586] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.796882][ T726] loop9: detected capacity change from 0 to 8192 [ 450.806827][ T3586] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.818011][ T3586] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.062517][ T777] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(13) [ 451.069160][ T777] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 451.077398][ T777] vhci_hcd vhci_hcd.0: Device attached [ 451.090908][ T780] vhci_hcd: connection closed [ 451.091995][ T3585] vhci_hcd: stop threads [ 451.101134][ T3585] vhci_hcd: release socket [ 451.105607][ T3585] vhci_hcd: disconnect device [ 451.111596][ T783] netlink: 'syz.3.7445': attribute type 7 has an invalid length. [ 451.339941][ T792] serio: Serial port ptm8 [ 451.614270][ T807] FAULT_INJECTION: forcing a failure. [ 451.614270][ T807] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 451.627408][ T807] CPU: 1 UID: 0 PID: 807 Comm: syz.3.7453 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 451.627550][ T807] Tainted: [W]=WARN [ 451.627556][ T807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 451.627571][ T807] Call Trace: [ 451.627580][ T807] [ 451.627589][ T807] __dump_stack+0x1d/0x30 [ 451.627619][ T807] dump_stack_lvl+0xe8/0x140 [ 451.627726][ T807] dump_stack+0x15/0x1b [ 451.627748][ T807] should_fail_ex+0x265/0x280 [ 451.627826][ T807] should_fail+0xb/0x20 [ 451.627844][ T807] should_fail_usercopy+0x1a/0x20 [ 451.627869][ T807] _copy_from_user+0x1c/0xb0 [ 451.627902][ T807] memdup_user+0x5e/0xd0 [ 451.627937][ T807] ucma_set_option+0x19e/0x7f0 [ 451.628033][ T807] ? _parse_integer+0x27/0x40 [ 451.628065][ T807] ? kstrtoull+0x111/0x140 [ 451.628097][ T807] ? kstrtouint+0x76/0xc0 [ 451.628146][ T807] ? kstrtouint_from_user+0x9f/0xf0 [ 451.628170][ T807] ? should_fail_ex+0xdb/0x280 [ 451.628217][ T807] ucma_write+0x1b3/0x250 [ 451.628253][ T807] ? __pfx_ucma_write+0x10/0x10 [ 451.628277][ T807] vfs_write+0x269/0x960 [ 451.628301][ T807] ? __rcu_read_unlock+0x4f/0x70 [ 451.628438][ T807] ? __fget_files+0x184/0x1c0 [ 451.628477][ T807] ksys_write+0xda/0x1a0 [ 451.628510][ T807] __x64_sys_write+0x40/0x50 [ 451.628602][ T807] x64_sys_call+0x2802/0x3000 [ 451.628642][ T807] do_syscall_64+0xd2/0x200 [ 451.628669][ T807] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 451.628706][ T807] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 451.628777][ T807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.628803][ T807] RIP: 0033:0x7f686dcdf6c9 [ 451.628822][ T807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 451.628845][ T807] RSP: 002b:00007f686c747038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 451.628945][ T807] RAX: ffffffffffffffda RBX: 00007f686df35fa0 RCX: 00007f686dcdf6c9 [ 451.628961][ T807] RDX: 0000000000000020 RSI: 00002000000000c0 RDI: 0000000000000006 [ 451.628974][ T807] RBP: 00007f686c747090 R08: 0000000000000000 R09: 0000000000000000 [ 451.628988][ T807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 451.629002][ T807] R13: 00007f686df36038 R14: 00007f686df35fa0 R15: 00007fff9dbb2318 [ 451.629025][ T807] [ 451.994297][ T823] FAULT_INJECTION: forcing a failure. [ 451.994297][ T823] name failslab, interval 1, probability 0, space 0, times 0 [ 452.007071][ T823] CPU: 0 UID: 0 PID: 823 Comm: syz.0.7461 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 452.007129][ T823] Tainted: [W]=WARN [ 452.007135][ T823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 452.007149][ T823] Call Trace: [ 452.007156][ T823] [ 452.007164][ T823] __dump_stack+0x1d/0x30 [ 452.007236][ T823] dump_stack_lvl+0xe8/0x140 [ 452.007253][ T823] dump_stack+0x15/0x1b [ 452.007268][ T823] should_fail_ex+0x265/0x280 [ 452.007306][ T823] should_failslab+0x8c/0xb0 [ 452.007346][ T823] kmem_cache_alloc_lru_noprof+0x55/0x490 [ 452.007374][ T823] ? __d_alloc+0x3d/0x340 [ 452.007402][ T823] __d_alloc+0x3d/0x340 [ 452.007442][ T823] d_alloc_parallel+0x58/0xc70 [ 452.007460][ T823] ? __rcu_read_unlock+0x4f/0x70 [ 452.007482][ T823] ? __d_lookup+0x316/0x340 [ 452.007507][ T823] path_openat+0x6b5/0x2170 [ 452.007596][ T823] ? strncpy_from_user+0x17d/0x230 [ 452.007628][ T823] ? do_user_addr_fault+0xd9e/0x1080 [ 452.007655][ T823] do_filp_open+0x109/0x230 [ 452.007689][ T823] do_open_execat+0xd8/0x260 [ 452.007764][ T823] open_exec+0x3d/0x60 [ 452.007832][ T823] bm_register_write+0x8e6/0xc10 [ 452.007862][ T823] ? __pfx_bm_register_write+0x10/0x10 [ 452.007896][ T823] vfs_write+0x269/0x960 [ 452.007985][ T823] ? __rcu_read_unlock+0x4f/0x70 [ 452.008011][ T823] ? __fget_files+0x184/0x1c0 [ 452.008044][ T823] ksys_write+0xda/0x1a0 [ 452.008073][ T823] __x64_sys_write+0x40/0x50 [ 452.008113][ T823] x64_sys_call+0x2802/0x3000 [ 452.008138][ T823] do_syscall_64+0xd2/0x200 [ 452.008155][ T823] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 452.008178][ T823] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 452.008224][ T823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.008248][ T823] RIP: 0033:0x7f7a2461f6c9 [ 452.008302][ T823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 452.008317][ T823] RSP: 002b:00007f7a23087038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 452.008333][ T823] RAX: ffffffffffffffda RBX: 00007f7a24875fa0 RCX: 00007f7a2461f6c9 [ 452.008344][ T823] RDX: 0000000000000032 RSI: 0000200000000440 RDI: 0000000000000003 [ 452.008411][ T823] RBP: 00007f7a23087090 R08: 0000000000000000 R09: 0000000000000000 [ 452.008422][ T823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 452.008431][ T823] R13: 00007f7a24876038 R14: 00007f7a24875fa0 R15: 00007ffeb9332518 [ 452.008501][ T823] [ 452.258457][ T823] binfmt_misc: register: failed to install interpreter file ./file2 [ 452.288448][ T29] kauditd_printk_skb: 272 callbacks suppressed [ 452.288463][ T29] audit: type=1400 audit(431.398:35589): avc: denied { unmount } for pid=25029 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 452.328462][ T29] audit: type=1400 audit(431.435:35590): avc: denied { write } for pid=812 comm="syz.3.7457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 452.350542][ T29] audit: type=1400 audit(431.454:35591): avc: denied { unlink } for pid=25029 comm="syz-executor" name="file0" dev="tmpfs" ino=1935 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 452.380503][ T840] loop9: detected capacity change from 0 to 512 [ 452.387111][ T840] ext4: Unknown parameter 'uid<00000000000000000000' [ 452.507395][ T29] audit: type=1400 audit(431.604:35592): avc: denied { connect } for pid=855 comm="syz.3.7473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 452.526747][ T29] audit: type=1400 audit(431.604:35593): avc: denied { name_connect } for pid=855 comm="syz.3.7473" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 452.561802][ T29] audit: type=1326 audit(431.650:35594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=854 comm="syz.2.7472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c0d4f6c9 code=0x7ffc0000 [ 452.578091][ T856] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 452.584859][ T29] audit: type=1326 audit(431.650:35595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=854 comm="syz.2.7472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c0d4f6c9 code=0x7ffc0000 [ 452.591281][ T856] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 452.614494][ T29] audit: type=1326 audit(431.650:35596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=854 comm="syz.2.7472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f67c0d4f6c9 code=0x7ffc0000 [ 452.622623][ T856] vhci_hcd vhci_hcd.0: Device attached [ 452.644986][ T29] audit: type=1326 audit(431.650:35597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=854 comm="syz.2.7472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c0d4f6c9 code=0x7ffc0000 [ 452.645012][ T29] audit: type=1326 audit(431.650:35598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=854 comm="syz.2.7472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f67c0d4f6c9 code=0x7ffc0000 [ 452.674728][ T860] vhci_hcd: connection closed [ 452.699532][ T3572] vhci_hcd: stop threads [ 452.708609][ T3572] vhci_hcd: release socket [ 452.713034][ T3572] vhci_hcd: disconnect device [ 452.973173][ T867] loop9: detected capacity change from 0 to 512 [ 452.979865][ T867] ext4: Unknown parameter 'uid<00000000000000000000' [ 453.287410][ T881] loop9: detected capacity change from 0 to 128 [ 453.325071][ T886] __nla_validate_parse: 8 callbacks suppressed [ 453.325083][ T886] netlink: 32 bytes leftover after parsing attributes in process `gtp'. [ 453.375037][ T3572] kworker/u8:28: attempt to access beyond end of device [ 453.375037][ T3572] loop9: rw=1, sector=145, nr_sectors = 16 limit=128 [ 453.388772][ T3572] kworker/u8:28: attempt to access beyond end of device [ 453.388772][ T3572] loop9: rw=1, sector=169, nr_sectors = 8 limit=128 [ 453.403582][ T3572] kworker/u8:28: attempt to access beyond end of device [ 453.403582][ T3572] loop9: rw=1, sector=185, nr_sectors = 8 limit=128 [ 453.417291][ T3572] kworker/u8:28: attempt to access beyond end of device [ 453.417291][ T3572] loop9: rw=1, sector=201, nr_sectors = 8 limit=128 [ 453.432612][ T3572] kworker/u8:28: attempt to access beyond end of device [ 453.432612][ T3572] loop9: rw=1, sector=217, nr_sectors = 8 limit=128 [ 453.452982][ T897] serio: Serial port ptm8 [ 453.458275][ T3572] kworker/u8:28: attempt to access beyond end of device [ 453.458275][ T3572] loop9: rw=1, sector=233, nr_sectors = 8 limit=128 [ 453.472057][ T3572] kworker/u8:28: attempt to access beyond end of device [ 453.472057][ T3572] loop9: rw=1, sector=249, nr_sectors = 8 limit=128 [ 453.485751][ T3572] kworker/u8:28: attempt to access beyond end of device [ 453.485751][ T3572] loop9: rw=1, sector=265, nr_sectors = 8 limit=128 [ 453.499773][ T3572] kworker/u8:28: attempt to access beyond end of device [ 453.499773][ T3572] loop9: rw=1, sector=281, nr_sectors = 8 limit=128 [ 453.514092][ T3572] kworker/u8:28: attempt to access beyond end of device [ 453.514092][ T3572] loop9: rw=1, sector=297, nr_sectors = 8 limit=128 [ 453.632397][ T914] serio: Serial port ptm8 [ 453.672784][ T926] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7492'. [ 453.693312][ T928] loop0: detected capacity change from 0 to 512 [ 453.700830][ T928] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 453.737601][ T937] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=937 comm=syz.0.7495 [ 453.768843][ T939] loop0: detected capacity change from 0 to 1024 [ 453.775486][ T939] EXT4-fs: Ignoring removed orlov option [ 453.783687][ T939] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 453.812486][ T939] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(13) [ 453.819107][ T939] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 453.827283][ T939] vhci_hcd vhci_hcd.0: Device attached [ 453.835021][ T943] vhci_hcd: connection closed [ 453.838049][ T3585] vhci_hcd: stop threads [ 453.847024][ T3585] vhci_hcd: release socket [ 453.851453][ T3585] vhci_hcd: disconnect device [ 453.895850][ T952] loop9: detected capacity change from 0 to 512 [ 453.902782][ T952] msdos: Unknown parameter 'cheQk' [ 454.000342][ T975] random: crng reseeded on system resumption [ 454.009961][ T975] hub 6-0:1.0: USB hub found [ 454.014790][ T975] hub 6-0:1.0: 8 ports detected [ 454.026495][ T977] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 454.026495][ T977] program syz.3.7502 not setting count and/or reply_len properly [ 454.184441][ T996] loop9: detected capacity change from 0 to 512 [ 454.190891][ T997] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=48 sclass=netlink_xfrm_socket pid=997 comm=syz.4.7513 [ 454.225106][ T996] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 454.247274][ T996] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 454.247304][ T996] EXT4-fs: failed to create workqueue [ 454.262297][ T996] EXT4-fs (loop9): mount failed [ 454.336109][ T1009] random: crng reseeded on system resumption [ 454.349783][ T1009] hub 6-0:1.0: USB hub found [ 454.354672][ T1009] hub 6-0:1.0: 8 ports detected [ 454.433365][T30896] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.723665][ T1024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7519'. [ 454.762102][ T1024] team0 (unregistering): Port device team_slave_0 removed [ 454.778836][ T1024] team0 (unregistering): Port device team_slave_1 removed [ 454.934619][ T1079] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7526'. [ 455.028934][ T1093] FAULT_INJECTION: forcing a failure. [ 455.028934][ T1093] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 455.042070][ T1093] CPU: 1 UID: 0 PID: 1093 Comm: syz.2.7529 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 455.042097][ T1093] Tainted: [W]=WARN [ 455.042102][ T1093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 455.042124][ T1093] Call Trace: [ 455.042131][ T1093] [ 455.042140][ T1093] __dump_stack+0x1d/0x30 [ 455.042164][ T1093] dump_stack_lvl+0xe8/0x140 [ 455.042183][ T1093] dump_stack+0x15/0x1b [ 455.042202][ T1093] should_fail_ex+0x265/0x280 [ 455.042304][ T1093] should_fail+0xb/0x20 [ 455.042322][ T1093] should_fail_usercopy+0x1a/0x20 [ 455.042341][ T1093] _copy_to_user+0x20/0xa0 [ 455.042362][ T1093] simple_read_from_buffer+0xb5/0x130 [ 455.042384][ T1093] proc_fail_nth_read+0x10e/0x150 [ 455.042450][ T1093] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 455.042479][ T1093] vfs_read+0x1a8/0x770 [ 455.042533][ T1093] ? __rcu_read_unlock+0x4f/0x70 [ 455.042554][ T1093] ? __fget_files+0x184/0x1c0 [ 455.042580][ T1093] ksys_read+0xda/0x1a0 [ 455.042608][ T1093] __x64_sys_read+0x40/0x50 [ 455.042632][ T1093] x64_sys_call+0x27c0/0x3000 [ 455.042654][ T1093] do_syscall_64+0xd2/0x200 [ 455.042672][ T1093] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 455.042700][ T1093] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 455.042776][ T1093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.042793][ T1093] RIP: 0033:0x7f67c0d4e0dc [ 455.042829][ T1093] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 455.042849][ T1093] RSP: 002b:00007f67bf7b7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 455.042867][ T1093] RAX: ffffffffffffffda RBX: 00007f67c0fa5fa0 RCX: 00007f67c0d4e0dc [ 455.042881][ T1093] RDX: 000000000000000f RSI: 00007f67bf7b70a0 RDI: 0000000000000007 [ 455.042894][ T1093] RBP: 00007f67bf7b7090 R08: 0000000000000000 R09: 0000000000000000 [ 455.042907][ T1093] R10: 000000000000003a R11: 0000000000000246 R12: 0000000000000002 [ 455.042964][ T1093] R13: 00007f67c0fa6038 R14: 00007f67c0fa5fa0 R15: 00007ffff1bb4a28 [ 455.042984][ T1093] [ 455.282861][ T1095] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7530'. [ 455.293239][ T1095] bridge_slave_1: left allmulticast mode [ 455.298908][ T1095] bridge_slave_1: left promiscuous mode [ 455.304631][ T1095] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.323647][ T1095] bridge_slave_0: left allmulticast mode [ 455.329426][ T1095] bridge_slave_0: left promiscuous mode [ 455.335152][ T1095] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.387673][ T1098] loop9: detected capacity change from 0 to 2048 [ 455.394632][ T1099] netlink: 'syz.2.7530': attribute type 1 has an invalid length. [ 455.683602][ T1155] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7537'. [ 455.779215][ T1170] loop0: detected capacity change from 0 to 512 [ 455.793595][ T1170] ext4: Unknown parameter 'uid<00000000000000000000' [ 455.911773][ T1184] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 455.911773][ T1184] program syz.9.7545 not setting count and/or reply_len properly [ 456.020687][ T1194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.046565][ T1194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.267123][ T1210] netlink: 1204 bytes leftover after parsing attributes in process `syz.4.7555'. [ 456.298633][ T1212] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7556'. [ 456.463137][ T1216] loop0: detected capacity change from 0 to 32768 [ 456.493333][ T1216] loop0: p1 p2 p3 < > p4 < p5 p6 > [ 456.499615][ T1216] loop0: p1 start 460800 is beyond EOD, truncated [ 456.506117][ T1216] loop0: p2 size 83886080 extends beyond EOD, truncated [ 456.516485][ T1216] loop0: p5 start 460800 is beyond EOD, truncated [ 456.522977][ T1216] loop0: p6 size 83886080 extends beyond EOD, truncated [ 456.640308][ T1238] loop0: detected capacity change from 0 to 1024 [ 456.648811][ T1238] EXT4-fs: Ignoring removed orlov option [ 456.661235][ T1238] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 456.717824][ T1238] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(15) [ 456.724455][ T1238] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 456.732570][ T1238] vhci_hcd vhci_hcd.0: Device attached [ 456.742356][ T1250] loop9: detected capacity change from 0 to 1024 [ 456.744511][ T1246] vhci_hcd: connection closed [ 456.748903][ T3572] vhci_hcd: stop threads [ 456.757846][ T3572] vhci_hcd: release socket [ 456.762296][ T3572] vhci_hcd: disconnect device [ 456.766719][ T1250] EXT4-fs: Ignoring removed orlov option [ 456.774683][ T1250] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 456.806290][ T1250] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(13) [ 456.812913][ T1250] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 456.821170][ T1250] vhci_hcd vhci_hcd.0: Device attached [ 456.835875][ T1255] vhci_hcd: connection closed [ 456.836575][ T3572] vhci_hcd: stop threads [ 456.845522][ T3572] vhci_hcd: release socket [ 456.849955][ T3572] vhci_hcd: disconnect device [ 456.964051][ T1264] hub 9-0:1.0: USB hub found [ 456.968818][ T1264] hub 9-0:1.0: 8 ports detected [ 457.018286][ T1275] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7568'. [ 457.027375][ T1275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7568'. [ 457.112483][ T1293] netlink: 'wޣ': attribute type 5 has an invalid length. [ 457.120907][ T1293] futex_wake_op: wޣ tries to shift op by -1; fix this program [ 457.129332][ T1293] random: crng reseeded on system resumption [ 457.139774][ T1293] Restarting kernel threads ... [ 457.144890][ T1293] Done restarting kernel threads. [ 457.151847][ T1288] team0 (unregistering): Port device team_slave_0 removed [ 457.161597][ T1288] team0 (unregistering): Port device team_slave_1 removed [ 457.226724][ T1334] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 457.313296][T30896] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.388489][T25029] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.419140][ T1351] loop9: detected capacity change from 0 to 128 [ 457.444645][ T1351] FAT-fs (loop9): error, corrupted directory (invalid entries) [ 457.452356][ T1351] FAT-fs (loop9): Filesystem has been set read-only [ 457.515419][ T1363] C: renamed from team_slave_0 [ 457.521834][ T1363] netlink: 'syz.0.7586': attribute type 4 has an invalid length. [ 457.529659][ T1363] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 457.826899][ T29] kauditd_printk_skb: 1622 callbacks suppressed [ 457.826921][ T29] audit: type=1400 audit(436.571:37217): avc: denied { ioctl } for pid=1388 comm="syz.9.7587" path="socket:[91091]" dev="sockfs" ino=91091 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 457.865747][ T1389] wireguard0: entered promiscuous mode [ 457.871338][ T1389] wireguard0: entered allmulticast mode [ 458.060470][ T1399] bridge_slave_1: left allmulticast mode [ 458.066230][ T1399] bridge_slave_1: left promiscuous mode [ 458.072115][ T1399] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.102650][ T1399] bridge_slave_0: left allmulticast mode [ 458.108405][ T1399] bridge_slave_0: left promiscuous mode [ 458.114239][ T1399] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.128730][ T29] audit: type=1400 audit(436.833:37218): avc: denied { create } for pid=1402 comm="syz.2.7591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 458.147821][ T29] audit: type=1400 audit(436.842:37219): avc: denied { bind } for pid=1402 comm="syz.2.7591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 458.166829][ T29] audit: type=1400 audit(436.842:37220): avc: denied { listen } for pid=1402 comm="syz.2.7591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 458.178818][ T1409] netlink: 'syz.9.7589': attribute type 1 has an invalid length. [ 458.185944][ T29] audit: type=1400 audit(436.842:37221): avc: denied { connect } for pid=1402 comm="syz.2.7591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 458.226293][ T29] audit: type=1400 audit(436.954:37222): avc: denied { setopt } for pid=1400 comm="syz.3.7590" lport=8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 458.250354][ T29] audit: type=1400 audit(436.954:37223): avc: denied { write } for pid=1400 comm="syz.3.7590" lport=8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 458.270185][ T29] audit: type=1400 audit(436.954:37224): avc: denied { read } for pid=1400 comm="syz.3.7590" lport=8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 458.293048][ T1403] bridge_slave_0: default FDB implementation only supports local addresses [ 458.302190][ T1408] bridge_slave_0: default FDB implementation only supports local addresses [ 458.328355][ T29] audit: type=1326 audit(437.048:37225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1417 comm="syz.4.7595" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe9f92bf6c9 code=0x0 [ 458.399866][ T1427] netlink: 'syz.9.7598': attribute type 13 has an invalid length. [ 458.407740][ T1427] netlink: 'syz.9.7598': attribute type 27 has an invalid length. [ 458.437326][ T29] audit: type=1400 audit(437.141:37226): avc: denied { cpu } for pid=1417 comm="syz.4.7595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 458.575815][ T1438] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 458.582359][ T1438] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 458.590139][ T1438] vhci_hcd vhci_hcd.0: Device attached [ 458.736718][ T1438] loop0: detected capacity change from 0 to 32768 [ 458.791711][ T1438] loop0: p1 p2 p3 < > p4 < p5 p6 > [ 458.797001][ T1438] loop0: p1 start 460800 is beyond EOD, truncated [ 458.803519][ T1438] loop0: p2 size 83886080 extends beyond EOD, truncated [ 458.812768][ T1438] loop0: p5 start 460800 is beyond EOD, truncated [ 458.819268][ T1438] loop0: p6 size 83886080 extends beyond EOD, truncated [ 458.829441][ T1439] vhci_hcd: connection closed [ 458.829928][ T1603] vhci_hcd: stop threads [ 458.838909][ T1603] vhci_hcd: release socket [ 458.843334][ T1603] vhci_hcd: disconnect device [ 458.998867][ T1451] serio: Serial port ptm13 [ 459.238361][ T1460] __nla_validate_parse: 14 callbacks suppressed [ 459.238374][ T1460] netlink: 32 bytes leftover after parsing attributes in process `gtp'. [ 459.272336][ T1463] FAULT_INJECTION: forcing a failure. [ 459.272336][ T1463] name failslab, interval 1, probability 0, space 0, times 0 [ 459.285016][ T1463] CPU: 0 UID: 0 PID: 1463 Comm: syz.2.7605 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 459.285051][ T1463] Tainted: [W]=WARN [ 459.285077][ T1463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 459.285088][ T1463] Call Trace: [ 459.285093][ T1463] [ 459.285099][ T1463] __dump_stack+0x1d/0x30 [ 459.285122][ T1463] dump_stack_lvl+0xe8/0x140 [ 459.285140][ T1463] dump_stack+0x15/0x1b [ 459.285159][ T1463] should_fail_ex+0x265/0x280 [ 459.285363][ T1463] should_failslab+0x8c/0xb0 [ 459.285386][ T1463] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 459.285429][ T1463] ? sidtab_sid2str_get+0xa0/0x130 [ 459.285462][ T1463] kmemdup_noprof+0x2b/0x70 [ 459.285532][ T1463] sidtab_sid2str_get+0xa0/0x130 [ 459.285566][ T1463] security_sid_to_context_core+0x1eb/0x2e0 [ 459.285629][ T1463] security_sid_to_context+0x27/0x40 [ 459.285661][ T1463] selinux_lsmprop_to_secctx+0x67/0xf0 [ 459.285694][ T1463] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 459.285723][ T1463] audit_log_subj_ctx+0xa4/0x3e0 [ 459.285747][ T1463] ? skb_put+0xa9/0xf0 [ 459.285821][ T1463] audit_log_task_context+0x48/0x70 [ 459.285846][ T1463] audit_log_task+0xf4/0x250 [ 459.285883][ T1463] ? kstrtouint+0x76/0xc0 [ 459.285949][ T1463] audit_seccomp+0x61/0x100 [ 459.285981][ T1463] ? __seccomp_filter+0x82d/0x1250 [ 459.286010][ T1463] __seccomp_filter+0x83e/0x1250 [ 459.286078][ T1463] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 459.286113][ T1463] ? vfs_write+0x7e8/0x960 [ 459.286146][ T1463] __secure_computing+0x82/0x150 [ 459.286220][ T1463] syscall_trace_enter+0xcf/0x1e0 [ 459.286281][ T1463] do_syscall_64+0xac/0x200 [ 459.286303][ T1463] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 459.286333][ T1463] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 459.286394][ T1463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.286418][ T1463] RIP: 0033:0x7f67c0d4f6c9 [ 459.286434][ T1463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 459.286455][ T1463] RSP: 002b:00007f67bf7b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 459.286477][ T1463] RAX: ffffffffffffffda RBX: 00007f67c0fa5fa0 RCX: 00007f67c0d4f6c9 [ 459.286491][ T1463] RDX: 0000000000000200 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 459.286551][ T1463] RBP: 00007f67bf7b7090 R08: 0000000000000000 R09: 0000000000000000 [ 459.286565][ T1463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 459.286579][ T1463] R13: 00007f67c0fa6038 R14: 00007f67c0fa5fa0 R15: 00007ffff1bb4a28 [ 459.286601][ T1463] [ 459.288621][ T1465] FAULT_INJECTION: forcing a failure. [ 459.288621][ T1465] name failslab, interval 1, probability 0, space 0, times 0 [ 459.340600][ T1467] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7607'. [ 459.343527][ T1465] CPU: 1 UID: 0 PID: 1465 Comm: syz.4.7606 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 459.343572][ T1465] Tainted: [W]=WARN [ 459.343583][ T1465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 459.343665][ T1465] Call Trace: [ 459.343673][ T1465] [ 459.343683][ T1465] __dump_stack+0x1d/0x30 [ 459.343716][ T1465] dump_stack_lvl+0xe8/0x140 [ 459.343803][ T1465] dump_stack+0x15/0x1b [ 459.343827][ T1465] should_fail_ex+0x265/0x280 [ 459.343985][ T1465] should_failslab+0x8c/0xb0 [ 459.344057][ T1465] kmem_cache_alloc_noprof+0x50/0x480 [ 459.344162][ T1465] ? skb_clone+0x151/0x1f0 [ 459.344188][ T1465] skb_clone+0x151/0x1f0 [ 459.344210][ T1465] __netlink_deliver_tap+0x2c9/0x500 [ 459.344239][ T1465] netlink_unicast+0x66b/0x690 [ 459.344330][ T1465] netlink_sendmsg+0x58b/0x6b0 [ 459.344356][ T1465] ? __pfx_netlink_sendmsg+0x10/0x10 [ 459.344380][ T1465] __sock_sendmsg+0x145/0x180 [ 459.344436][ T1465] ____sys_sendmsg+0x31e/0x4e0 [ 459.344463][ T1465] ___sys_sendmsg+0x17b/0x1d0 [ 459.344502][ T1465] __x64_sys_sendmsg+0xd4/0x160 [ 459.344547][ T1465] x64_sys_call+0x191e/0x3000 [ 459.344575][ T1465] do_syscall_64+0xd2/0x200 [ 459.344614][ T1465] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 459.344691][ T1465] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 459.344733][ T1465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.344784][ T1465] RIP: 0033:0x7fe9f92bf6c9 [ 459.344803][ T1465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 459.344898][ T1465] RSP: 002b:00007fe9f7d1f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 459.344944][ T1465] RAX: ffffffffffffffda RBX: 00007fe9f9515fa0 RCX: 00007fe9f92bf6c9 [ 459.344959][ T1465] RDX: 0000000004048010 RSI: 0000200000000080 RDI: 0000000000000005 [ 459.344974][ T1465] RBP: 00007fe9f7d1f090 R08: 0000000000000000 R09: 0000000000000000 [ 459.344990][ T1465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 459.345009][ T1465] R13: 00007fe9f9516038 R14: 00007fe9f9515fa0 R15: 00007ffe9b0503d8 [ 459.345037][ T1465] [ 459.453817][ T1479] netlink: 88 bytes leftover after parsing attributes in process `syz.0.7608'. [ 459.958402][ T1499] netlink: 32 bytes leftover after parsing attributes in process `gtp'. [ 461.739154][ T1569] bridge_slave_0: default FDB implementation only supports local addresses [ 461.742082][ T1573] netlink: 72 bytes leftover after parsing attributes in process `syz.9.7620'. [ 461.760876][ T1571] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7619'. [ 461.777106][ T1575] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7621'. [ 461.811183][ T1569] bridge_slave_0: default FDB implementation only supports local addresses [ 461.834355][ T1571] vlan2: entered promiscuous mode [ 461.839462][ T1571] vlan2: entered allmulticast mode [ 461.844585][ T1571] hsr_slave_1: entered allmulticast mode [ 461.858149][ T1569] FAULT_INJECTION: forcing a failure. [ 461.858149][ T1569] name failslab, interval 1, probability 0, space 0, times 0 [ 461.870816][ T1569] CPU: 0 UID: 0 PID: 1569 Comm: syz.2.7622 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 461.870847][ T1569] Tainted: [W]=WARN [ 461.870853][ T1569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 461.870914][ T1569] Call Trace: [ 461.870920][ T1569] [ 461.870927][ T1569] __dump_stack+0x1d/0x30 [ 461.870952][ T1569] dump_stack_lvl+0xe8/0x140 [ 461.870977][ T1569] dump_stack+0x15/0x1b [ 461.870995][ T1569] should_fail_ex+0x265/0x280 [ 461.871086][ T1569] should_failslab+0x8c/0xb0 [ 461.871122][ T1569] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 461.871200][ T1569] ? __alloc_skb+0x101/0x320 [ 461.871243][ T1569] ? __rtnl_unlock+0x95/0xb0 [ 461.871276][ T1569] __alloc_skb+0x101/0x320 [ 461.871320][ T1569] netlink_ack+0xfd/0x500 [ 461.871359][ T1569] netlink_rcv_skb+0x192/0x220 [ 461.871434][ T1569] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 461.871467][ T1569] rtnetlink_rcv+0x1c/0x30 [ 461.871492][ T1569] netlink_unicast+0x5c0/0x690 [ 461.871567][ T1569] netlink_sendmsg+0x58b/0x6b0 [ 461.871647][ T1569] ? __pfx_netlink_sendmsg+0x10/0x10 [ 461.871738][ T1569] __sock_sendmsg+0x145/0x180 [ 461.871874][ T1569] ____sys_sendmsg+0x345/0x4e0 [ 461.871899][ T1569] ___sys_sendmsg+0x17b/0x1d0 [ 461.871931][ T1569] __sys_sendmmsg+0x178/0x300 [ 461.871966][ T1569] __x64_sys_sendmmsg+0x57/0x70 [ 461.872034][ T1569] x64_sys_call+0x1c4a/0x3000 [ 461.872071][ T1569] do_syscall_64+0xd2/0x200 [ 461.872137][ T1569] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 461.872169][ T1569] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 461.872262][ T1569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.872281][ T1569] RIP: 0033:0x7f67c0d4f6c9 [ 461.872376][ T1569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 461.872396][ T1569] RSP: 002b:00007f67bf7b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 461.872416][ T1569] RAX: ffffffffffffffda RBX: 00007f67c0fa5fa0 RCX: 00007f67c0d4f6c9 [ 461.872430][ T1569] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000004 [ 461.872444][ T1569] RBP: 00007f67bf7b7090 R08: 0000000000000000 R09: 0000000000000000 [ 461.872457][ T1569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 461.872471][ T1569] R13: 00007f67c0fa6038 R14: 00007f67c0fa5fa0 R15: 00007ffff1bb4a28 [ 461.872511][ T1569] [ 462.426757][ T1604] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 462.426757][ T1604] program syz.9.7630 not setting count and/or reply_len properly [ 462.506890][ T1606] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 462.506890][ T1606] program syz.3.7629 not setting count and/or reply_len properly [ 462.612308][ T1611] serio: Serial port ptm13 [ 463.176281][ T29] kauditd_printk_skb: 162 callbacks suppressed [ 463.176297][ T29] audit: type=1400 audit(441.584:37388): avc: denied { module_request } for pid=1640 comm="syz.2.7644" kmod="ip6table_!" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 463.358760][ T29] audit: type=1400 audit(441.753:37389): avc: denied { read } for pid=1642 comm="syz.4.7645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 463.411944][ T1660] loop9: detected capacity change from 0 to 512 [ 463.419820][ T29] audit: type=1400 audit(441.809:37390): avc: denied { mounton } for pid=1656 comm="syz.9.7649" path="/407/file1" dev="tmpfs" ino=2140 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 463.675746][ T29] audit: type=1400 audit(442.043:37391): avc: denied { create } for pid=1642 comm="syz.4.7645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 463.694811][ T29] audit: type=1400 audit(442.043:37392): avc: denied { getopt } for pid=1642 comm="syz.4.7645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 463.735895][ T1660] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 463.750712][ T29] audit: type=1400 audit(442.118:37393): avc: denied { mount } for pid=1656 comm="syz.9.7649" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 463.799614][ T29] audit: type=1400 audit(442.146:37394): avc: denied { create } for pid=1642 comm="syz.4.7645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 463.818658][ T29] audit: type=1400 audit(442.146:37395): avc: denied { add_name } for pid=1656 comm="syz.9.7649" name="memory.events" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 463.839610][ T29] audit: type=1400 audit(442.146:37396): avc: denied { create } for pid=1656 comm="syz.9.7649" name="memory.events" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 463.860229][ T29] audit: type=1400 audit(442.146:37397): avc: denied { read append open } for pid=1656 comm="syz.9.7649" path="/407/file1/memory.events" dev="loop9" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 464.026089][T25029] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.047359][ T1713] loop9: detected capacity change from 0 to 1024 [ 464.054156][ T1713] EXT4-fs: Ignoring removed orlov option [ 464.061801][ T1713] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 464.091412][ T1713] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(14) [ 464.098061][ T1713] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 464.106265][ T1713] vhci_hcd vhci_hcd.0: Device attached [ 464.113901][ T1716] vhci_hcd: connection closed [ 464.114298][ T3572] vhci_hcd: stop threads [ 464.123360][ T3572] vhci_hcd: release socket [ 464.127942][ T3572] vhci_hcd: disconnect device [ 464.660881][T25029] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.663661][ T1747] netlink: 32 bytes leftover after parsing attributes in process `gtp'. [ 464.988130][ T1774] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(13) [ 464.994752][ T1774] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 465.002957][ T1774] vhci_hcd vhci_hcd.0: Device attached [ 465.009455][ T1775] vhci_hcd: connection closed [ 465.009539][ T1603] vhci_hcd: stop threads [ 465.018634][ T1603] vhci_hcd: release socket [ 465.023043][ T1603] vhci_hcd: disconnect device [ 465.428908][ T1799] syzkaller0: entered allmulticast mode [ 465.437840][ T1799] syzkaller0 (unregistering): left allmulticast mode [ 465.728359][ T1817] loop9: detected capacity change from 0 to 8192 [ 465.791527][ T1827] netlink: 32 bytes leftover after parsing attributes in process `gtp'. [ 465.829850][ T1817] veth4: entered promiscuous mode [ 465.834993][ T1817] veth4: entered allmulticast mode [ 465.847379][ T1832] pimreg: entered allmulticast mode [ 465.857203][ T1832] pimreg: left allmulticast mode [ 465.899146][ T1854] loop9: detected capacity change from 0 to 512 [ 465.905694][ T1832] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7702'. [ 465.905732][ T1854] ext4: Unknown parameter 'uid<00000000000000000000' [ 465.915313][ T1832] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7702'. [ 465.973174][ T1861] FAULT_INJECTION: forcing a failure. [ 465.973174][ T1861] name failslab, interval 1, probability 0, space 0, times 0 [ 465.985910][ T1861] CPU: 1 UID: 0 PID: 1861 Comm: syz.4.7705 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 465.985946][ T1861] Tainted: [W]=WARN [ 465.985954][ T1861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 465.985979][ T1861] Call Trace: [ 465.985984][ T1861] [ 465.985991][ T1861] __dump_stack+0x1d/0x30 [ 465.986011][ T1861] dump_stack_lvl+0xe8/0x140 [ 465.986029][ T1861] dump_stack+0x15/0x1b [ 465.986046][ T1861] should_fail_ex+0x265/0x280 [ 465.986084][ T1861] ? alloc_pipe_info+0xae/0x350 [ 465.986123][ T1861] should_failslab+0x8c/0xb0 [ 465.986153][ T1861] __kmalloc_cache_noprof+0x4c/0x4a0 [ 465.986200][ T1861] ? avc_has_perm+0x13a/0x180 [ 465.986233][ T1861] alloc_pipe_info+0xae/0x350 [ 465.986282][ T1861] splice_direct_to_actor+0x592/0x680 [ 465.986343][ T1861] ? __pfx_direct_splice_actor+0x10/0x10 [ 465.986372][ T1861] ? selinux_file_permission+0x2f0/0x320 [ 465.986451][ T1861] do_splice_direct+0xda/0x150 [ 465.986476][ T1861] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 465.986584][ T1861] do_sendfile+0x380/0x650 [ 465.986648][ T1861] __x64_sys_sendfile64+0x105/0x150 [ 465.986725][ T1861] x64_sys_call+0x2bb4/0x3000 [ 465.986750][ T1861] do_syscall_64+0xd2/0x200 [ 465.986770][ T1861] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 465.986794][ T1861] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 465.986878][ T1861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.986902][ T1861] RIP: 0033:0x7fe9f92bf6c9 [ 465.986918][ T1861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 465.986939][ T1861] RSP: 002b:00007fe9f7d1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 465.986977][ T1861] RAX: ffffffffffffffda RBX: 00007fe9f9515fa0 RCX: 00007fe9f92bf6c9 [ 465.987045][ T1861] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000005 [ 465.987061][ T1861] RBP: 00007fe9f7d1f090 R08: 0000000000000000 R09: 0000000000000000 [ 465.987085][ T1861] R10: 0000000400000013 R11: 0000000000000246 R12: 0000000000000001 [ 465.987098][ T1861] R13: 00007fe9f9516038 R14: 00007fe9f9515fa0 R15: 00007ffe9b0503d8 [ 465.987119][ T1861] [ 466.315572][ T1875] loop0: detected capacity change from 0 to 512 [ 466.333841][ T1875] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 466.348145][ T1875] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.7711: corrupted inode contents [ 466.354237][ T1880] loop9: detected capacity change from 0 to 164 [ 466.366375][ T1875] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #2: comm syz.0.7711: mark_inode_dirty error [ 466.378161][ T1880] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 466.382106][ T1875] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.7711: corrupted inode contents [ 466.413000][T30896] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.462072][ T1895] netlink: 'syz.0.7717': attribute type 21 has an invalid length. [ 466.471514][ T1896] loop0: detected capacity change from 0 to 128 [ 466.478032][ T1895] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7717'. [ 466.487567][ T1896] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 466.499849][ T1896] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 466.517420][ T1899] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 466.542878][ T1899] loop9: detected capacity change from 0 to 512 [ 466.557649][ T1899] EXT4-fs: Ignoring removed orlov option [ 466.571172][ T1899] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 466.592884][ T1899] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 466.601763][ T1899] EXT4-fs error (device loop9): ext4_iget_extra_inode:5075: inode #15: comm syz.9.7718: corrupted in-inode xattr: e_value size too large [ 466.622082][ T1899] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.7718: couldn't read orphan inode 15 (err -117) [ 466.628865][ T1917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7722'. [ 466.669240][ T1899] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 466.762010][ T1927] binfmt_misc: register: failed to install interpreter file ./file2 [ 466.770234][ T1927] futex_wake_op: wޣ tries to shift op by -1; fix this program [ 466.778792][ T1927] random: crng reseeded on system resumption [ 466.788957][ T1927] Restarting kernel threads ... [ 466.794079][ T1927] Done restarting kernel threads. [ 466.809071][T25029] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.828668][ T1931] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7728'. [ 466.891269][ T1947] loop9: detected capacity change from 0 to 1024 [ 466.900320][ T1947] EXT4-fs: Ignoring removed orlov option [ 466.911134][ T1947] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 466.945911][ T1947] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(12) [ 466.952614][ T1947] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 466.960751][ T1947] vhci_hcd vhci_hcd.0: Device attached [ 466.970297][ T1953] vhci_hcd: connection closed [ 466.970583][ T3572] vhci_hcd: stop threads [ 466.979629][ T3572] vhci_hcd: release socket [ 466.984450][ T3572] vhci_hcd: disconnect device [ 466.995499][ T1956] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7730'. [ 467.074664][ T1959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7735'. [ 467.226815][ T1975] netlink: 32 bytes leftover after parsing attributes in process `gtp'. [ 467.554115][T25029] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.578842][ T2012] loop9: detected capacity change from 0 to 1024 [ 467.585539][ T2012] EXT4-fs: Ignoring removed orlov option [ 467.592808][ T2012] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 467.611455][ T2012] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(14) [ 467.618069][ T2012] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 467.626277][ T2012] vhci_hcd vhci_hcd.0: Device attached [ 467.633852][ T2015] vhci_hcd: connection closed [ 467.634727][ T3586] vhci_hcd: stop threads [ 467.643716][ T3586] vhci_hcd: release socket [ 467.648127][ T3586] vhci_hcd: disconnect device [ 467.848008][ T2044] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(13) [ 467.854641][ T2044] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 467.862912][ T2044] vhci_hcd vhci_hcd.0: Device attached [ 467.883973][ T2052] xt_hashlimit: max too large, truncated to 1048576 [ 467.892826][ T2047] vhci_hcd: connection closed [ 467.893565][ T3559] vhci_hcd: stop threads [ 467.902612][ T3559] vhci_hcd: release socket [ 467.907124][ T3559] vhci_hcd: disconnect device [ 468.220072][T25029] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.633311][ T2075] loop9: detected capacity change from 0 to 128 [ 468.665575][ T2075] FAT-fs (loop9): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 468.696927][ T29] kauditd_printk_skb: 577 callbacks suppressed [ 468.696947][ T29] audit: type=1400 audit(446.729:37973): avc: denied { mount } for pid=2067 comm="syz.9.7771" name="/" dev="loop9" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 468.907451][ T29] audit: type=1400 audit(446.944:37974): avc: denied { create } for pid=2110 comm="syz.4.7778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 468.949935][ T29] audit: type=1400 audit(446.963:37975): avc: denied { write } for pid=2110 comm="syz.4.7778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 468.969608][ T29] audit: type=1400 audit(446.982:37976): avc: denied { write } for pid=2114 comm="syz.4.7780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 468.997636][ T29] audit: type=1400 audit(446.982:37977): avc: denied { connect } for pid=2114 comm="syz.4.7780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 469.016796][ T29] audit: type=1400 audit(446.982:37978): avc: denied { name_connect } for pid=2114 comm="syz.4.7780" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 469.057155][ T29] audit: type=1400 audit(447.066:37979): avc: denied { setopt } for pid=2114 comm="syz.4.7780" lport=58183 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 469.077283][ T29] audit: type=1400 audit(447.084:37980): avc: denied { tracepoint } for pid=2127 comm="syz.0.7786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 469.100904][ T29] audit: type=1326 audit(447.122:37981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2125 comm="syz.3.7785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686dcdf6c9 code=0x7ffc0000 [ 469.109267][ T2126] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(13) [ 469.124024][ T29] audit: type=1326 audit(447.122:37982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2125 comm="syz.3.7785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686dcdf6c9 code=0x7ffc0000 [ 469.130408][ T2126] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 469.130496][ T2126] vhci_hcd vhci_hcd.0: Device attached [ 469.230990][ T2129] vhci_hcd: connection closed [ 469.231316][ T3572] vhci_hcd: stop threads [ 469.240288][ T3572] vhci_hcd: release socket [ 469.244720][ T3572] vhci_hcd: disconnect device [ 469.314929][ T2131] loop0: detected capacity change from 0 to 32768 [ 469.364841][ T2131] loop0: p1 p2 p3 < > p4 < p5 p6 > [ 469.370138][ T2131] loop0: p1 start 460800 is beyond EOD, truncated [ 469.376656][ T2131] loop0: p2 size 83886080 extends beyond EOD, truncated [ 469.385414][ T2131] loop0: p5 start 460800 is beyond EOD, truncated [ 469.391906][ T2131] loop0: p6 size 83886080 extends beyond EOD, truncated [ 469.505372][ T2128] program gtp is using a deprecated SCSI ioctl, please convert it to SG_IO [ 469.644234][ T2177] serio: Serial port ptm18 [ 470.990581][ T2213] loop9: detected capacity change from 0 to 1024 [ 470.997243][ T2213] EXT4-fs: Ignoring removed orlov option [ 471.014554][ T2213] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 471.059017][ T2213] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(14) [ 471.065643][ T2213] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 471.073762][ T2213] vhci_hcd vhci_hcd.0: Device attached [ 471.084406][ T2260] vhci_hcd: connection closed [ 471.084656][ T3585] vhci_hcd: stop threads [ 471.093627][ T3585] vhci_hcd: release socket [ 471.098089][ T3585] vhci_hcd: disconnect device [ 471.102438][ T2266] __nla_validate_parse: 9 callbacks suppressed [ 471.102464][ T2266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7813'. [ 471.111343][ T2267] serio: Serial port ptm17 [ 471.191796][ T2271] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7814'. [ 471.206746][ T2271] bridge_slave_1: left allmulticast mode [ 471.212422][ T2271] bridge_slave_1: left promiscuous mode [ 471.218225][ T2271] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.226566][ T2271] bridge_slave_0: left allmulticast mode [ 471.232231][ T2271] bridge_slave_0: left promiscuous mode [ 471.238118][ T2271] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.250346][ T2275] netlink: 'syz.2.7816': attribute type 39 has an invalid length. [ 471.314373][ T2285] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 471.682571][T25029] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.791312][ T2326] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 471.791312][ T2326] program syz.3.7830 not setting count and/or reply_len properly [ 471.825170][ T2329] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7831'. [ 472.112805][ T2339] netlink: 'syz.2.7835': attribute type 2 has an invalid length. [ 472.120606][ T2339] netlink: 51 bytes leftover after parsing attributes in process `syz.2.7835'. [ 472.219114][ T2347] loop0: detected capacity change from 0 to 2048 [ 472.234938][ T2347] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 472.260899][ T2347] EXT4-fs error (device loop0): ext4_lookup:1787: inode #16: comm syz.0.7837: iget: bad i_size value: 8796093031208 [ 472.295105][ T2357] 9pnet_fd: Insufficient options for proto=fd [ 472.331356][ T2345] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7838'. [ 472.410884][ T2365] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 472.427980][ T2365] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2014 with error 28 [ 472.440484][ T2365] EXT4-fs (loop0): This should not happen!! Data will be lost [ 472.440484][ T2365] [ 472.450323][ T2365] EXT4-fs (loop0): Total free blocks count 0 [ 472.456339][ T2365] EXT4-fs (loop0): Free/Dirty block details [ 472.462243][ T2365] EXT4-fs (loop0): free_blocks=2415919104 [ 472.468091][ T2365] EXT4-fs (loop0): dirty_blocks=2016 [ 472.473398][ T2365] EXT4-fs (loop0): Block reservation details [ 472.479537][ T2365] EXT4-fs (loop0): i_reserved_data_blocks=126 [ 472.514250][ T2383] siw: device registration error -23 [ 472.521163][ T2381] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(13) [ 472.527820][ T2381] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 472.536033][ T2381] vhci_hcd vhci_hcd.0: Device attached [ 472.569875][ T2384] vhci_hcd: connection closed [ 472.570823][ T3572] vhci_hcd: stop threads [ 472.579831][ T3572] vhci_hcd: release socket [ 472.584271][ T3572] vhci_hcd: disconnect device [ 472.624876][ T3572] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 472.654927][ T2397] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7854'. [ 472.704634][ T2399] loop0: detected capacity change from 0 to 8192 [ 472.742964][ T2399] loop0: p1 p3 [ 472.746547][ T2399] loop0: p1 start 51314688 is beyond EOD, truncated [ 472.753155][ T2399] loop0: p3 start 65536 is beyond EOD, truncated [ 472.776597][ T2399] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7855'. [ 472.836857][ T2413] 9pnet_fd: Insufficient options for proto=fd [ 473.179719][ T2431] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7866'. [ 473.351336][ T2439] loop9: detected capacity change from 0 to 1024 [ 473.358185][ T2439] EXT4-fs: Ignoring removed orlov option [ 473.366021][ T2439] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 473.390818][ T2439] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(15) [ 473.397454][ T2439] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 473.405806][ T2439] vhci_hcd vhci_hcd.0: Device attached [ 473.413017][ T2444] vhci_hcd: connection closed [ 473.413182][ T3572] vhci_hcd: stop threads [ 473.422186][ T3572] vhci_hcd: release socket [ 473.426664][ T3572] vhci_hcd: disconnect device [ 473.577379][ T2451] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7872'. [ 473.586414][ T2451] bridge_slave_1: left allmulticast mode [ 473.592057][ T2451] bridge_slave_1: left promiscuous mode [ 473.597745][ T2451] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.605562][ T2451] bridge_slave_0: left allmulticast mode [ 473.611325][ T2451] bridge_slave_0: left promiscuous mode [ 473.617105][ T2451] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.781338][ T2459] netlink: 32 bytes leftover after parsing attributes in process `gtp'. [ 473.819145][ T2465] ================================================================== [ 473.827279][ T2465] BUG: KCSAN: data-race in mas_state_walk / mas_wmb_replace [ 473.834581][ T2465] [ 473.836914][ T2465] write to 0xffff888104570c00 of 8 bytes by task 2464 on cpu 1: [ 473.844545][ T2465] mas_wmb_replace+0xd74/0xfa0 [ 473.849329][ T2465] mas_spanning_rebalance+0x262a/0x2c60 [ 473.854895][ T2465] mas_wr_spanning_store+0x165e/0x1980 [ 473.860371][ T2465] mas_wr_store_entry+0xd88/0x2750 [ 473.865495][ T2465] mas_store_prealloc+0x760/0xa90 [ 473.870530][ T2465] commit_merge+0x6a5/0x730 [ 473.875047][ T2465] vma_modify+0xad7/0xc80 [ 473.879386][ T2465] vma_modify_flags+0x101/0x130 [ 473.884268][ T2465] mprotect_fixup+0x2cc/0x570 [ 473.888962][ T2465] do_mprotect_pkey+0x6d6/0x980 [ 473.893828][ T2465] __x64_sys_mprotect+0x48/0x60 [ 473.898689][ T2465] x64_sys_call+0x2752/0x3000 [ 473.903374][ T2465] do_syscall_64+0xd2/0x200 [ 473.907891][ T2465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.913799][ T2465] [ 473.916127][ T2465] read to 0xffff888104570c00 of 8 bytes by task 2465 on cpu 0: [ 473.923671][ T2465] mas_state_walk+0x485/0x650 [ 473.928356][ T2465] mas_walk+0x60/0x150 [ 473.932431][ T2465] lock_vma_under_rcu+0x95/0x170 [ 473.937387][ T2465] do_user_addr_fault+0x233/0x1080 [ 473.942506][ T2465] exc_page_fault+0x62/0xa0 [ 473.947025][ T2465] asm_exc_page_fault+0x26/0x30 [ 473.951884][ T2465] [ 473.954207][ T2465] value changed: 0xffff88810457040e -> 0xffff888104570c00 [ 473.961312][ T2465] [ 473.963635][ T2465] Reported by Kernel Concurrency Sanitizer on: [ 473.969785][ T2465] CPU: 0 UID: 0 PID: 2465 Comm: syz.3.7877 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 473.981079][ T2465] Tainted: [W]=WARN [ 473.984878][ T2465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 473.994932][ T2465] ================================================================== [ 474.132452][T25029] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.