last executing test programs: 15m34.310420171s ago: executing program 32 (id=2483): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000240)='kfree\x00', r0}, 0x18) r1 = syz_open_procfs(0x0, &(0x7f0000000840)='map_files\x00') getdents64(r1, &(0x7f0000002f40)=""/4098, 0x1002) 10m23.956528495s ago: executing program 33 (id=6937): bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r0}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) unshare(0x2a020400) r1 = getpgrp(0x0) r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x34020000) 5m8.675044173s ago: executing program 34 (id=13773): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xbc}, 0x1, 0x0, 0x0, 0x40000c0}, 0x80) 4m43.720358191s ago: executing program 7 (id=14176): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000010c0)='highspeed', 0x9) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) 4m43.688370054s ago: executing program 7 (id=14178): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r3, 0x11ff, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 4m43.596896803s ago: executing program 7 (id=14182): r0 = getpid() timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f00000001c0)) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x1fffffffff]}, 0x8, 0x0) syz_io_uring_setup(0x186, &(0x7f0000000240)={0x0, 0x3416, 0x13100, 0x2, 0x4, 0x0, r1}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0xe091}}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES8, @ANYRES64, @ANYRES8, @ANYRESDEC, @ANYRES64], 0x2, 0x23e, &(0x7f0000000f00)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 4m41.592055764s ago: executing program 0 (id=14226): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r3, 0x11ff, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 4m41.461635566s ago: executing program 0 (id=14229): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x400200, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4cc, 0xffff, 0x9dff, 0x1, "8003e3ffff072000"}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002", @ANYRES32=0x0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae000000"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001200)={r3, 0x0, &(0x7f0000001780)=""/4096}, 0x20) r4 = socket$netlink(0x10, 0x3, 0x13) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x24004091}, 0x2000000) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYRES16, @ANYRES16=r6, @ANYBLOB="010028bd7000fbdbdf2505"], 0x2a8}, 0x1, 0x0, 0x0, 0x48c05}, 0x240481c1) sendmsg$TIPC_NL_BEARER_GET(r4, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="900000e2", @ANYBLOB="00072cbd7000ffdbdf250400000020000580070001006962000004000280080001007564700007000100696200000c00018008000300100000003c000280080002000500000008000100530000000400040008000200040000001c000380080001000000000008000100070000000800010000000080140003800800030001ffffff0800030003000000"], 0x90}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0xd, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff15, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f80)={&(0x7f0000000f00)='kfree\x00', r9}, 0x18) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x90, 0x30, 0x871a15abc695fb3d, 0x0, 0x400000, {}, [{0x7c, 0x1, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x90}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) kexec_load(0x4, 0xa, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="38000000031401002dbd700200000025090002007379fb0000000000080041007278650014003300626f6e645f736c6176655f3000"], 0x38}, 0x1, 0x0, 0x0, 0x24000811}, 0x0) gettid() syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 4m41.257143256s ago: executing program 0 (id=14233): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="300000000104030000000000000000ee03002004080004400000002805000100010000000a00020000000004"], 0x30}, 0x1, 0x0, 0x0, 0x4c050}, 0x20000044) 4m41.203306611s ago: executing program 0 (id=14236): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) mount_setattr(r0, &(0x7f0000000200)='.\x00', 0x8000, &(0x7f0000001dc0)={0x81, 0x0, 0x80000}, 0x20) 4m41.136053817s ago: executing program 0 (id=14237): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x9, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@cb_func={0x18, 0x5, 0x4, 0x0, 0xffffbffd}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @map_fd={0x18, 0xa, 0x1, 0x0, r1}, @jmp={0x5, 0x1, 0xb, 0x5, 0x3, 0x1, 0x8}]}, &(0x7f0000000080)='GPL\x00', 0x7, 0x5a, &(0x7f00000000c0)=""/90, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000180)=[r0], &(0x7f0000000300)=[{0x3, 0x4, 0x1, 0x8}, {0x2, 0x3, 0xb, 0x2}, {0x3, 0x4, 0x8, 0x2}, {0x5, 0x4, 0x6, 0xb}, {0x5, 0x2, 0xd, 0xc}, {0x4, 0x1, 0x3, 0x7}], 0x10, 0x1}, 0x94) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x0, 0x4f}, {0x0, 0x40000}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe8) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYRESDEC=r2], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x0, @void}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x281442, 0x0) setns(0xffffffffffffffff, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r8, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r7, {0x2}}, './file0\x00'}) r10 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r10, 0x29, 0x39, &(0x7f00000000c0)=ANY=[@ANYBLOB="230003000000"], 0x8) r11 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TCSETSW2(r11, 0x5453, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={r9, 0x20, &(0x7f0000000100)={&(0x7f00000003c0)=""/232, 0xe8, 0x0, &(0x7f0000000680)=""/68, 0x44}}, 0x10) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r13, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r14, 0x0, 0xffffffffffff8001}, 0x18) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000080)={[{@lazytime}, {@nomblk_io_submit}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") pwrite64(0xffffffffffffffff, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 4m41.040813057s ago: executing program 0 (id=14240): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) futex(0x0, 0x85, 0x1, 0x0, 0x0, 0x7fffffff) mount$9p_rdma(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x800008, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e22,rootcontextdm']) socket$xdp(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x7, 0x4, 0x180, 0x4, 0x28, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r3}, 0x10) socket$rds(0x15, 0x5, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) 4m41.023696188s ago: executing program 35 (id=14240): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) futex(0x0, 0x85, 0x1, 0x0, 0x0, 0x7fffffff) mount$9p_rdma(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x800008, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e22,rootcontextdm']) socket$xdp(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x7, 0x4, 0x180, 0x4, 0x28, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r3}, 0x10) socket$rds(0x15, 0x5, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) 4m40.746788614s ago: executing program 7 (id=14247): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) mount_setattr(r0, &(0x7f0000000200)='.\x00', 0x8000, &(0x7f0000001dc0)={0x81, 0x0, 0x80000}, 0x20) 4m40.611999867s ago: executing program 7 (id=14249): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)={0x14, 0x2, 0x6, 0x801}, 0x14}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 4m40.444646833s ago: executing program 7 (id=14252): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = memfd_create(&(0x7f0000000a80)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb8\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb80x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fbdbdf251a000000200001801400020067656e6576653100000000000000000008000100", @ANYRES32=r6], 0x34}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000006a0000022bbd7000fcdbdf250a0000000000000008000500", @ANYRES32=r6, @ANYBLOB="000500"/16, @ANYRES32=r6, @ANYBLOB="04000900080001000200000004000900"], 0x44}}, 0x0) socket(0x10, 0x3, 0x0) 57.72896088s ago: executing program 1 (id=18771): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0xffef, &(0x7f0000009b00)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a808682b7fc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c00008008000340000000023f0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a31"], 0xdc}, 0x1, 0x0, 0x0, 0x48051}, 0x40) 57.548943347s ago: executing program 1 (id=18772): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000059000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108) 57.515314731s ago: executing program 37 (id=18772): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000059000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108) 34.094756312s ago: executing program 3 (id=19230): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfe, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x7fd, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000004000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r2}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x2, 0x0, 0x4}}, 0x2e) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000006000000140008"], 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7, 0x0, 0x1ffffffffffffffd}, 0x18) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r8) sendmsg$ETHTOOL_MSG_TSINFO_GET(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002dbd7000fedbdf2531000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0) 34.092841012s ago: executing program 3 (id=19233): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x10) finit_module(r2, 0x0, 0x7) 34.070512885s ago: executing program 3 (id=19234): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', r1}, 0x18) socket$l2tp(0x2, 0x2, 0x73) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000f40)=ANY=[], 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYBLOB, @ANYRES32=0x0], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000100000000000100000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200002d000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r5}, 0x10) link(&(0x7f00000019c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffe0}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xf93, 0x80, 0x8, 0x5}}}}]}, 0x48}}, 0x44080) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0xd0f, 0x70ad26, 0x0, {0x60, 0x0, 0x0, r6, {}, {0x8, 0xa}, {0xfff2, 0x7}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) syz_io_uring_setup(0xbdc, &(0x7f0000001400)={0x0, 0xec25, 0x400, 0x1, 0xd4}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r12}, 0x10) r13 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r13, &(0x7f0000000080)={0x0, 0xfe, &(0x7f00000001c0)=[{&(0x7f00000007c0)="d8000000180081054e81f782db4cb90402200800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370301a8001600a40002400f000100035c0461c1d67f6f94007134cf6edb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x20000800) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) signalfd(r11, &(0x7f0000000040)={[0x6]}, 0x8) 33.113580675s ago: executing program 3 (id=19246): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0x40, 0xf5}, {0x20, 0x0, 0x3, 0xfffff034}, {0x6, 0x80}]}, 0x10) (async) sendmsg$inet(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="bde49a54", 0xe4bd}], 0x1}, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3f5, 0x8, 0x70bd2d, 0x25dfdbfd, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x810) 33.017957864s ago: executing program 3 (id=19248): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r2, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r3, 0x10c000) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0xe0, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000ffff27bd7000f7dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fda45d0521860000140012800c0001006d616376", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], 0x3, 0x21f, &(0x7f0000000940)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000000c0)='veno', 0x4) sendto$inet6(r6, 0x0, 0x0, 0x20000815, &(0x7f0000b63fe4)={0xa, 0x2, 0x5}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) close_range(r7, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r8}, 0x10) r9 = getpgrp(0x0) r10 = syz_pidfd_open(r9, 0x0) fremovexattr(r10, &(0x7f0000000280)=@known='trusted.overlay.nlink\x00') sendmsg$ETHTOOL_MSG_EEE_GET(r4, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x40080) 31.776113503s ago: executing program 3 (id=19267): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f00000016c0)={0x10, 0x0, 0x25dfdbfb, 0x40000044}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000100000000000000000002dba513d7b1af8ff00000000bfa100000000000007fc835590840562a4283e010000f8ffffffae02000008000000b703000000008fd8850000000400000095d2bca9254b"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x67, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}]}}) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}]}}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6, 0x0, 0xfffffffffffffffd}, 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x30, r8, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x30, r8, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) (async) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r4, @ANYRESHEX=r5], 0x15) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0xfe96, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11c}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) 16.671926262s ago: executing program 38 (id=19267): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f00000016c0)={0x10, 0x0, 0x25dfdbfb, 0x40000044}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000100000000000000000002dba513d7b1af8ff00000000bfa100000000000007fc835590840562a4283e010000f8ffffffae02000008000000b703000000008fd8850000000400000095d2bca9254b"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x67, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}]}}) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}]}}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6, 0x0, 0xfffffffffffffffd}, 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x30, r8, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x30, r8, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) (async) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r4, @ANYRESHEX=r5], 0x15) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0xfe96, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11c}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) 10.473446992s ago: executing program 9 (id=19688): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x1, 0xf0, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r3, 0x0, 0xb}, 0x18) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) sendmsg$can_j1939(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000003c0)="fd42b9a7899170417b523f49b960f80b78d6dc", 0x13}, 0x1, 0x0, 0x0, 0x24008085}, 0x4000000) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)}, 0x4048081) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x20000050) 10.421545397s ago: executing program 9 (id=19692): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x40002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x6000, @fd_index, 0x400000080001001, 0x0, 0x0, 0x22}) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 10.378756611s ago: executing program 9 (id=19695): syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000080)='./file2\x00', 0x1808004, &(0x7f0000000680)=ANY=[@ANYRES16=0x0, @ANYRES64, @ANYRESHEX, @ANYBLOB="92208f8dd2478c4248608a57ea023ef8845944fce569f274772ca5201b4d19c9435b225c2703c4693641c3dab414ccfaa1ac12e42d3a51a9fd90dbb8dfe62fb80628dedad9cd7198cb4a3151acd3756581ae75ee414b0456b64ef7cc12f7f5a3fc858a533068bf99853d8609541e6b600f496ce1dfa65b139a86732db5e92567e310c4de67464d7250876ff8485fc19836a302e2d02a707c1a4324c8624df0f5f22dcebd53ffd3d6cd01d6d0d6ae9e8c05db3db0e1ac10e46b5cda59dfe7ab7cffd6bf7efd4d1b7068ef0b878aff95af9e3c3cdf815921a9ffe2c0f97cdeaba5e6a40289c27f3b0339b98f8cd7f6684801e60f7b"], 0x4, 0x7dc, &(0x7f0000002a00)="$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") (fail_nth: 4) 10.324741607s ago: executing program 9 (id=19697): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8401) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0x7fffffffffffffff}, 0x18) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000340)={'\x00', 0x7ff, 0x9, 0x2, 0xfffffffffffffffd, 0x59c, 0xffffffffffffffff}) ioctl$SG_BLKTRACETEARDOWN(r0, 0x1276, 0x0) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', 0x0, 0x4, 0x9, 0x6, 0x400, 0x34, @dev={0xfe, 0x80, '\x00', 0x3f}, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, 0x0, 0x7800, 0x8, 0x3b0}}) r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r7 = socket$phonet(0x23, 0x2, 0x1) ioctl$AUTOFS_IOC_PROTOSUBVER(r7, 0x80049367, &(0x7f00000008c0)) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000001c0)=0x10) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x5, 0x0, r3, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0x11, &(0x7f0000000280)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @alu={0x7, 0x1, 0x3, 0xa, 0xb, 0x180, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xd2}, @exit, @alu={0x4, 0x1, 0x0, 0xa, 0xa, 0x4, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @map_val={0x18, 0x3, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x9}], &(0x7f0000000000)='GPL\x00', 0x1, 0xd5, &(0x7f0000000340)=""/213, 0x0, 0x10, '\x00', r5, @fallback=0x3, r6, 0x8, &(0x7f0000000580)={0x2}, 0x8, 0x10, &(0x7f0000000680)={0x0, 0x6, 0x3, 0x5}, 0x10, 0xffffffffffffffff, r4, 0x3, &(0x7f0000000780)=[r3, r3, 0x1, r8, r3, r3], &(0x7f00000007c0)=[{0x1, 0x4, 0x10, 0xc}, {0x2, 0x1, 0x2, 0x1}, {0x0, 0x1, 0xb, 0x4}], 0x10, 0x8}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r9}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0xfffffffffffffc58, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000200000000000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r11, 0x5608) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r12 = socket$nl_rdma(0x10, 0x3, 0x14) recvmmsg(r12, &(0x7f0000006080)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x20, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r12, &(0x7f0000000100)={0x0, 0xf00, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1000000000000000"], 0x5c}}, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYRES8=r10, @ANYRES32=r13, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9.460742309s ago: executing program 9 (id=19712): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000028c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002980)={&(0x7f0000000400)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000ffdbdf25090000000e0001006e657464657673696d0000000f00fa0ab10f767460458c96f5072902006e657464657673696d30000008000300000000000800090002000000"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x80a0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xa6cd3f1e914f8b95, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$RTC_WIE_ON(r5, 0x700f) r6 = socket(0x10, 0x803, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=@newtfilter={0x94, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r8, {0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x68, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_OPS={{0x6, 0x4, 0x5}, {0x2c, 0x5, [{0xfffd, 0xa, 0x4, 0x2}, {0x101, 0x2, 0x3, 0x5}, {0x9, 0x4, 0x3, 0x8}, {0x8, 0x1, 0x14, 0x8}, {0x3aff, 0xff, 0x3f, 0x1}]}}, @TCA_BPF_FD={0x8}, @TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x14, 0x5, [{0xff, 0x3, 0x0, 0x2}, {0xffff, 0x3, 0x10, 0x6}]}}]}}]}, 0x94}}, 0x24040084) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, &(0x7f0000000340)=0x41ee, 0x4) sendmmsg$inet(r9, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) recvfrom(r9, 0x0, 0x2a00, 0x2101, 0x0, 0x0) 9.118875951s ago: executing program 9 (id=19720): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) statx(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2000, 0x8, 0xfffffffffffffffe) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)=@generic={&(0x7f0000000200)='./file0\x00', r0}, 0x18) 9.094738924s ago: executing program 39 (id=19720): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) statx(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2000, 0x8, 0xfffffffffffffffe) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)=@generic={&(0x7f0000000200)='./file0\x00', r0}, 0x18) 2.371376764s ago: executing program 5 (id=19840): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4) sendmmsg$inet6(r1, &(0x7f0000005380)=[{{&(0x7f0000000300)={0xa, 0x4e23, 0x2, @mcast2, 0x7}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000b00)="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", 0x43f}], 0x1}}, {{&(0x7f0000000580)={0xa, 0x4e21, 0x344e, @rand_addr=' \x01\x00', 0xc0}, 0x1c, 0x0, 0x0, &(0x7f0000005a40)=ANY=[], 0x120}}], 0x2, 0x1c000) 2.353840896s ago: executing program 5 (id=19842): openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0), 0x105000, 0x0) r0 = io_uring_setup(0x1bc6, &(0x7f0000000300)={0x0, 0x5d48, 0x8, 0x1, 0x262}) r1 = syz_io_uring_setup(0xa8c, &(0x7f0000000240)={0x0, 0xcfe, 0x400, 0x1, 0x80, 0x0, r0}, &(0x7f0000000000), &(0x7f0000000180)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a000000070000000200000004"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x100}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$unix(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r8}, 0x18) close_range(r1, r0, 0x0) r9 = socket$can_raw(0x1d, 0x3, 0x1) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0x1ff, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r11}, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="24000000390009002ebd70000000000004000000040000000c000180060006"], 0x24}}, 0x0) setsockopt$CAN_RAW_FILTER(r9, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{}, {0x0, 0x0, 0x1, 0x1}}], 0x10) r13 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r13, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r14 = socket$netlink(0x10, 0x3, 0x4) write(r14, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) setsockopt$CAN_RAW_FILTER(r9, 0x65, 0x1, 0x0, 0x0) 2.135246567s ago: executing program 5 (id=19845): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/14, @ANYRES8=r0], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x3}, 0x18) close(r0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x1006, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) exit(0x5) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000005f40)=[{{&(0x7f0000000d00)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000003400)=ANY=[@ANYBLOB="20000000000000000000000007000000440cd1700000000700000e0f940401001400000000000000000600000200000002000000000000001100000000000000000000000100000009000000000000001400000000000000eaffffff0100000006000000000000001400000000000000000000000200000006"], 0x80}}, {{&(0x7f00000010c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f00000012c0)=ANY=[], 0x28}}], 0x2, 0x4000004) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r5 = open(&(0x7f0000000880)='./file0\x00', 0x2, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)={0x1b, 0x0, 0x0, 0xd23, 0x0, 0xffffffffffffffff, 0xfffffc00, '\x00', 0x0, r5, 0x2, 0x1, 0x4}, 0x50) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, 0x0, &(0x7f00000003c0)}, 0x20) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") 1.89360157s ago: executing program 2 (id=19850): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x6e, &(0x7f0000000640)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7d0, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, [@srh={0x0, 0x0, 0x4, 0x0, 0x20}]}}}}}}}, 0x0) 1.796313979s ago: executing program 2 (id=19853): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x18) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x40002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x6000, @fd_index, 0x400000080001001, 0x0, 0x0, 0x22}) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 1.752634703s ago: executing program 2 (id=19855): bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000001d6492a009cdaae05968c360000000000000000000700000000000000dd000000000000"], 0x48) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x84}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xa7f10723c5e5444d}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x12001}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x102}, 0x18) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x24040010}, 0x0) (async) close(r7) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) (async, rerun: 64) r8 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r8, 0x0, 0x0) (async, rerun: 32) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 32) r10 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') (async) r11 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r11, &(0x7f0000000000)={0xe0002014}) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r10, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r12, 0x24, 0x0, 0xffff, &(0x7f0000000000)=[0x0], 0x40e8, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'tunl0\x00', &(0x7f00000004c0)={'erspan0\x00', 0x0, 0x7800, 0x7b0, 0x8, 0xd, {{0x29, 0x4, 0x3, 0x1, 0xa4, 0x65, 0x0, 0x6, 0x1399317802a541a0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x29}, {[@cipso={0x86, 0x43, 0x2, [{0x7, 0x10, "300f49ee6a477af9f04e5ca10fb5"}, {0x1, 0x10, "c5eca6df0ba31f898c9be4ae5e25"}, {0x0, 0x9, "7f80864bbec1cc"}, {0x0, 0x2}, {0x7, 0x12, "ac7b14728e62d7f29b56924bae0223c5"}]}, @noop, @cipso={0x86, 0x4b, 0x1, [{0x2, 0x12, "3feb26c5d2873f7b1c62f359c2a32611"}, {0x5, 0xf, "7451ada6c1d409b4571be24c0d"}, {0x5, 0xf, "0d649aa791c9e2dd289170ee86"}, {0x1, 0x4, "815e"}, {0x6, 0x2}, {0x5, 0xf, "6bfd104c41fe7215cb678239ac"}]}]}}}}}) ioctl$sock_inet6_SIOCDELRT(r9, 0x890c, &(0x7f0000000140)={@local, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x9, 0x17, 0x500, 0x1, 0x200000, r13}) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00}, 0x94) (rerun: 32) 1.671382781s ago: executing program 2 (id=19858): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffbe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="27031c00590214000000002f1eafbcf706e105000000894f000f1102ee1680ca8286cee844000000000019b0fb0bba00"/65, 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb", 0x7f}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xf}], 0x4}, 0x0) 1.642617214s ago: executing program 2 (id=19860): ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000080)=0x8000000ffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x103440) syz_usb_disconnect(r1) syz_usb_connect$cdc_ncm(0x3, 0xf3, &(0x7f0000000540)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0x41015500, &(0x7f0000000500)=0x81000000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0600000004000000", @ANYRES32, @ANYBLOB="007226bb87efd70800"/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0xc6f67580d79d0155, &(0x7f0000000040)={0x0, 0x2, 0x60d0, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) r6 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents64(r6, &(0x7f0000000340)=""/120, 0x78) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) clock_nanosleep(0x2, 0x0, &(0x7f0000000180)={0x0, 0x3938700}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000571000000060a010400000008000000000100000008000b4000000000400004803c0001800a0001006d617463680000002c0002800800010065636e000c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073797a"], 0xf0}, 0x1, 0x0, 0x0, 0x20040881}, 0x800) syz_read_part_table(0x4097, &(0x7f00000040c0)="$eJzsz7FN61AYBeDjxE5elCdFUFAioKF1FsgWWQchWIIOiTLDsANDUNBg5FwcZ4EIhL6v8Dn2//tKN/yo17FWSZ727a0+fOhNxpqcl5gnZ0murvPYtsm/eZJ1Gd0fdpu0627VH/A/Sf0y6aer+nu6TLa7094OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4TaqxPi9Lzkt8JJkeL3RHu4skd5uL2+H9oUmzuayGf/cms+H82bR/fnZFku3udDcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6gqi7ZLPLe582y/mJ/jm0YhIEwjF5iWwlLULMQS7B/Q3VIiIMJ6N7r/Ptz4bpqMT1dZuZvafd5zJ8xKv3X2uOatnoT/XvmVewZa773HQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBgBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwQAIAAAAg6P/rdgQKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEMBAAD//33UI0E=") pipe(&(0x7f0000000200)) gettid() 638.184489ms ago: executing program 6 (id=19878): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_int(r1, 0x29, 0x4e, 0x0, &(0x7f0000000000)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000040)={0xfffffff8, 0x401, 0xfffffffd, 0xc4cf, 0x7, "0c08870400", 0x4, 0x200}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x4) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x6, 0x9, 0xba34}}}}]}, 0x44}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1000, 0xffff9130, 0x3, 0x200}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x400dc}, 0x20000000) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000d40000000b"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r10}, 0x18) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="02030003130000002cbd7040fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a004e2300000007ff010000000000000000000000000001010000800000000002000100000000000000070c0000008005000500000000000a004e23000000fffe8000000000000000000000000000aaff01000000000000020013"], 0x98}, 0x1, 0x7}, 0x0) 596.474343ms ago: executing program 4 (id=19879): bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff40, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000002c0)={0x0, 0x9, 0x9, 0x6}, &(0x7f0000000380)=0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000480)={r3, 0x2}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000006400000064000000020008000800000000000007000000000a00000000000007000000000c00000004000084080000000d00000005000000030000000f00000005000000000000000f00000005000000b30d00000900000001000000060000000700000000000001000000002d005f010000"], 0x0, 0x7e, 0x0, 0x0, 0x1}, 0x28) creat(0x0, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000201c5a0ff0cfdcabc161c420", @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x18, 0xc, &(0x7f0000000d00)=ANY=[@ANYRESDEC=r4, @ANYRES64=r0, @ANYBLOB="4665228f7c3c7aa88f6a70b63f360d136a9aaa62d99e8354faf3a78ca525188ae1cceabade8ee0599df54594b347779d59e2f98185fbb89c841ac49d0d9a17f851064d3cb001052697eb8ff53654a1ce60b174253b6b30dbc590ea2d1aee4a8634d2f1a206a799919d095d275ee234eac3cc9ef9f27c6da750a550c6ff2471edeca3dd156f4603596f", @ANYBLOB="6b84ec1e11b60a23a4e4115b12f6f52b0006252128fd62e06e91c588a0e5da214512908e747a989360287c33f542cdf7083c143d6797499c908f861561d8c93a59e3f82077c72933ba82b15ebbdbec499ac4cbb729b7e46ed8d4ac9b392bf11292bba47dfd01b5fa6c5a39334a972927ab373e9ee5a1ca01aa7976cbd0cc69f95ea8ec62e1ca71d6716cb01dd40237e04a2eef2ba5f3a5ba85", @ANYRESOCT], &(0x7f0000000240)='GPL\x00', 0x0, 0x20, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r6 = memfd_secret(0x80000) fchownat(r6, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000f40)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@nombcache}, {@data_err_ignore}, {@grpquota}, {@abort}, {@barrier}, {@resgid}, {@errors_remount}]}, 0x0, 0x55f, &(0x7f0000000580)="$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") write$cgroup_devices(0xffffffffffffffff, 0x0, 0x6) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mm_page_free\x00', r7, 0x0, 0x1002}, 0x18) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r8, 0x0) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0xdfffffff, 0x1000, 0x5, 0x1}, 0x20) 528.88733ms ago: executing program 6 (id=19880): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1f, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000653a5cbed00da0b61d526707745c73f7000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYRESOCT=r1], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='siox_get_data\x00', r3, 0x0, 0xffff}, 0x18) close(r1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0xfffffffd) r5 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="abd029d1bf0c362e8c00"/20, @ANYBLOB="9be023c68d8033c7fe", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00008000000000000000000000000000000000000000000a00000000"], 0x48) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r6}, 0x18) bind$inet(r5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r7, 0x40304580, &(0x7f00000003c0)={0x55, 0x401, 0xfffd, {0x0, 0x81}, {0x50, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) write$char_usb(r7, &(0x7f0000000040)="e2", 0x2250) r8 = io_uring_setup(0x68af, &(0x7f0000000480)={0x0, 0xfffffffc, 0x1880, 0x1}) socket$kcm(0x21, 0x2, 0x2) close_range(r8, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000017c0)=@newtaction={0x14, 0x30, 0xfbed, 0x70bd29, 0x2000000}, 0x14}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r4}, 0x18) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000017c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@mask_cswp={0x58, 0x114, 0x9, {{0x9, 0x660}, 0x0, 0x0, 0x6, 0xd, 0x1, 0x3, 0x3a, 0x8}}], 0x58}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r9, 0x0, 0x5}, 0x18) 514.798341ms ago: executing program 4 (id=19881): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffbe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="27031c00590214000000002f1eafbcf706e105000000894f000f1102ee1680ca8286cee844000000000019b0fb0bba00"/65, 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00000000", 0x83}, {&(0x7f0000000280)="fe112162c63e6da8bc8432294ef18af53cc330a62a2c7035246635093ba4d30fcf19a90804f04a10939db8f4e13069cda6d167bf1b68c94d8d694d6ad1a4d51a715975560ad48770706eb1b88d021e1119f2eb75275cfe77f862368649be0f7aff5e7826729816e3d3e7986d9434f891c71ca6e4210c6757083cfd8e732048c504f28b6d309fc129ed8eb5a82e224eb648f90134d1d315977c6ea360a7fece4baa3dd7dcc970759f29df0e86469e954e2b050e87b203ca27a2a519b7555c3b73f2681d49442d9647ff5ea64110cc5020fdeafe53a7d8be70f3260816bc376bcdc5352771fa55d9733e27730ec7103520e8359c78edd21ee6c68feb3685a55722f5da09ffe8ba9f05081a8d214156376f99906245f2f390ad717979d98f0574f8c5b52dcc2fa494f461be6c2560ddbaafb80c5b4583cbe56d24f14ab78fd718947077ea736251c7b8eee267267534c84daa6f095e94bfb85986a03ddea362cc7e6682884e710727c1163cd4f336c13b844605b7a815fe39e43bd0d2e414410a82958455b8a6bd9194c631d66295675fed64c04107a595c421111a3af6e9fadab5c9", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xf}], 0x4}, 0x0) 486.648224ms ago: executing program 6 (id=19882): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) socket$unix(0x1, 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x2f) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c) 485.854594ms ago: executing program 5 (id=19883): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000400000008000000"], 0x50) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2, 0x1}}, 0x2e) getsockopt(r4, 0x111, 0x6, 0x0, &(0x7f0000000080)) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r5, 0x89e0, &(0x7f0000000100)={0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)=r6}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r6}, 0x18) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = socket(0x1e, 0x80004, 0x0) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x3, 0x0, 0x1000004}, 0x10) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r9 = dup3(r8, r7, 0x0) recvmmsg(r9, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000600)=""/179, 0xb3}], 0x1}, 0xffffffff}], 0x1, 0x1, 0x0) write$tcp_mem(r9, &(0x7f0000000040)={0x7fff, 0x20, 0x7fffffff, 0x20, 0xffff}, 0x48) 458.929346ms ago: executing program 4 (id=19884): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) connect$llc(r0, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x2, 0x0, @remote}, 0x10) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) open_by_handle_at(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="310000fb150244b464e15688d34c5c553328996804882b57c3e174ec44"], 0x1) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) utimensat(0xffffffffffffff9c, 0x0, 0x0, 0x100000) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r4, 0x400, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd602a84350014060000000000000000000000000000000000fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="611d200090780000"], 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000e34e2f763fb15df047f5ef002f00", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES16=r2, @ANYRES64=0x0, @ANYRES64=r0], 0x48) dup2(r6, r5) syz_emit_ethernet(0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2286dd60ca964600140600000600000050f92665a550abf9000000fe8000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file1\x00', 0x3800204, &(0x7f0000003240)=ANY=[], 0x3, 0x33c, &(0x7f00000008c0)="$eJzs3M1LI2ccwPFfXk0imhxKSwvFh/bSXoaY9lwaikJpoKKmVAvCqJM2ZJpIJlhSStVTr6X3ngo9iEdvQus/4KW37mUve8tlYQ8ry7JZ5s28amI2blz9fmCZZ57n+c08T57J8pvBSePb338sFSytoNckGFMSEBE5F0lJUHwBbxt0ylFpty8fTz/5//2VtfWvsrncwrJSi9nVTzJKqdm5f376Je51O5mSs9RG43Hm0dnbZ+82Xqz+ULRU0VLlSk3parPysKZvmobaLlolTakl09AtQxXLllF12ytue8Gs7OzUlV7enknsVA3LUnq5rkpGXdUqqlatK/17vVhWmqapmYRgAHtBl/XsiNFbYx4Nbki1mtVDIhLvackfTmRAAABgorrz/6Cd0o+U/8usk//bnVv5/9EHp7Xpb45nT+zYjcZJtF/+/+kD91gd+X9MREbJ//+Ua+T/vRnR/ZI/XB49/8ftMBftqQp07Nn5f8L7/joOvjtKOwXyfwAAAAAAAAAAAAAAAAAAAAAA3gTnzWay2Wwm/a3/r/UKgbePO+my9Z8SkZi9+k3W/y5bWVuXmPPinr3G5m+7+d28u/U6nIqIKYakI85u84Jd9t88UraU/GvuOfHP7G3IackWpOjEz0tSUm58yIuyy4tf5hbmlcuLv3hNKdEen5GkvNV9fjc+0xlvj39vNx+Vjz5si9ckKf9tSUVM2XbO3Yr/dV6pL77OdcXH3ZMAAAAAAHAHaEoFvNvnVOf9r3uXrmlK9W93f2UkW3AeExmSlqQ8739/nu57fx5Ovhee9OwBAAAAALgfrPrPJd00jeoVhbgM7jN6ITxc52hXTeSqzqG2GQ47nqjzIEPkVef115CfakfB/0OKjqaYVznaePz5j2299ttrgjJEVLh78HN2hbrm2Q+8iVzU+I+Nopd8zrLUe5zgFVdCZGzX8zt//P10fF+Qz479K2Bw54NBB4xfciHFuq86pxC56f93AAAAALx+raTfr/m8vTkwkUEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDP3MhP+nUVJj1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4LZ4GQAA///hFPFh") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x4, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000003, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000140)={0x4200, 0x1, 0x3, 0x4}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r7], 0x20}, 0x1, 0x0, 0x0, 0x20040041}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1bfbacc4b57bd7a1c44004eab06e5962609ee961a1eb9a967a1e693d043b457ab2bf745d1109801506315488273b85cfbf12ff46cfc5c4b06f47e1791425487f3ea9a7f3a60c6423b99ceaa247ad9389136e6ce05358ab7d20e6abe2bdbea095270439fe34099003cb82f822dd6cb42a7c68fe1b64f44338f1d82f1f5a452fe8", @ANYBLOB="80ff6b1bce82ff64987945c182dd0721d21197dea55f792ee4d5bb678427ef92c2fc1720c08420d8b3da309c86476609134f08c1b2965ff9a11b14eb143f01f1bd922e4880a716d6", @ANYRESHEX=r3, @ANYRES32=r3, @ANYRESDEC=r4], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) 447.087557ms ago: executing program 6 (id=19885): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4) sendmmsg$inet6(r1, &(0x7f0000005380)=[{{&(0x7f0000000300)={0xa, 0x4e23, 0x2, @mcast2, 0x7}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000440)="2d526f2d6bbb29d03f332f9039617661828c4133bdc702b76280872795c793bcd7bd87c1a6e3fe2cec785400a03148f72df6ed4b36341189658f42255fc22f32e80ecf632fc75ede9ff23e0100b7b57592fc51672f5144582dcf08ad5b514638b0adcd6c8f45d11dc0dc60cfe2237ac9afb8db62e1aff83abe2b3e6f9087c56028eb7204ff953436fa9abb729dbc88f4393fd7aa035f76fdd65247c54a1cfebe7b7eab655a5e489602e2474ac9b413739e504ff138ddf1cdc99b249321cd429ccc09ebf66ef3ba765bec0bca912b1bba809ab6f53a9c0836bf32f290e9f8dcce437485328676ce1b741f9cb3ba426ac8ae2c99", 0xf3}, {&(0x7f0000000b00)="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", 0x462}], 0x2}}], 0x1, 0x1c000) 425.60626ms ago: executing program 4 (id=19886): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x10) finit_module(r1, 0x0, 0x7) 425.02305ms ago: executing program 6 (id=19887): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4) sendmmsg$inet6(r1, &(0x7f0000005380)=[{{&(0x7f0000000300)={0xa, 0x4e23, 0x2, @mcast2, 0x7}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000440)}, {&(0x7f0000000b00)="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", 0x43f}], 0x2}}, {{&(0x7f0000000580)={0xa, 0x4e21, 0x344e, @rand_addr=' \x01\x00', 0xc0}, 0x1c, 0x0, 0x0, &(0x7f0000005a40)=ANY=[], 0x120}}], 0x2, 0x1c000) 417.71894ms ago: executing program 4 (id=19888): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x400, 0x2) 408.238211ms ago: executing program 6 (id=19889): perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0x2}, 0x6000, 0x0, 0x0, 0x0, 0x4, 0x3}, 0x0, 0x80000000000000, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfd}, 0x0, 0x0, 0x1, 0x0, 0x2, 0xff, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x9) r0 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0x8b25714e) accept4(r0, 0x0, 0x0, 0x0) 360.833956ms ago: executing program 4 (id=19890): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/14, @ANYRES8=r0], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x3}, 0x18) close(r0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x1006, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) exit(0x5) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000005f40)=[{{&(0x7f0000000d00)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000003400)=ANY=[@ANYBLOB="20000000000000000000000007000000440cd1700000000700000e0f940401001400000000000000000600000200000002000000000000001100000000000000000000000100000009000000000000001400000000000000eaffffff0100000006000000000000001400000000000000000000000200000006"], 0x80}}, {{&(0x7f00000010c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f00000012c0)=ANY=[], 0x28}}], 0x2, 0x4000004) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r5 = open(&(0x7f0000000880)='./file0\x00', 0x2, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)={0x1b, 0x0, 0x0, 0xd23, 0x0, 0xffffffffffffffff, 0xfffffc00, '\x00', 0x0, r5, 0x2, 0x1, 0x4}, 0x50) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$eJzs3c1vVFUbAPDnzkwLpe9rKzEqLkyjIZAoLS1g8GMBe0LwY+fGSgtBho/QGi2aWBLcmBg3LkhcuRD/CyW6dWXiwoUbV4akGsNGY3TMnbkzDO1MOy0dbu39/ZLbOeeeOz3nQp85Z+49ZyaAwhpLf5Qi9kTE5SRipK2sElnhWOO4O7+/fzrdkqjVXv0tiSTb1zw+yR6Hsyf/PRLx/TdJ7C6vrHdu4er56Wp19kqWn5i/cHlibuHqgXMXps/Onp29OPXc1NEjh48cnTx4X+dXakufuP7WOyMfnXz9i8/+Sia//OlkEsfi1zONsvbz2CxjMRZ/1GofLN+f/rse3ezKclJu/Z3clSzfwZZVyWJkMCIei5Eot/1vjsSHL+faOKCvaklEDSioRPxDQTXHAc339r29Dy71eVQCPAhLx9OfAx3iv9K4NhijMRARe5c9r8MlvQ1J6/ju25PX0y36dB0O6Gzx2o4stTz+k3psjsbOem7XndI913nTEcCp7DHd/8oG6x9blhf/8OAsXouIxzuN/9eO/zfa4v/NDdYv/gEAAAAAAGDz3DoeEc92uv9Xyu7N7Yyn6vf/ksb9vx/urhA8tgn1r33/r3R7E6oBOlg6HvFSx/m/rTm+o+Us9//GbMDkzLnq7MGIeCgi9sfAjjQ/uUodBz7efaNbWfv8v3RL62/OBczacbuy497nzEzPT9/POQMNS9cinqh0n/+T9v9Je/+fSV8PLvdYx+69N091K1s7/oF+qX0esa9j/5+0jklW/3yOifp4YKI5Kljpyfc++apb/eIf8pP2/7tWj//RpP3zeubW9/sHI+LQQqXWrXyj4//B5LVy8/en3p2en78yGTGYnFi5f2p9bYbtqhkPzXhJ43//06tf/2uN/9vicCgiFnus89F/hn/uVqb/h/yk8T+zrv5//Ympm6Nfd6u/t/7/cL1P35/tcf0PVtdrgObdTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4LypFxP8iKY230qXS+HjEcEQ8ErtK1Utz88+cufT2xZm0rP79/6XmN/2ONPJJ8/v/R9vyU8vyhyLi4Yj4tDxUz4+fvlSdyfvkAQAAAAAAAAAAAAAAAAAAYIsY7rL+P/VLOe/WAX1XyR7FOxRPJe8GALkR/1Bc4h+KS/xDcYl/KK4Nxr/bBbAN6P+hqAZ6O2xnv9sB5EH/DwAAAAAA28qtF5+/kUTE4gtD9S01mJW1bgwO5dU6oJ9KeTcAyI05vFBcpv5AcfU4+RfYxpJW6s9ap/Lus/+T/jQIAAAAAAAAAAAAAFhh355bP665/h/Ylqz/h+Ky/h+Ky/p/KC7v8YG1VvFb/w8AAAAAAAAAAAAA+ZtbuHp+ulqdvSIhsdUSAxGxBZqRQ2Iw//DM+YUJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo+TcAAP//Swsk/Q==") 353.806066ms ago: executing program 5 (id=19891): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rmdir(&(0x7f0000001cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x40002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 327.919839ms ago: executing program 2 (id=19892): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/14, @ANYRES8=r0], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x3}, 0x18) close(r0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x1006, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) exit(0x5) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000005f40)=[{{&(0x7f0000000d00)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000003400)=ANY=[@ANYBLOB="20000000000000000000000007000000440cd1700000000700000e0f940401001400000000000000000600000200000002000000000000001100000000000000000000000100000009000000000000001400000000000000eaffffff0100000006000000000000001400000000000000000000000200000006"], 0x80}}, {{&(0x7f00000010c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f00000012c0)=ANY=[], 0x28}}], 0x2, 0x4000004) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r5 = open(&(0x7f0000000880)='./file0\x00', 0x2, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)={0x1b, 0x0, 0x0, 0xd23, 0x0, 0xffffffffffffffff, 0xfffffc00, '\x00', 0x0, r5, 0x2, 0x1, 0x4}, 0x50) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, 0x0, &(0x7f00000003c0)}, 0x20) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") 327.740509ms ago: executing program 5 (id=19893): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/14, @ANYRES8=r0], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x3}, 0x18) close(r0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x1006, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) exit(0x5) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000005f40)=[{{&(0x7f0000000d00)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000003400)=ANY=[@ANYBLOB="20000000000000000000000007000000440cd1700000000700000e0f940401001400000000000000000600000200000002000000000000001100000000000000000000000100000009000000000000001400000000000000eaffffff0100000006000000000000001400000000000000000000000200000006"], 0x80}}, {{&(0x7f00000010c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f00000012c0)=ANY=[], 0x28}}], 0x2, 0x4000004) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r5 = open(&(0x7f0000000880)='./file0\x00', 0x2, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)={0x1b, 0x0, 0x0, 0xd23, 0x0, 0xffffffffffffffff, 0xfffffc00, '\x00', 0x0, r5, 0x2, 0x1, 0x4}, 0x50) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") 109.785789ms ago: executing program 8 (id=19896): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) lseek(r2, 0xdfffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000680)='kmem_cache_free\x00', r1}, 0x18) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1000, 0x800000000000000) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r3, r3, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000480)) getuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', &(0x7f0000000580), 0x100) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x8}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{}, &(0x7f00000008c0), &(0x7f0000000880)=r4}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002080)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0xfffffffffffffccc}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x6}, {0x1000}, {0x1}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x20000}, {}, {}, {}, {0x7ff}, {0x0, 0x0, 0x0, 0x8000000, 0xfffffffe}, {}, {0x0, 0x0, 0x1}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x2, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x10000000}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, {0x7}, {}, {0x0, 0x4}, {0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x800000, 0x2}, {}, {}, {}, {0x0, 0x0, 0x2}, {0x4, 0xc000000}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x5}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x3, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x23}, {0x0, 0x0, 0x0, 0x404}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x100000, 0x80000001}, {}, {}, {0x0, 0x0, 0x0, 0xc1f5}, {0x0, 0x0, 0x9f, 0x0, 0x0, 0x1}, {0x20000, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0xfffffffd}, {}, {}, {}, {}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, {0x0, 0x0, 0x1, 0x0, 0x747}, {0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, {}, {}, {}, {0x0, 0xfffffffd}, {}, {}, {0x0, 0x0, 0x80000001, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, {0x0, 0x0, 0x0, 0x0, 0x401}, {}, {0x0, 0x78}, {0x0, 0x5}, {}, {0x0, 0x0, 0x3a006510, 0x2}], [{0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x2}, {}, {}, {0x4}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {0x4}, {}, {}, {}, {}, {}, {0x1}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) 80.566383ms ago: executing program 8 (id=19897): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) lseek(r2, 0xdfffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000680)='kmem_cache_free\x00', r1}, 0x18) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1000, 0x800000000000000) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r3, r3, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000480)) getuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', &(0x7f0000000580), 0x100) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x8}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{}, &(0x7f00000008c0), &(0x7f0000000880)=r4}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002080)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0xfffffffffffffccc}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x6}, {0x1000}, {0x1}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x20000}, {}, {}, {}, {0x7ff}, {0x0, 0x0, 0x0, 0x8000000, 0xfffffffe}, {}, {0x0, 0x0, 0x1}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x2, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x10000000}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, {0x7}, {}, {0x0, 0x4}, {0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x800000, 0x2}, {}, {}, {}, {0x0, 0x0, 0x2}, {0x4, 0xc000000}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x5}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x3, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x23}, {0x0, 0x0, 0x0, 0x404}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x100000, 0x80000001}, {}, {}, {0x0, 0x0, 0x0, 0xc1f5}, {0x0, 0x0, 0x9f, 0x0, 0x0, 0x1}, {0x20000, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0xfffffffd}, {}, {}, {}, {}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, {0x0, 0x0, 0x1, 0x0, 0x747}, {0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, {}, {}, {}, {0x0, 0xfffffffd}, {}, {}, {0x0, 0x0, 0x80000001, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, {0x0, 0x0, 0x0, 0x0, 0x401}, {}, {0x0, 0x78}, {0x0, 0x5}, {}, {0x0, 0x0, 0x3a006510, 0x2}], [{0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x2}, {}, {}, {0x4}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {0x4}, {}, {}, {}, {}, {}, {0x1}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) 47.083836ms ago: executing program 8 (id=19898): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x10) finit_module(r1, 0x0, 0x7) 31.477527ms ago: executing program 8 (id=19899): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4) sendmmsg$inet6(r1, &(0x7f0000005380)=[{{&(0x7f0000000300)={0xa, 0x4e23, 0x2, @mcast2, 0x7}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000440)}, {&(0x7f0000000b00)="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", 0x43f}], 0x2}}, {{&(0x7f0000000580)={0xa, 0x4e21, 0x344e, @rand_addr=' \x01\x00', 0xc0}, 0x1c, 0x0, 0x0, &(0x7f0000005a40)=ANY=[], 0x120}}], 0x2, 0x1c000) 15.613549ms ago: executing program 8 (id=19900): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x18) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x40002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x6000, @fd_index, 0x400000080001001, 0x0, 0x0, 0x22}) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 0s ago: executing program 8 (id=19901): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xeb0}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@noload}, {@noquota}]}, 0x3, 0x440, &(0x7f0000000280)="$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") r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x10000000, 0xe, 0x0, &(0x7f00000003c0)="131a8701feaa16bca4ac74ab821d", 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) kernel console output (not intermixed with test programs): new maximum fragment MTU (0) [ 1122.398297][ T9290] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 1122.409025][ T9290] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 1122.419469][ T9290] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 1122.430320][ T9290] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 1122.452244][ T9303] netlink: 'syz.8.18925': attribute type 3 has an invalid length. [ 1122.482865][ T9302] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1122.501502][ T9309] loop5: detected capacity change from 0 to 1024 [ 1122.508936][ T9309] EXT4-fs: Mount option(s) incompatible with ext2 [ 1122.574781][ T9316] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1122.582760][ T9316] vhci_hcd vhci_hcd.2: invalid port number 96 [ 1122.588948][ T9316] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 1122.720790][ T9316] __nla_validate_parse: 7 callbacks suppressed [ 1122.720808][ T9316] netlink: 16 bytes leftover after parsing attributes in process `syz.9.18929'. [ 1122.736216][ T9316] netlink: 4 bytes leftover after parsing attributes in process `syz.9.18929'. [ 1122.812974][ T9332] vhci_hcd vhci_hcd.3: invalid port number 9 [ 1122.866348][ T9334] hub 6-0:1.0: USB hub found [ 1122.871140][ T9334] hub 6-0:1.0: 8 ports detected [ 1122.900448][ T9342] netlink: 92 bytes leftover after parsing attributes in process `syz.6.18937'. [ 1122.909992][ T9342] netlink: 32 bytes leftover after parsing attributes in process `syz.6.18937'. [ 1122.925656][ T9345] loop5: detected capacity change from 0 to 128 [ 1122.933896][ T9345] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1122.955174][ T9350] netlink: 28 bytes leftover after parsing attributes in process `syz.6.18939'. [ 1122.964712][ T9350] netlink: 28 bytes leftover after parsing attributes in process `syz.6.18939'. [ 1122.975640][ T1349] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1123.000008][ T9354] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1123.008207][ T9354] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1123.017005][ T9354] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 1123.034476][ T9354] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.18940: Allocating blocks 41-42 which overlap fs metadata [ 1123.048548][ T9354] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.18940: Allocating blocks 41-42 which overlap fs metadata [ 1123.062950][ T9354] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.18940: Failed to acquire dquot type 1 [ 1123.074636][ T9354] EXT4-fs error (device loop5): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 1123.089105][ T9354] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.18940: corrupted inode contents [ 1123.104247][ T9354] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #12: comm syz.5.18940: mark_inode_dirty error [ 1123.116064][ T9354] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.18940: corrupted inode contents [ 1123.128171][ T9354] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #12: comm syz.5.18940: mark_inode_dirty error [ 1123.139736][ T9354] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.18940: corrupted inode contents [ 1123.152093][ T9354] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 1123.160936][ T9354] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.18940: corrupted inode contents [ 1123.173335][ T9354] EXT4-fs error (device loop5): ext4_truncate:4635: inode #12: comm syz.5.18940: mark_inode_dirty error [ 1123.184675][ T9354] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 1123.193846][ T9354] EXT4-fs (loop5): 1 truncate cleaned up [ 1123.200030][ T9354] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1123.223849][ T9354] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1123.238892][ T9354] EXT4-fs (loop5): shut down requested (1) [ 1123.247372][ T9354] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 1123.256361][ T9354] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 1123.272700][ T9354] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18940'. [ 1123.282610][ T9354] macvlan0: entered promiscuous mode [ 1123.297815][ T9354] netlink: 'syz.5.18940': attribute type 1 has an invalid length. [ 1123.298048][ T9365] !yz!: rxe_newlink: already configured on team_slave_0 [ 1123.305801][ T9354] netlink: 'syz.5.18940': attribute type 2 has an invalid length. [ 1123.305828][ T9354] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18940'. [ 1123.357044][T18013] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.365786][ T1349] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1123.378846][T18013] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.408720][T18013] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.425853][ T9370] netlink: 60 bytes leftover after parsing attributes in process `syz.8.18944'. [ 1123.442749][T18013] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.451328][ T9370] netlink: 60 bytes leftover after parsing attributes in process `syz.8.18944'. [ 1123.493209][ T9384] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1123.560203][ T9397] netlink: 'syz.8.18953': attribute type 1 has an invalid length. [ 1123.573093][ T9399] bridge0: port 3(batadv1) entered blocking state [ 1123.579580][ T9399] bridge0: port 3(batadv1) entered disabled state [ 1123.586295][ T9399] batadv1: entered allmulticast mode [ 1123.592358][ T9399] batadv1: entered promiscuous mode [ 1123.604666][ T9397] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1123.874655][ T9448] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1123.892569][ T9448] vhci_hcd vhci_hcd.2: invalid port number 96 [ 1123.898722][ T9448] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 1124.072540][ T31] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 1124.081857][ T31] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 1124.192923][ T9459] vhci_hcd vhci_hcd.3: invalid port number 9 [ 1124.484076][ T9468] Process accounting resumed [ 1124.492235][ T9480] sd 0:0:1:0: device reset [ 1124.744900][ T9495] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1124.946596][ T9506] set_capacity_and_notify: 1 callbacks suppressed [ 1124.946608][ T9506] loop3: detected capacity change from 0 to 512 [ 1125.180953][ T9531] loop5: detected capacity change from 0 to 1024 [ 1125.189095][ T9531] EXT4-fs: inline encryption not supported [ 1125.225386][ T9531] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1125.406611][ T1349] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1125.580336][ T9556] hub 6-0:1.0: USB hub found [ 1125.605721][ T9556] hub 6-0:1.0: 8 ports detected [ 1125.775746][ T9573] loop5: detected capacity change from 0 to 1024 [ 1125.800721][ T9573] EXT4-fs: inline encryption not supported [ 1125.831079][ T9573] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1125.918214][ T9590] sd 0:0:1:0: device reset [ 1125.931896][ T9590] tmpfs: Unknown parameter 'fsuuid' [ 1125.947692][ T9590] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 1126.026273][ T1349] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1126.113027][ T9630] vhci_hcd vhci_hcd.3: invalid port number 9 [ 1126.132602][ T9634] hub 6-0:1.0: USB hub found [ 1126.146608][ T9634] hub 6-0:1.0: 8 ports detected [ 1126.163041][ T9639] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1126.170350][ T9639] vhci_hcd vhci_hcd.2: invalid port number 96 [ 1126.176494][ T9639] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 1126.202538][ T9644] loop3: detected capacity change from 0 to 512 [ 1126.216723][ T9649] loop5: detected capacity change from 0 to 512 [ 1126.272759][ T9649] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1126.284383][ T9649] EXT4-fs error (device loop5): __ext4_iget:5426: inode #11: block 2: comm syz.5.19015: invalid block [ 1126.295801][ T9649] EXT4-fs (loop5): Remounting filesystem read-only [ 1126.303112][ T9649] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1126.982217][ T1349] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1127.067645][ T29] kauditd_printk_skb: 537 callbacks suppressed [ 1127.067661][ T29] audit: type=1326 audit(1127.039:143830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9695 comm="syz.3.19026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74caff749 code=0x7ffc0000 [ 1127.097086][ T29] audit: type=1326 audit(1127.039:143831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9695 comm="syz.3.19026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74caff749 code=0x7ffc0000 [ 1127.120351][ T29] audit: type=1326 audit(1127.039:143832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9695 comm="syz.3.19026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74caff749 code=0x7ffc0000 [ 1127.143709][ T29] audit: type=1326 audit(1127.039:143833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9695 comm="syz.3.19026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb74cafdf90 code=0x7ffc0000 [ 1127.166859][ T29] audit: type=1326 audit(1127.039:143834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9695 comm="syz.3.19026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74caff749 code=0x7ffc0000 [ 1127.190079][ T29] audit: type=1326 audit(1127.039:143835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9695 comm="syz.3.19026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74caff749 code=0x7ffc0000 [ 1127.213282][ T29] audit: type=1326 audit(1127.039:143836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9695 comm="syz.3.19026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74caff749 code=0x7ffc0000 [ 1127.236634][ T29] audit: type=1326 audit(1127.039:143837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9695 comm="syz.3.19026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fb74caff749 code=0x7ffc0000 [ 1127.259754][ T29] audit: type=1326 audit(1127.039:143838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9695 comm="syz.3.19026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74caff749 code=0x7ffc0000 [ 1127.282919][ T29] audit: type=1326 audit(1127.039:143839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9695 comm="syz.3.19026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74caff749 code=0x7ffc0000 [ 1127.745521][ T9744] __nla_validate_parse: 15 callbacks suppressed [ 1127.745538][ T9744] netlink: 28 bytes leftover after parsing attributes in process `syz.5.19039'. [ 1127.815354][ T9744] netlink: 28 bytes leftover after parsing attributes in process `syz.5.19039'. [ 1127.886956][ T9751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19041'. [ 1127.956515][ T9759] netlink: 19 bytes leftover after parsing attributes in process `syz.6.19044'. [ 1128.149436][ T9780] netlink: 28 bytes leftover after parsing attributes in process `syz.5.19054'. [ 1128.178433][ T9780] netlink: 28 bytes leftover after parsing attributes in process `syz.5.19054'. [ 1128.248203][ T9794] netlink: 19 bytes leftover after parsing attributes in process `syz.5.19059'. [ 1128.342348][ T9809] net_ratelimit: 11 callbacks suppressed [ 1128.342361][ T9809] batadv0: mtu less than device minimum [ 1128.354290][ T9809] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 1128.365027][ T9809] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 1128.375892][ T9809] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 1128.386557][ T9809] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 1128.397210][ T9809] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 1128.408058][ T9809] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 1128.419016][ T9809] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 1128.429717][ T9809] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 1128.440673][ T9809] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 1128.531246][ T9818] loop5: detected capacity change from 0 to 1024 [ 1128.538259][ T9818] EXT4-fs: inline encryption not supported [ 1128.556373][ T9818] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1128.579175][ T9818] FAULT_INJECTION: forcing a failure. [ 1128.579175][ T9818] name failslab, interval 1, probability 0, space 0, times 0 [ 1128.591833][ T9818] CPU: 1 UID: 0 PID: 9818 Comm: syz.5.19067 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1128.591924][ T9818] Tainted: [W]=WARN [ 1128.591932][ T9818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1128.591947][ T9818] Call Trace: [ 1128.591954][ T9818] [ 1128.592034][ T9818] __dump_stack+0x1d/0x30 [ 1128.592061][ T9818] dump_stack_lvl+0x95/0xd0 [ 1128.592300][ T9818] dump_stack+0x15/0x1b [ 1128.592318][ T9818] should_fail_ex+0x265/0x280 [ 1128.592358][ T9818] should_failslab+0x8c/0xb0 [ 1128.592440][ T9818] __kmalloc_cache_noprof+0x65/0x4c0 [ 1128.592469][ T9818] ? audit_log_d_path+0x8d/0x150 [ 1128.592497][ T9818] audit_log_d_path+0x8d/0x150 [ 1128.592523][ T9818] audit_log_d_path_exe+0x42/0x70 [ 1128.592610][ T9818] audit_log_task+0x1e9/0x250 [ 1128.592655][ T9818] ? kstrtouint+0x76/0xc0 [ 1128.592727][ T9818] audit_seccomp+0x61/0x100 [ 1128.592762][ T9818] ? __seccomp_filter+0x832/0x1260 [ 1128.592791][ T9818] __seccomp_filter+0x843/0x1260 [ 1128.592819][ T9818] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1128.592890][ T9818] ? vfs_write+0x7e8/0x960 [ 1128.592919][ T9818] __secure_computing+0x82/0x150 [ 1128.592948][ T9818] syscall_trace_enter+0xcf/0x1e0 [ 1128.593005][ T9818] do_syscall_64+0xa4/0x2b0 [ 1128.593046][ T9818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1128.593073][ T9818] RIP: 0033:0x7fbfc1c1f749 [ 1128.593090][ T9818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1128.593180][ T9818] RSP: 002b:00007fbfc0687038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 1128.593202][ T9818] RAX: ffffffffffffffda RBX: 00007fbfc1e75fa0 RCX: 00007fbfc1c1f749 [ 1128.593218][ T9818] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000007 [ 1128.593233][ T9818] RBP: 00007fbfc0687090 R08: 0000000000000000 R09: 0000000000000000 [ 1128.593248][ T9818] R10: 0000000000005405 R11: 0000000000000246 R12: 0000000000000001 [ 1128.593264][ T9818] R13: 00007fbfc1e76038 R14: 00007fbfc1e75fa0 R15: 00007ffdddbc64c8 [ 1128.593286][ T9818] [ 1128.854199][ T1349] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1128.952573][ T9844] netlink: 1 bytes leftover after parsing attributes in process `syz.8.19070'. [ 1129.112717][ T9859] netlink: 28 bytes leftover after parsing attributes in process `syz.6.19076'. [ 1129.121789][ T9859] netem: change failed [ 1129.128377][ T9860] FAULT_INJECTION: forcing a failure. [ 1129.128377][ T9860] name failslab, interval 1, probability 0, space 0, times 0 [ 1129.141087][ T9860] CPU: 1 UID: 0 PID: 9860 Comm: syz.5.19078 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1129.141114][ T9860] Tainted: [W]=WARN [ 1129.141119][ T9860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1129.141193][ T9860] Call Trace: [ 1129.141200][ T9860] [ 1129.141209][ T9860] __dump_stack+0x1d/0x30 [ 1129.141273][ T9860] dump_stack_lvl+0x95/0xd0 [ 1129.141293][ T9860] dump_stack+0x15/0x1b [ 1129.141309][ T9860] should_fail_ex+0x265/0x280 [ 1129.141332][ T9860] should_failslab+0x8c/0xb0 [ 1129.141412][ T9860] kmem_cache_alloc_noprof+0x69/0x4b0 [ 1129.141507][ T9860] ? dst_alloc+0xbd/0x100 [ 1129.141595][ T9860] dst_alloc+0xbd/0x100 [ 1129.141690][ T9860] ? ip_vs_sip_fill_param+0x262/0x5f0 [ 1129.141713][ T9860] ip_route_output_key_hash_rcu+0xf29/0x1380 [ 1129.141747][ T9860] ip_route_output_flow+0x65/0x110 [ 1129.141770][ T9860] udp_sendmsg+0x11b0/0x13c0 [ 1129.141875][ T9860] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1129.141980][ T9860] ? xa_load+0xb1/0xe0 [ 1129.142016][ T9860] udpv6_sendmsg+0x812/0x15b0 [ 1129.142041][ T9860] ? _raw_spin_lock+0x52/0xa0 [ 1129.142131][ T9860] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 1129.142156][ T9860] inet6_sendmsg+0xac/0xd0 [ 1129.142247][ T9860] __sock_sendmsg+0x8b/0x180 [ 1129.142268][ T9860] ____sys_sendmsg+0x345/0x4a0 [ 1129.142295][ T9860] ___sys_sendmsg+0x17b/0x1d0 [ 1129.142411][ T9860] __sys_sendmmsg+0x178/0x300 [ 1129.142455][ T9860] __x64_sys_sendmmsg+0x57/0x70 [ 1129.142513][ T9860] x64_sys_call+0x1e28/0x3000 [ 1129.142547][ T9860] do_syscall_64+0xca/0x2b0 [ 1129.142590][ T9860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1129.142616][ T9860] RIP: 0033:0x7fbfc1c1f749 [ 1129.142633][ T9860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1129.142705][ T9860] RSP: 002b:00007fbfc0687038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1129.142739][ T9860] RAX: ffffffffffffffda RBX: 00007fbfc1e75fa0 RCX: 00007fbfc1c1f749 [ 1129.142752][ T9860] RDX: 0000000000000002 RSI: 0000200000000b00 RDI: 0000000000000006 [ 1129.142767][ T9860] RBP: 00007fbfc0687090 R08: 0000000000000000 R09: 0000000000000000 [ 1129.142905][ T9860] R10: 0000000008000004 R11: 0000000000000246 R12: 0000000000000001 [ 1129.142920][ T9860] R13: 00007fbfc1e76038 R14: 00007fbfc1e75fa0 R15: 00007ffdddbc64c8 [ 1129.142941][ T9860] [ 1129.545772][ T9876] FAULT_INJECTION: forcing a failure. [ 1129.545772][ T9876] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1129.558992][ T9876] CPU: 0 UID: 0 PID: 9876 Comm: syz.6.19085 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1129.559092][ T9876] Tainted: [W]=WARN [ 1129.559100][ T9876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1129.559113][ T9876] Call Trace: [ 1129.559119][ T9876] [ 1129.559127][ T9876] __dump_stack+0x1d/0x30 [ 1129.559205][ T9876] dump_stack_lvl+0x95/0xd0 [ 1129.559225][ T9876] dump_stack+0x15/0x1b [ 1129.559242][ T9876] should_fail_ex+0x265/0x280 [ 1129.559336][ T9876] should_fail+0xb/0x20 [ 1129.559358][ T9876] should_fail_usercopy+0x1a/0x20 [ 1129.559379][ T9876] _copy_from_user+0x1c/0xb0 [ 1129.559412][ T9876] ___sys_sendmsg+0xc1/0x1d0 [ 1129.559532][ T9876] __x64_sys_sendmsg+0xd4/0x160 [ 1129.559571][ T9876] x64_sys_call+0x17ba/0x3000 [ 1129.559674][ T9876] do_syscall_64+0xca/0x2b0 [ 1129.559710][ T9876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1129.559741][ T9876] RIP: 0033:0x7fe57ef9f749 [ 1129.559813][ T9876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1129.559833][ T9876] RSP: 002b:00007fe57da07038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1129.559853][ T9876] RAX: ffffffffffffffda RBX: 00007fe57f1f5fa0 RCX: 00007fe57ef9f749 [ 1129.559864][ T9876] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 1129.559874][ T9876] RBP: 00007fe57da07090 R08: 0000000000000000 R09: 0000000000000000 [ 1129.559925][ T9876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1129.559938][ T9876] R13: 00007fe57f1f6038 R14: 00007fe57f1f5fa0 R15: 00007ffd4d2b6c88 [ 1129.559955][ T9876] [ 1129.804675][ T9888] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 1129.815841][ T9888] loop5: detected capacity change from 0 to 512 [ 1129.824960][ T9888] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1129.845129][ T1349] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1129.861337][ T9886] netlink: 28 bytes leftover after parsing attributes in process `syz.8.19089'. [ 1129.870970][ T9884] Cannot find add_set index 0 as target [ 1129.893476][ T9899] netlink: '+}[@': attribute type 13 has an invalid length. [ 1130.210409][ T9916] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1130.866572][ T9908] syz.5.19095 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1130.877683][ T9908] CPU: 1 UID: 0 PID: 9908 Comm: syz.5.19095 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1130.877738][ T9908] Tainted: [W]=WARN [ 1130.877779][ T9908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1130.877794][ T9908] Call Trace: [ 1130.877799][ T9908] [ 1130.877806][ T9908] __dump_stack+0x1d/0x30 [ 1130.877827][ T9908] dump_stack_lvl+0x95/0xd0 [ 1130.877848][ T9908] dump_stack+0x15/0x1b [ 1130.877909][ T9908] dump_header+0x81/0x240 [ 1130.877927][ T9908] oom_kill_process+0x295/0x350 [ 1130.877949][ T9908] out_of_memory+0x97b/0xb80 [ 1130.877976][ T9908] try_charge_memcg+0x610/0xa10 [ 1130.878071][ T9908] charge_memcg+0x51/0xc0 [ 1130.878097][ T9908] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 1130.878174][ T9908] __read_swap_cache_async+0x17b/0x2d0 [ 1130.878282][ T9908] swap_cluster_readahead+0x262/0x3c0 [ 1130.878321][ T9908] swapin_readahead+0xde/0x820 [ 1130.878400][ T9908] ? mod_memcg_lruvec_state+0x1a1/0x280 [ 1130.878496][ T9908] ? __rcu_read_unlock+0x34/0x70 [ 1130.878518][ T9908] ? __rcu_read_unlock+0x4f/0x70 [ 1130.878541][ T9908] ? swap_cache_get_folio+0x277/0x280 [ 1130.878574][ T9908] do_swap_page+0x2b4/0x21e0 [ 1130.878654][ T9908] ? __pfx_default_wake_function+0x10/0x10 [ 1130.878684][ T9908] handle_mm_fault+0x9d8/0x2c60 [ 1130.878739][ T9908] do_user_addr_fault+0x630/0x1080 [ 1130.878777][ T9908] exc_page_fault+0x62/0xa0 [ 1130.878806][ T9908] asm_exc_page_fault+0x26/0x30 [ 1130.878823][ T9908] RIP: 0033:0x7fbfc1af59ec [ 1130.878875][ T9908] Code: 66 0f 1f 44 00 00 69 3d c6 fc ea 00 e8 03 00 00 48 8d 1d c7 05 38 00 e8 c2 9c 12 00 eb 0c 48 81 c3 f0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 1130.878896][ T9908] RSP: 002b:00007ffdddbc6630 EFLAGS: 00010283 [ 1130.878913][ T9908] RAX: 0000000000000000 RBX: 00007fbfc1e77080 RCX: 0000000000000000 [ 1130.878927][ T9908] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555f721808 [ 1130.878941][ T9908] RBP: 00007fbfc1e77da0 R08: 0000000000000000 R09: 7fffffffffffffff [ 1130.878955][ T9908] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000114170 [ 1130.878981][ T9908] R13: 00007fbfc1e76090 R14: ffffffffffffffff R15: 00007ffdddbc6740 [ 1130.878997][ T9908] [ 1130.879003][ T9908] memory: usage 307200kB, limit 307200kB, failcnt 356 [ 1131.099066][ T9908] memory+swap: usage 307428kB, limit 9007199254740988kB, failcnt 0 [ 1131.107003][ T9908] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 1131.114318][ T9908] Memory cgroup stats for /syz5: [ 1131.118348][ T9908] cache 0 [ 1131.126355][ T9908] rss 0 [ 1131.129147][ T9908] shmem 0 [ 1131.132133][ T9908] mapped_file 0 [ 1131.135682][ T9908] dirty 0 [ 1131.138633][ T9908] writeback 0 [ 1131.141957][ T9908] workingset_refault_anon 49236 [ 1131.146921][ T9908] workingset_refault_file 0 [ 1131.151436][ T9908] swap 233472 [ 1131.154838][ T9908] swapcached 0 [ 1131.158217][ T9908] pgpgin 1302582 [ 1131.161768][ T9908] pgpgout 1302579 [ 1131.165479][ T9908] pgfault 1458371 [ 1131.169196][ T9908] pgmajfault 7338 [ 1131.172903][ T9908] inactive_anon 0 [ 1131.176573][ T9908] active_anon 0 [ 1131.180043][ T9908] inactive_file 0 [ 1131.183766][ T9908] active_file 12288 [ 1131.187577][ T9908] unevictable 0 [ 1131.191159][ T9908] hierarchical_memory_limit 314572800 [ 1131.196575][ T9908] hierarchical_memsw_limit 9223372036854771712 [ 1131.202757][ T9908] total_cache 0 [ 1131.206225][ T9908] total_rss 0 [ 1131.209526][ T9908] total_shmem 0 [ 1131.213036][ T9908] total_mapped_file 0 [ 1131.217013][ T9908] total_dirty 0 [ 1131.220544][ T9908] total_writeback 0 [ 1131.224364][ T9908] total_workingset_refault_anon 49236 [ 1131.229728][ T9908] total_workingset_refault_file 0 [ 1131.234774][ T9908] total_swap 233472 [ 1131.238583][ T9908] total_swapcached 0 [ 1131.242504][ T9908] total_pgpgin 1302582 [ 1131.246586][ T9908] total_pgpgout 1302579 [ 1131.250762][ T9908] total_pgfault 1458371 [ 1131.254919][ T9908] total_pgmajfault 7338 [ 1131.259062][ T9908] total_inactive_anon 0 [ 1131.263212][ T9908] total_active_anon 0 [ 1131.267199][ T9908] total_inactive_file 0 [ 1131.271410][ T9908] total_active_file 12288 [ 1131.275744][ T9908] total_unevictable 0 [ 1131.279747][ T9908] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.19095,pid=9908,uid=0 [ 1131.294715][ T9908] Memory cgroup out of memory: Killed process 9908 (syz.5.19095) total-vm:96016kB, anon-rss:1140kB, file-rss:22460kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 1131.313205][ T9984] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5122 sclass=netlink_route_socket pid=9984 comm=syz.3.19114 [ 1131.472841][T10003] loop5: detected capacity change from 0 to 1024 [ 1131.495623][T10003] EXT4-fs: Mount option(s) incompatible with ext2 [ 1131.599249][T10014] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1131.623704][T10014] vhci_hcd vhci_hcd.2: invalid port number 96 [ 1131.629904][T10014] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 1131.716527][T10020] FAULT_INJECTION: forcing a failure. [ 1131.716527][T10020] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1131.729766][T10020] CPU: 1 UID: 0 PID: 10020 Comm: syz.5.19123 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1131.729801][T10020] Tainted: [W]=WARN [ 1131.729810][T10020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1131.729887][T10020] Call Trace: [ 1131.729894][T10020] [ 1131.729902][T10020] __dump_stack+0x1d/0x30 [ 1131.729930][T10020] dump_stack_lvl+0x95/0xd0 [ 1131.729953][T10020] dump_stack+0x15/0x1b [ 1131.729975][T10020] should_fail_ex+0x265/0x280 [ 1131.730061][T10020] should_fail+0xb/0x20 [ 1131.730078][T10020] should_fail_usercopy+0x1a/0x20 [ 1131.730101][T10020] _copy_from_user+0x1c/0xb0 [ 1131.730155][T10020] ___sys_sendmsg+0xc1/0x1d0 [ 1131.730201][T10020] __x64_sys_sendmsg+0xd4/0x160 [ 1131.730230][T10020] x64_sys_call+0x17ba/0x3000 [ 1131.730278][T10020] do_syscall_64+0xca/0x2b0 [ 1131.730387][T10020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1131.730409][T10020] RIP: 0033:0x7fbfc1c1f749 [ 1131.730426][T10020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1131.730501][T10020] RSP: 002b:00007fbfc0687038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1131.730563][T10020] RAX: ffffffffffffffda RBX: 00007fbfc1e75fa0 RCX: 00007fbfc1c1f749 [ 1131.730577][T10020] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 1131.730591][T10020] RBP: 00007fbfc0687090 R08: 0000000000000000 R09: 0000000000000000 [ 1131.730652][T10020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1131.730727][T10020] R13: 00007fbfc1e76038 R14: 00007fbfc1e75fa0 R15: 00007ffdddbc64c8 [ 1131.730744][T10020] [ 1131.930287][T10027] loop5: detected capacity change from 0 to 256 [ 1131.951919][T10027] FAT-fs (loop5): Directory bread(block 64) failed [ 1131.958803][T10027] FAT-fs (loop5): Directory bread(block 65) failed [ 1131.965388][T10027] FAT-fs (loop5): Directory bread(block 66) failed [ 1131.972801][T10027] FAT-fs (loop5): Directory bread(block 67) failed [ 1131.981920][T10027] FAT-fs (loop5): Directory bread(block 68) failed [ 1131.988662][T10027] FAT-fs (loop5): Directory bread(block 69) failed [ 1131.995467][T10027] FAT-fs (loop5): Directory bread(block 70) failed [ 1132.002170][T10027] FAT-fs (loop5): Directory bread(block 71) failed [ 1132.008859][T10027] FAT-fs (loop5): Directory bread(block 72) failed [ 1132.015490][T10027] FAT-fs (loop5): Directory bread(block 73) failed [ 1132.040871][T10034] netlink: 'syz.6.19127': attribute type 10 has an invalid length. [ 1132.048820][T10034] netlink: 'syz.6.19127': attribute type 19 has an invalid length. [ 1132.195306][ T29] kauditd_printk_skb: 2852 callbacks suppressed [ 1132.195327][ T29] audit: type=1326 audit(1132.169:146692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10047 comm="syz.5.19133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfc1c1f749 code=0x7ffc0000 [ 1132.229996][T10048] loop5: detected capacity change from 0 to 1024 [ 1132.237711][T10048] EXT4-fs: Mount option(s) incompatible with ext2 [ 1132.244769][ T29] audit: type=1326 audit(1132.199:146693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10047 comm="syz.5.19133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7fbfc1c1f749 code=0x7ffc0000 [ 1132.268057][ T29] audit: type=1326 audit(1132.199:146694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10047 comm="syz.5.19133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfc1c1f749 code=0x7ffc0000 [ 1132.291351][ T29] audit: type=1326 audit(1132.199:146695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10047 comm="syz.5.19133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7fbfc1c1f749 code=0x7ffc0000 [ 1132.314675][ T29] audit: type=1326 audit(1132.199:146696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10047 comm="syz.5.19133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfc1c1f749 code=0x7ffc0000 [ 1132.338056][ T29] audit: type=1326 audit(1132.199:146697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10047 comm="syz.5.19133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fbfc1c1f749 code=0x7ffc0000 [ 1132.361431][ T29] audit: type=1326 audit(1132.199:146698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10047 comm="syz.5.19133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbfc1c1f783 code=0x7ffc0000 [ 1132.384486][ T29] audit: type=1326 audit(1132.199:146699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10047 comm="syz.5.19133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fbfc1c1e1ff code=0x7ffc0000 [ 1132.407587][ T29] audit: type=1326 audit(1132.199:146700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10047 comm="syz.5.19133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fbfc1c1f7d7 code=0x7ffc0000 [ 1132.430841][ T29] audit: type=1326 audit(1132.199:146701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10047 comm="syz.5.19133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbfc1c1df90 code=0x7ffc0000 [ 1132.602835][T10058] loop5: detected capacity change from 0 to 1024 [ 1132.609841][T10058] EXT4-fs: Ignoring removed oldalloc option [ 1132.615862][T10058] EXT4-fs: Ignoring removed bh option [ 1132.683445][T10058] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1132.787150][T10058] EXT4-fs warning (device loop5): ext4_resize_begin:72: won't resize using backup superblock at 1 [ 1132.810944][T10073] sd 0:0:1:0: device reset [ 1132.930724][T10093] __nla_validate_parse: 12 callbacks suppressed [ 1132.930800][T10093] netlink: 19 bytes leftover after parsing attributes in process `syz.3.19143'. [ 1133.013800][ T1349] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1133.061708][T10102] bond0: (slave dummy0): Releasing backup interface [ 1133.070407][T10102] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 1133.078499][T10102] batman_adv: batadv0: Adding interface: dummy0 [ 1133.084815][T10102] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 1133.123129][T10106] netlink: 28 bytes leftover after parsing attributes in process `syz.5.19146'. [ 1133.192531][T10106] netlink: 28 bytes leftover after parsing attributes in process `syz.5.19146'. [ 1133.398317][T10112] netlink: 16 bytes leftover after parsing attributes in process `syz.3.19148'. [ 1133.407421][T10112] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19148'. [ 1133.714009][T10183] netlink: 'syz.6.19167': attribute type 13 has an invalid length. [ 1133.747263][T10183] gretap0: refused to change device tx_queue_len [ 1133.754713][T10183] net_ratelimit: 10 callbacks suppressed [ 1133.754724][T10183] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1133.917259][T10201] FAULT_INJECTION: forcing a failure. [ 1133.917259][T10201] name failslab, interval 1, probability 0, space 0, times 0 [ 1133.930046][T10201] CPU: 1 UID: 0 PID: 10201 Comm: syz.6.19172 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1133.930134][T10201] Tainted: [W]=WARN [ 1133.930218][T10201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1133.930233][T10201] Call Trace: [ 1133.930240][T10201] [ 1133.930248][T10201] __dump_stack+0x1d/0x30 [ 1133.930276][T10201] dump_stack_lvl+0x95/0xd0 [ 1133.930349][T10201] dump_stack+0x15/0x1b [ 1133.930372][T10201] should_fail_ex+0x265/0x280 [ 1133.930399][T10201] should_failslab+0x8c/0xb0 [ 1133.930420][T10201] kmem_cache_alloc_noprof+0x69/0x4b0 [ 1133.930468][T10201] ? prepare_creds+0x39/0x550 [ 1133.930492][T10201] prepare_creds+0x39/0x550 [ 1133.930514][T10201] selinux_lsm_setattr+0x1a4/0x660 [ 1133.930554][T10201] selinux_setprocattr+0x4f/0x70 [ 1133.930578][T10201] security_setprocattr+0x1a7/0x1d0 [ 1133.930683][T10201] proc_pid_attr_write+0x1eb/0x220 [ 1133.930715][T10201] ? __pfx_proc_pid_attr_write+0x10/0x10 [ 1133.930802][T10201] vfs_write+0x269/0x960 [ 1133.930823][T10201] ? __rcu_read_unlock+0x4f/0x70 [ 1133.930878][T10201] ? __fget_files+0x184/0x1c0 [ 1133.930974][T10201] ? mutex_lock+0x58/0x90 [ 1133.931016][T10201] ksys_write+0xda/0x1a0 [ 1133.931038][T10201] __x64_sys_write+0x40/0x50 [ 1133.931109][T10201] x64_sys_call+0x2847/0x3000 [ 1133.931137][T10201] do_syscall_64+0xca/0x2b0 [ 1133.931181][T10201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1133.931205][T10201] RIP: 0033:0x7fe57ef9f749 [ 1133.931230][T10201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1133.931250][T10201] RSP: 002b:00007fe57da07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1133.931334][T10201] RAX: ffffffffffffffda RBX: 00007fe57f1f5fa0 RCX: 00007fe57ef9f749 [ 1133.931352][T10201] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 1133.931366][T10201] RBP: 00007fe57da07090 R08: 0000000000000000 R09: 0000000000000000 [ 1133.931380][T10201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1133.931395][T10201] R13: 00007fe57f1f6038 R14: 00007fe57f1f5fa0 R15: 00007ffd4d2b6c88 [ 1133.931418][T10201] [ 1134.242032][T10209] netlink: 4 bytes leftover after parsing attributes in process `syz.8.19176'. [ 1134.267847][T10209] team0: Port device team_slave_1 removed [ 1134.496325][T10248] loop5: detected capacity change from 0 to 512 [ 1134.505381][T10248] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1134.526406][T10248] EXT4-fs error (device loop5): __ext4_iget:5426: inode #11: block 2: comm syz.5.19183: invalid block [ 1134.550456][T10248] EXT4-fs (loop5): Remounting filesystem read-only [ 1134.557571][T10248] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1134.604476][T10255] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1134.643199][T10255] vhci_hcd vhci_hcd.2: invalid port number 96 [ 1134.649335][T10255] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 1134.694893][T10262] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1134.847570][T10255] netlink: 16 bytes leftover after parsing attributes in process `syz.8.19189'. [ 1134.856707][T10255] netlink: 4 bytes leftover after parsing attributes in process `syz.8.19189'. [ 1134.866774][T10268] netlink: 72 bytes leftover after parsing attributes in process `syz.9.19195'. [ 1135.039713][T10276] FAULT_INJECTION: forcing a failure. [ 1135.039713][T10276] name failslab, interval 1, probability 0, space 0, times 0 [ 1135.052484][T10276] CPU: 1 UID: 0 PID: 10276 Comm: syz.6.19194 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1135.052595][T10276] Tainted: [W]=WARN [ 1135.052604][T10276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1135.052621][T10276] Call Trace: [ 1135.052629][T10276] [ 1135.052638][T10276] __dump_stack+0x1d/0x30 [ 1135.052696][T10276] dump_stack_lvl+0x95/0xd0 [ 1135.052723][T10276] dump_stack+0x15/0x1b [ 1135.052744][T10276] should_fail_ex+0x265/0x280 [ 1135.052827][T10276] should_failslab+0x8c/0xb0 [ 1135.052851][T10276] __kmalloc_cache_noprof+0x65/0x4c0 [ 1135.052880][T10276] ? resv_map_alloc+0x32/0x190 [ 1135.052908][T10276] ? vfs_write+0x7e8/0x960 [ 1135.052972][T10276] resv_map_alloc+0x32/0x190 [ 1135.052997][T10276] hugetlbfs_get_inode+0x67/0x370 [ 1135.053027][T10276] ? mutex_unlock+0x4f/0x90 [ 1135.053136][T10276] hugetlb_file_setup+0x192/0x3d0 [ 1135.053166][T10276] ksys_mmap_pgoff+0x157/0x310 [ 1135.053216][T10276] x64_sys_call+0x16bb/0x3000 [ 1135.053241][T10276] do_syscall_64+0xca/0x2b0 [ 1135.053305][T10276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1135.053327][T10276] RIP: 0033:0x7fe57ef9f749 [ 1135.053343][T10276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1135.053362][T10276] RSP: 002b:00007fe57d9e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1135.053382][T10276] RAX: ffffffffffffffda RBX: 00007fe57f1f6090 RCX: 00007fe57ef9f749 [ 1135.053435][T10276] RDX: 0000000001000002 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 1135.053448][T10276] RBP: 00007fe57d9e6090 R08: ffffffffffffffff R09: 0000000000000000 [ 1135.053461][T10276] R10: 000200000005c831 R11: 0000000000000246 R12: 0000000000000001 [ 1135.053474][T10276] R13: 00007fe57f1f6128 R14: 00007fe57f1f6090 R15: 00007ffd4d2b6c88 [ 1135.053583][T10276] [ 1135.289708][ T1349] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1135.353577][T10299] ip6tnl0: Caught tx_queue_len zero misconfig [ 1135.450478][T10309] FAULT_INJECTION: forcing a failure. [ 1135.450478][T10309] name failslab, interval 1, probability 0, space 0, times 0 [ 1135.463302][T10309] CPU: 0 UID: 0 PID: 10309 Comm: syz.5.19204 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1135.463335][T10309] Tainted: [W]=WARN [ 1135.463366][T10309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1135.463383][T10309] Call Trace: [ 1135.463391][T10309] [ 1135.463401][T10309] __dump_stack+0x1d/0x30 [ 1135.463426][T10309] dump_stack_lvl+0x95/0xd0 [ 1135.463447][T10309] dump_stack+0x15/0x1b [ 1135.463538][T10309] should_fail_ex+0x265/0x280 [ 1135.463579][T10309] should_failslab+0x8c/0xb0 [ 1135.463605][T10309] __kmalloc_noprof+0xb9/0x5a0 [ 1135.463631][T10309] ? sock_kmalloc+0x85/0xc0 [ 1135.463661][T10309] ? iovec_from_user+0x5e/0x210 [ 1135.463751][T10309] sock_kmalloc+0x85/0xc0 [ 1135.463787][T10309] ____sys_sendmsg+0xf8/0x4a0 [ 1135.463816][T10309] ___sys_sendmsg+0x17b/0x1d0 [ 1135.463900][T10309] __sys_sendmmsg+0x178/0x300 [ 1135.464001][T10309] __x64_sys_sendmmsg+0x57/0x70 [ 1135.464036][T10309] x64_sys_call+0x1e28/0x3000 [ 1135.464085][T10309] do_syscall_64+0xca/0x2b0 [ 1135.464154][T10309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1135.464174][T10309] RIP: 0033:0x7fbfc1c1f749 [ 1135.464187][T10309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1135.464255][T10309] RSP: 002b:00007fbfc0687038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1135.464272][T10309] RAX: ffffffffffffffda RBX: 00007fbfc1e75fa0 RCX: 00007fbfc1c1f749 [ 1135.464284][T10309] RDX: 0000000000000001 RSI: 0000200000000b00 RDI: 0000000000000003 [ 1135.464298][T10309] RBP: 00007fbfc0687090 R08: 0000000000000000 R09: 0000000000000000 [ 1135.464313][T10309] R10: 0000000008000004 R11: 0000000000000246 R12: 0000000000000001 [ 1135.464324][T10309] R13: 00007fbfc1e76038 R14: 00007fbfc1e75fa0 R15: 00007ffdddbc64c8 [ 1135.464371][T10309] [ 1135.671193][T10313] netlink: 28 bytes leftover after parsing attributes in process `syz.3.19209'. [ 1135.701522][T10315] sd 0:0:1:0: device reset [ 1135.725721][T10317] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1135.733598][T10317] vhci_hcd vhci_hcd.2: invalid port number 96 [ 1135.739735][T10317] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 1135.853262][T10328] FAULT_INJECTION: forcing a failure. [ 1135.853262][T10328] name failslab, interval 1, probability 0, space 0, times 0 [ 1135.865986][T10328] CPU: 0 UID: 0 PID: 10328 Comm: syz.6.19215 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1135.866028][T10328] Tainted: [W]=WARN [ 1135.866041][T10328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1135.866054][T10328] Call Trace: [ 1135.866062][T10328] [ 1135.866069][T10328] __dump_stack+0x1d/0x30 [ 1135.866209][T10328] dump_stack_lvl+0x95/0xd0 [ 1135.866231][T10328] dump_stack+0x15/0x1b [ 1135.866281][T10328] should_fail_ex+0x265/0x280 [ 1135.866425][T10328] should_failslab+0x8c/0xb0 [ 1135.866454][T10328] kmem_cache_alloc_noprof+0x69/0x4b0 [ 1135.866483][T10328] ? skb_clone+0x151/0x1f0 [ 1135.866587][T10328] skb_clone+0x151/0x1f0 [ 1135.866616][T10328] nfnetlink_rcv+0x2fc/0x16c0 [ 1135.866644][T10328] ? kmem_cache_free+0xe3/0x3a0 [ 1135.866724][T10328] ? __kfree_skb+0x109/0x150 [ 1135.866756][T10328] ? consume_skb+0x49/0x150 [ 1135.866788][T10328] ? nlmon_xmit+0x4f/0x60 [ 1135.866814][T10328] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 1135.866918][T10328] ? __dev_queue_xmit+0x138d/0x1ec0 [ 1135.866999][T10328] ? __dev_queue_xmit+0x148/0x1ec0 [ 1135.867034][T10328] ? ref_tracker_free+0x37d/0x3e0 [ 1135.867083][T10328] netlink_unicast+0x5c0/0x690 [ 1135.867159][T10328] netlink_sendmsg+0x58b/0x6b0 [ 1135.867202][T10328] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1135.867234][T10328] __sock_sendmsg+0x145/0x180 [ 1135.867255][T10328] ____sys_sendmsg+0x31e/0x4a0 [ 1135.867347][T10328] ___sys_sendmsg+0x17b/0x1d0 [ 1135.867402][T10328] __x64_sys_sendmsg+0xd4/0x160 [ 1135.867483][T10328] x64_sys_call+0x17ba/0x3000 [ 1135.867579][T10328] do_syscall_64+0xca/0x2b0 [ 1135.867649][T10328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1135.867672][T10328] RIP: 0033:0x7fe57ef9f749 [ 1135.867687][T10328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1135.867726][T10328] RSP: 002b:00007fe57da07038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1135.867821][T10328] RAX: ffffffffffffffda RBX: 00007fe57f1f5fa0 RCX: 00007fe57ef9f749 [ 1135.867837][T10328] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 1135.867853][T10328] RBP: 00007fe57da07090 R08: 0000000000000000 R09: 0000000000000000 [ 1135.867869][T10328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1135.867885][T10328] R13: 00007fe57f1f6038 R14: 00007fe57f1f5fa0 R15: 00007ffd4d2b6c88 [ 1135.867987][T10328] [ 1136.254666][T10344] Invalid ELF header magic: != ELF [ 1136.301118][T10358] tipc: Enabling of bearer rejected, failed to enable media [ 1136.329567][T10362] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1136.495927][T10384] netlink: 'syz.3.19234': attribute type 21 has an invalid length. [ 1136.503985][T10384] netlink: 'syz.3.19234': attribute type 1 has an invalid length. [ 1136.504572][T10386] vhci_hcd vhci_hcd.3: invalid port number 9 [ 1136.539350][T10392] netlink: 'syz.5.19237': attribute type 39 has an invalid length. [ 1136.588968][T10401] !yz!: rxe_newlink: already configured on team_slave_0 [ 1137.487470][ T29] kauditd_printk_skb: 428 callbacks suppressed [ 1137.487483][ T29] audit: type=1326 audit(1137.459:147130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10450 comm="syz.9.19247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3334a9f749 code=0x7ffc0000 [ 1137.599210][ T29] audit: type=1326 audit(1137.489:147131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10450 comm="syz.9.19247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3334a9f749 code=0x7ffc0000 [ 1137.622598][ T29] audit: type=1326 audit(1137.489:147132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10450 comm="syz.9.19247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3334a9f749 code=0x7ffc0000 [ 1137.645943][ T29] audit: type=1326 audit(1137.489:147133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10450 comm="syz.9.19247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3334a9f749 code=0x7ffc0000 [ 1137.669209][ T29] audit: type=1326 audit(1137.489:147134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10450 comm="syz.9.19247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3334a9f749 code=0x7ffc0000 [ 1137.692587][ T29] audit: type=1326 audit(1137.499:147135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10450 comm="syz.9.19247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f3334a9f749 code=0x7ffc0000 [ 1137.715987][ T29] audit: type=1326 audit(1137.499:147136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10450 comm="syz.9.19247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3334a9f749 code=0x7ffc0000 [ 1137.739337][ T29] audit: type=1326 audit(1137.499:147137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10450 comm="syz.9.19247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3334a9f749 code=0x7ffc0000 [ 1137.762524][ T29] audit: type=1326 audit(1137.499:147138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10450 comm="syz.9.19247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3334a9f749 code=0x7ffc0000 [ 1137.785787][ T29] audit: type=1326 audit(1137.499:147139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10450 comm="syz.9.19247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3334a9f749 code=0x7ffc0000 [ 1137.889751][T10457] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1138.042964][T10471] __nla_validate_parse: 14 callbacks suppressed [ 1138.042977][T10471] netlink: 8 bytes leftover after parsing attributes in process `syz.8.19255'. [ 1138.083137][T10474] netlink: 16 bytes leftover after parsing attributes in process `syz.3.19248'. [ 1138.092192][T10474] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19248'. [ 1138.121979][T10477] FAULT_INJECTION: forcing a failure. [ 1138.121979][T10477] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1138.135190][T10477] CPU: 1 UID: 0 PID: 10477 Comm: syz.8.19255 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1138.135223][T10477] Tainted: [W]=WARN [ 1138.135231][T10477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1138.135244][T10477] Call Trace: [ 1138.135252][T10477] [ 1138.135260][T10477] __dump_stack+0x1d/0x30 [ 1138.135308][T10477] dump_stack_lvl+0x95/0xd0 [ 1138.135332][T10477] dump_stack+0x15/0x1b [ 1138.135353][T10477] should_fail_ex+0x265/0x280 [ 1138.135446][T10477] should_fail+0xb/0x20 [ 1138.135468][T10477] should_fail_usercopy+0x1a/0x20 [ 1138.135494][T10477] _copy_from_user+0x1c/0xb0 [ 1138.135538][T10477] ___sys_recvmsg+0xaa/0x370 [ 1138.135581][T10477] ? _parse_integer+0x27/0x40 [ 1138.135608][T10477] do_recvmmsg+0x1ef/0x540 [ 1138.135646][T10477] ? fput+0x8f/0xc0 [ 1138.135706][T10477] __x64_sys_recvmmsg+0xe5/0x170 [ 1138.135738][T10477] x64_sys_call+0x2b75/0x3000 [ 1138.135762][T10477] do_syscall_64+0xca/0x2b0 [ 1138.135831][T10477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1138.135849][T10477] RIP: 0033:0x7f831ff6f749 [ 1138.135862][T10477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1138.135905][T10477] RSP: 002b:00007f831e9b6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1138.135921][T10477] RAX: ffffffffffffffda RBX: 00007f83201c6090 RCX: 00007f831ff6f749 [ 1138.135932][T10477] RDX: 0000000004000267 RSI: 0000200000007700 RDI: 0000000000000005 [ 1138.135942][T10477] RBP: 00007f831e9b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1138.135953][T10477] R10: 0000000000000fc0 R11: 0000000000000246 R12: 0000000000000001 [ 1138.135964][T10477] R13: 00007f83201c6128 R14: 00007f83201c6090 R15: 00007ffe5a49f668 [ 1138.136010][T10477] [ 1138.141753][T10473] netlink: 8 bytes leftover after parsing attributes in process `syz.6.19256'. [ 1138.302016][T10484] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1138.347190][T10473] netlink: 8 bytes leftover after parsing attributes in process `syz.6.19256'. [ 1138.360140][T10473] netlink: 8 bytes leftover after parsing attributes in process `syz.6.19256'. [ 1138.392998][T10473] netlink: 8 bytes leftover after parsing attributes in process `syz.6.19256'. [ 1138.457360][T10491] FAULT_INJECTION: forcing a failure. [ 1138.457360][T10491] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1138.470566][T10491] CPU: 0 UID: 0 PID: 10491 Comm: syz.6.19262 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1138.470603][T10491] Tainted: [W]=WARN [ 1138.470682][T10491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1138.470697][T10491] Call Trace: [ 1138.470704][T10491] [ 1138.470712][T10491] __dump_stack+0x1d/0x30 [ 1138.470738][T10491] dump_stack_lvl+0x95/0xd0 [ 1138.470758][T10491] dump_stack+0x15/0x1b [ 1138.470811][T10491] should_fail_ex+0x265/0x280 [ 1138.470840][T10491] should_fail+0xb/0x20 [ 1138.470863][T10491] should_fail_usercopy+0x1a/0x20 [ 1138.470887][T10491] strncpy_from_user+0x27/0x260 [ 1138.470942][T10491] getname_flags+0xae/0x3b0 [ 1138.470967][T10491] __x64_sys_symlinkat+0x40/0x70 [ 1138.470987][T10491] x64_sys_call+0x2a36/0x3000 [ 1138.471044][T10491] do_syscall_64+0xca/0x2b0 [ 1138.471146][T10491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1138.471167][T10491] RIP: 0033:0x7fe57ef9f749 [ 1138.471181][T10491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1138.471197][T10491] RSP: 002b:00007fe57da07038 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 1138.471217][T10491] RAX: ffffffffffffffda RBX: 00007fe57f1f5fa0 RCX: 00007fe57ef9f749 [ 1138.471233][T10491] RDX: 0000000000000000 RSI: ffffffffffffff9c RDI: 0000000000000000 [ 1138.471260][T10491] RBP: 00007fe57da07090 R08: 0000000000000000 R09: 0000000000000000 [ 1138.471275][T10491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1138.471289][T10491] R13: 00007fe57f1f6038 R14: 00007fe57f1f5fa0 R15: 00007ffd4d2b6c88 [ 1138.471313][T10491] [ 1138.643609][T10494] random: crng reseeded on system resumption [ 1138.713845][T10414] loop5: detected capacity change from 0 to 1024 [ 1138.721209][T10414] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1138.732247][T10414] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 1138.751258][T10500] vhci_hcd vhci_hcd.3: invalid port number 9 [ 1138.767212][T10414] JBD2: no valid journal superblock found [ 1138.773170][T10414] EXT4-fs (loop5): Could not load journal inode [ 1139.232654][T10554] FAULT_INJECTION: forcing a failure. [ 1139.232654][T10554] name failslab, interval 1, probability 0, space 0, times 0 [ 1139.245549][T10554] CPU: 0 UID: 0 PID: 10554 Comm: syz.8.19275 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1139.245578][T10554] Tainted: [W]=WARN [ 1139.245584][T10554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1139.245596][T10554] Call Trace: [ 1139.245601][T10554] [ 1139.245618][T10554] __dump_stack+0x1d/0x30 [ 1139.245643][T10554] dump_stack_lvl+0x95/0xd0 [ 1139.245671][T10554] dump_stack+0x15/0x1b [ 1139.245688][T10554] should_fail_ex+0x265/0x280 [ 1139.245770][T10554] should_failslab+0x8c/0xb0 [ 1139.245791][T10554] __kmalloc_noprof+0xb9/0x5a0 [ 1139.245850][T10554] ? genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 1139.245876][T10554] genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 1139.245930][T10554] genl_family_rcv_msg_doit+0x48/0x1b0 [ 1139.245951][T10554] ? selinux_capable+0x31/0x40 [ 1139.245971][T10554] ? security_capable+0x83/0x90 [ 1139.246068][T10554] ? ns_capable+0x7d/0xb0 [ 1139.246136][T10554] genl_rcv_msg+0x422/0x460 [ 1139.246156][T10554] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1139.246182][T10554] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 1139.246200][T10554] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1139.246244][T10554] netlink_rcv_skb+0x123/0x220 [ 1139.246269][T10554] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1139.246295][T10554] genl_rcv+0x28/0x40 [ 1139.246318][T10554] netlink_unicast+0x5c0/0x690 [ 1139.246345][T10554] netlink_sendmsg+0x58b/0x6b0 [ 1139.246435][T10554] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1139.246470][T10554] __sock_sendmsg+0x145/0x180 [ 1139.246488][T10554] ____sys_sendmsg+0x31e/0x4a0 [ 1139.246566][T10554] ___sys_sendmsg+0x17b/0x1d0 [ 1139.246604][T10554] __x64_sys_sendmsg+0xd4/0x160 [ 1139.246657][T10554] x64_sys_call+0x17ba/0x3000 [ 1139.246679][T10554] do_syscall_64+0xca/0x2b0 [ 1139.246711][T10554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1139.246730][T10554] RIP: 0033:0x7f831ff6f749 [ 1139.246743][T10554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1139.246789][T10554] RSP: 002b:00007f831e995038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1139.246806][T10554] RAX: ffffffffffffffda RBX: 00007f83201c6180 RCX: 00007f831ff6f749 [ 1139.246817][T10554] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 000000000000000d [ 1139.246872][T10554] RBP: 00007f831e995090 R08: 0000000000000000 R09: 0000000000000000 [ 1139.246883][T10554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1139.246894][T10554] R13: 00007f83201c6218 R14: 00007f83201c6180 R15: 00007ffe5a49f668 [ 1139.246912][T10554] [ 1139.554813][T10558] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1139.562320][T10558] vhci_hcd vhci_hcd.2: invalid port number 96 [ 1139.568515][T10558] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 1139.636792][T10567] netlink: 8 bytes leftover after parsing attributes in process `syz.6.19281'. [ 1139.667250][T10570] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1139.709466][T30688] IPVS: starting estimator thread 0... [ 1139.724972][T10558] netlink: 16 bytes leftover after parsing attributes in process `syz.5.19277'. [ 1139.734227][T10558] netlink: 4 bytes leftover after parsing attributes in process `syz.5.19277'. [ 1139.751231][T10558] loop5: detected capacity change from 0 to 128 [ 1139.802614][T10573] IPVS: using max 2400 ests per chain, 120000 per kthread [ 1139.936365][T10588] loop5: detected capacity change from 0 to 8192 [ 1140.199909][T10612] FAULT_INJECTION: forcing a failure. [ 1140.199909][T10612] name failslab, interval 1, probability 0, space 0, times 0 [ 1140.212785][T10612] CPU: 1 UID: 0 PID: 10612 Comm: syz.8.19293 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1140.212822][T10612] Tainted: [W]=WARN [ 1140.212831][T10612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1140.212868][T10612] Call Trace: [ 1140.212873][T10612] [ 1140.212880][T10612] __dump_stack+0x1d/0x30 [ 1140.212967][T10612] dump_stack_lvl+0x95/0xd0 [ 1140.212991][T10612] dump_stack+0x15/0x1b [ 1140.213014][T10612] should_fail_ex+0x265/0x280 [ 1140.213102][T10612] should_failslab+0x8c/0xb0 [ 1140.213133][T10612] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 1140.213238][T10612] ? __alloc_skb+0x2ff/0x4b0 [ 1140.213265][T10612] __alloc_skb+0x2ff/0x4b0 [ 1140.213292][T10612] ? __alloc_skb+0x228/0x4b0 [ 1140.213320][T10612] netlink_alloc_large_skb+0xbf/0xf0 [ 1140.213373][T10612] netlink_sendmsg+0x3cf/0x6b0 [ 1140.213417][T10612] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1140.213468][T10612] __sock_sendmsg+0x145/0x180 [ 1140.213499][T10612] ____sys_sendmsg+0x31e/0x4a0 [ 1140.213535][T10612] ___sys_sendmsg+0x17b/0x1d0 [ 1140.213646][T10612] __x64_sys_sendmsg+0xd4/0x160 [ 1140.213683][T10612] x64_sys_call+0x17ba/0x3000 [ 1140.213705][T10612] do_syscall_64+0xca/0x2b0 [ 1140.213814][T10612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1140.213835][T10612] RIP: 0033:0x7f831ff6f749 [ 1140.213848][T10612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1140.213930][T10612] RSP: 002b:00007f831e9d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1140.213946][T10612] RAX: ffffffffffffffda RBX: 00007f83201c5fa0 RCX: 00007f831ff6f749 [ 1140.213957][T10612] RDX: 0000000000000018 RSI: 0000200000000540 RDI: 0000000000000007 [ 1140.213967][T10612] RBP: 00007f831e9d7090 R08: 0000000000000000 R09: 0000000000000000 [ 1140.213978][T10612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1140.213988][T10612] R13: 00007f83201c6038 R14: 00007f83201c5fa0 R15: 00007ffe5a49f668 [ 1140.214049][T10612] [ 1140.431348][T10614] loop5: detected capacity change from 0 to 1024 [ 1140.438047][T10614] EXT4-fs: Ignoring removed orlov option [ 1140.446482][T10614] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1140.468098][T10614] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1140.628967][T10639] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1140.932706][ T1349] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1141.187255][T10672] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1141.407453][T10707] ip6tnl1: entered promiscuous mode [ 1141.412834][T10707] ip6tnl1: entered allmulticast mode [ 1141.505415][T10722] pim6reg: entered allmulticast mode [ 1141.639463][T10741] netlink: 'syz.8.19329': attribute type 12 has an invalid length. [ 1141.682290][T10745] netlink: 'syz.6.19331': attribute type 12 has an invalid length. [ 1141.965222][T10758] 9p: Bad value for 'wfdno' [ 1142.032670][T10763] loop5: detected capacity change from 0 to 1024 [ 1142.040938][T10763] EXT4-fs: Mount option(s) incompatible with ext2 [ 1142.305125][T10772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1142.314230][T10772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1142.326032][T10786] loop5: detected capacity change from 0 to 512 [ 1142.360902][T10792] netlink: 'syz.9.19343': attribute type 21 has an invalid length. [ 1142.471360][T10811] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10811 comm=syz.5.19352 [ 1142.640854][T10830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1142.649521][T10830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1142.746025][T10840] 0ªX¹¦À: renamed from caif0 [ 1142.752830][T10840] 0ªX¹¦À: entered allmulticast mode [ 1142.758129][T10840] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 1143.223034][T10849] vhci_hcd vhci_hcd.3: invalid port number 9 [ 1143.241586][T10851] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1143.305603][T10852] __nla_validate_parse: 9 callbacks suppressed [ 1143.305616][T10852] netlink: 8 bytes leftover after parsing attributes in process `syz.8.19363'. [ 1143.362986][T10861] netlink: 8 bytes leftover after parsing attributes in process `LX[X'. [ 1143.590738][ T29] kauditd_printk_skb: 672 callbacks suppressed [ 1143.590752][ T29] audit: type=1326 audit(1143.559:147812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10878 comm="syz.9.19374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3334a9f749 code=0x7ffc0000 [ 1143.621428][ T29] audit: type=1326 audit(1143.579:147813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10878 comm="syz.9.19374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3334a9f749 code=0x7ffc0000 [ 1143.646315][ T29] audit: type=1326 audit(1143.599:147814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10878 comm="syz.9.19374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3334a9f749 code=0x7ffc0000 [ 1143.669634][ T29] audit: type=1326 audit(1143.599:147815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10878 comm="syz.9.19374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3334a9f749 code=0x7ffc0000 [ 1143.692988][ T29] audit: type=1326 audit(1143.599:147816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10878 comm="syz.9.19374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3334a9f749 code=0x7ffc0000 [ 1143.716241][ T29] audit: type=1326 audit(1143.629:147817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10878 comm="syz.9.19374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3334a9f749 code=0x7ffc0000 [ 1143.739527][ T29] audit: type=1326 audit(1143.629:147818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10878 comm="syz.9.19374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3334a9f749 code=0x7ffc0000 [ 1143.762784][ T29] audit: type=1326 audit(1143.629:147819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10878 comm="syz.9.19374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3334a9f749 code=0x7ffc0000 [ 1143.786074][ T29] audit: type=1326 audit(1143.629:147820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10878 comm="syz.9.19374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f3334a9f749 code=0x7ffc0000 [ 1143.809370][ T29] audit: type=1326 audit(1143.629:147821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10878 comm="syz.9.19374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3334a9f749 code=0x7ffc0000 [ 1143.864041][T10888] netlink: 68 bytes leftover after parsing attributes in process `syz.5.19379'. [ 1143.912986][T10891] vhci_hcd vhci_hcd.3: invalid port number 9 [ 1143.954681][T10895] block device autoloading is deprecated and will be removed. [ 1144.070865][T10904] netlink: 16 bytes leftover after parsing attributes in process `syz.5.19384'. [ 1144.138589][T10909] ip6_vti0: Caught tx_queue_len zero misconfig [ 1144.157233][T10912] netlink: 68 bytes leftover after parsing attributes in process `syz.8.19387'. [ 1144.963086][T10925] vhci_hcd vhci_hcd.3: invalid port number 9 [ 1145.040539][T10931] block device autoloading is deprecated and will be removed. [ 1145.050159][T10929] loop5: detected capacity change from 0 to 1024 [ 1145.057583][T10929] EXT4-fs: Mount option(s) incompatible with ext2 [ 1145.264045][T10946] pimreg: entered allmulticast mode [ 1145.269808][T10946] pimreg: left allmulticast mode [ 1145.323124][T10953] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2048 sclass=netlink_route_socket pid=10953 comm=syz.6.19400 [ 1145.694777][T10975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1145.705141][T10975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1145.715077][T10971] netlink: 16 bytes leftover after parsing attributes in process `syz.9.19408'. [ 1145.724173][T10971] netlink: 4 bytes leftover after parsing attributes in process `syz.9.19408'. [ 1146.217803][T10984] netlink: 40 bytes leftover after parsing attributes in process `syz.6.19411'. [ 1146.234391][T10984] netlink: 8 bytes leftover after parsing attributes in process `syz.6.19411'. [ 1146.244371][T10984] netlink: 4 bytes leftover after parsing attributes in process `syz.6.19411'. [ 1146.373110][T10992] vhci_hcd vhci_hcd.3: invalid port number 9 [ 1146.645710][T11004] team0: No ports can be present during mode change [ 1146.742730][T11017] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1148.213052][T11135] vhci_hcd vhci_hcd.3: invalid port number 9 [ 1148.276687][T11138] team0 (unregistering): Port device team_slave_0 removed [ 1148.309595][T11138] team0 (unregistering): Port device team_slave_1 removed [ 1148.358789][T11141] __nla_validate_parse: 4 callbacks suppressed [ 1148.358801][T11141] netlink: 164 bytes leftover after parsing attributes in process `syz.6.19457'. [ 1148.520082][T11183] loop5: detected capacity change from 0 to 256 [ 1148.529794][T11183] Invalid ELF header magic: != ELF [ 1148.637342][ T29] kauditd_printk_skb: 460 callbacks suppressed [ 1148.637356][ T29] audit: type=1326 audit(1148.609:148282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11189 comm="syz.5.19463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfc1c1f749 code=0x7ffc0000 [ 1148.816141][ T29] audit: type=1326 audit(1148.609:148283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11189 comm="syz.5.19463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfc1c1f749 code=0x7ffc0000 [ 1148.839440][ T29] audit: type=1326 audit(1148.629:148284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11199 comm="syz.6.19467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe57ef9f749 code=0x7ffc0000 [ 1148.862750][ T29] audit: type=1326 audit(1148.629:148285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11199 comm="syz.6.19467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe57ef9f749 code=0x7ffc0000 [ 1148.885980][ T29] audit: type=1326 audit(1148.629:148286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11199 comm="syz.6.19467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe57ef9f749 code=0x7ffc0000 [ 1148.909271][ T29] audit: type=1326 audit(1148.629:148287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11199 comm="syz.6.19467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe57ef9f749 code=0x7ffc0000 [ 1148.932595][ T29] audit: type=1326 audit(1148.629:148288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11199 comm="syz.6.19467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe57ef9f749 code=0x7ffc0000 [ 1148.955817][ T29] audit: type=1326 audit(1148.629:148289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11199 comm="syz.6.19467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe57ef9f749 code=0x7ffc0000 [ 1148.979267][ T29] audit: type=1326 audit(1148.629:148290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11199 comm="syz.6.19467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe57ef9f749 code=0x7ffc0000 [ 1149.002725][ T29] audit: type=1326 audit(1148.639:148291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11199 comm="syz.6.19467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe57ef9f749 code=0x7ffc0000 [ 1149.108275][T11234] netlink: 16 bytes leftover after parsing attributes in process `syz.6.19473'. [ 1149.124561][T11229] netlink: 4 bytes leftover after parsing attributes in process `syz.9.19471'. [ 1149.402975][T11246] vhci_hcd vhci_hcd.3: invalid port number 9 [ 1149.436989][T11250] x_tables: duplicate underflow at hook 1 [ 1149.720710][T11264] netlink: 12 bytes leftover after parsing attributes in process `syz.9.19484'. [ 1149.785284][T11275] netlink: 28 bytes leftover after parsing attributes in process `syz.8.19489'. [ 1149.831697][T11277] loop5: detected capacity change from 0 to 1024 [ 1149.854693][T11277] EXT4-fs: Mount option(s) incompatible with ext2 [ 1150.472521][T11275] netlink: 28 bytes leftover after parsing attributes in process `syz.8.19489'. [ 1150.494661][T11258] syz.9.19484 (11258) used greatest stack depth: 6216 bytes left [ 1150.544190][T11300] netlink: 28 bytes leftover after parsing attributes in process `syz.8.19495'. [ 1150.608711][T11309] block device autoloading is deprecated and will be removed. [ 1150.624125][T11308] netlink: 16 bytes leftover after parsing attributes in process `syz.9.19501'. [ 1150.802397][T11322] netlink: 36 bytes leftover after parsing attributes in process `syz.9.19505'. [ 1151.084966][T11334] netlink: 12 bytes leftover after parsing attributes in process `syz.9.19508'. [ 1151.186416][T11328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1151.209817][T11328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1151.613028][T11347] vhci_hcd vhci_hcd.3: invalid port number 9 [ 1151.675034][T11352] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1151.682386][T11352] vhci_hcd vhci_hcd.2: invalid port number 96 [ 1151.688589][T11352] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 1151.833747][T11331] syz.9.19508 (11331) used greatest stack depth: 6120 bytes left [ 1151.833761][T11352] loop5: detected capacity change from 0 to 128 [ 1151.975358][T11374] vhci_hcd vhci_hcd.3: invalid port number 9 [ 1152.014421][T11383] vhci_hcd vhci_hcd.3: invalid port number 9 [ 1152.037697][T18012] Bluetooth: hci0: Frame reassembly failed (-84) [ 1152.076597][T11390] FAULT_INJECTION: forcing a failure. [ 1152.076597][T11390] name failslab, interval 1, probability 0, space 0, times 0 [ 1152.089272][T11390] CPU: 0 UID: 0 PID: 11390 Comm: syz.6.19523 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1152.089304][T11390] Tainted: [W]=WARN [ 1152.089311][T11390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1152.089326][T11390] Call Trace: [ 1152.089333][T11390] [ 1152.089342][T11390] __dump_stack+0x1d/0x30 [ 1152.089375][T11390] dump_stack_lvl+0x95/0xd0 [ 1152.089405][T11390] dump_stack+0x15/0x1b [ 1152.089426][T11390] should_fail_ex+0x265/0x280 [ 1152.089450][T11390] should_failslab+0x8c/0xb0 [ 1152.089475][T11390] __kmalloc_cache_noprof+0x65/0x4c0 [ 1152.089501][T11390] ? audit_log_d_path+0x8d/0x150 [ 1152.089542][T11390] audit_log_d_path+0x8d/0x150 [ 1152.089640][T11390] audit_log_d_path_exe+0x42/0x70 [ 1152.089658][T11390] audit_log_task+0x1e9/0x250 [ 1152.089684][T11390] ? kstrtouint+0x76/0xc0 [ 1152.089700][T11390] audit_seccomp+0x61/0x100 [ 1152.089786][T11390] ? __seccomp_filter+0x832/0x1260 [ 1152.089809][T11390] __seccomp_filter+0x843/0x1260 [ 1152.089831][T11390] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1152.089882][T11390] ? vfs_write+0x7e8/0x960 [ 1152.089901][T11390] __secure_computing+0x82/0x150 [ 1152.089922][T11390] syscall_trace_enter+0xcf/0x1e0 [ 1152.089940][T11390] do_syscall_64+0xa4/0x2b0 [ 1152.090025][T11390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1152.090042][T11390] RIP: 0033:0x7fe57ef9f749 [ 1152.090125][T11390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1152.090139][T11390] RSP: 002b:00007fe57d9e6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b0 [ 1152.090153][T11390] RAX: ffffffffffffffda RBX: 00007fe57f1f6090 RCX: 00007fe57ef9f749 [ 1152.090233][T11390] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000005 [ 1152.090242][T11390] RBP: 00007fe57d9e6090 R08: 0000000000000000 R09: 0000000000000000 [ 1152.090252][T11390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1152.090261][T11390] R13: 00007fe57f1f6128 R14: 00007fe57f1f6090 R15: 00007ffd4d2b6c88 [ 1152.090327][T11390] [ 1152.631944][T11402] loop5: detected capacity change from 0 to 1024 [ 1152.639362][T11402] EXT4-fs: Mount option(s) incompatible with ext2 [ 1152.781615][T11410] batadv0: mtu less than device minimum [ 1152.787897][T11410] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 1152.798725][T11410] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 1152.809669][T11410] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 1152.820531][T11410] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 1152.831250][T11410] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 1152.842037][T11410] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 1152.852688][T11410] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 1152.863463][T11410] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 1152.874447][T11410] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 1152.963021][T11414] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1153.033175][T11421] vhci_hcd vhci_hcd.3: invalid port number 9 [ 1153.194783][T11428] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1153.202180][T11428] vhci_hcd vhci_hcd.2: invalid port number 96 [ 1153.208347][T11428] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 1153.355504][T11428] loop5: detected capacity change from 0 to 128 [ 1153.643797][ T29] kauditd_printk_skb: 436 callbacks suppressed [ 1153.643816][ T29] audit: type=1326 audit(2000000004.220:148728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11453 comm="syz.6.19544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe57ef9f749 code=0x7ffc0000 [ 1153.674200][ T29] audit: type=1326 audit(2000000004.220:148729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11453 comm="syz.6.19544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe57ef9f749 code=0x7ffc0000 [ 1153.698152][ T29] audit: type=1326 audit(2000000004.220:148730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11453 comm="syz.6.19544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe57ef9f749 code=0x7ffc0000 [ 1153.721927][ T29] audit: type=1326 audit(2000000004.220:148731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11453 comm="syz.6.19544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe57ef9f749 code=0x7ffc0000 [ 1153.745840][ T29] audit: type=1326 audit(2000000004.220:148732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11453 comm="syz.6.19544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe57ef9f749 code=0x7ffc0000 [ 1153.769657][ T29] audit: type=1326 audit(2000000004.220:148733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11453 comm="syz.6.19544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe57ef9f749 code=0x7ffc0000 [ 1153.794500][ T29] audit: type=1326 audit(2000000004.270:148734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11453 comm="syz.6.19544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe57ef9f749 code=0x7ffc0000 [ 1153.818407][ T29] audit: type=1326 audit(2000000004.270:148735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11453 comm="syz.6.19544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe57ef9f749 code=0x7ffc0000 [ 1153.842196][ T29] audit: type=1326 audit(2000000004.270:148736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11453 comm="syz.6.19544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe57ef9f749 code=0x7ffc0000 [ 1153.865971][ T29] audit: type=1326 audit(2000000004.270:148737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11453 comm="syz.6.19544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe57ef9f749 code=0x7ffc0000 [ 1154.042072][T11479] __nla_validate_parse: 7 callbacks suppressed [ 1154.042089][T11479] netlink: 28 bytes leftover after parsing attributes in process `syz.6.19550'. [ 1154.092535][ T3539] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1154.093700][ T3578] Bluetooth: hci0: command 0x1003 tx timeout [ 1154.181057][T11518] geneve2: entered promiscuous mode [ 1154.199925][T11518] netlink: 24 bytes leftover after parsing attributes in process `syz.6.19553'. [ 1154.241696][T11460] chnl_net:caif_netlink_parms(): no params data found [ 1154.269422][T11599] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1154.283034][T11599] vhci_hcd vhci_hcd.2: invalid port number 96 [ 1154.289168][T11599] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 1154.357798][T11460] bridge0: port 1(bridge_slave_0) entered blocking state [ 1154.363747][T11650] netlink: 28 bytes leftover after parsing attributes in process `syz.5.19556'. [ 1154.365098][T11460] bridge0: port 1(bridge_slave_0) entered disabled state [ 1154.381114][T11460] bridge_slave_0: entered allmulticast mode [ 1154.387699][T11460] bridge_slave_0: entered promiscuous mode [ 1154.394827][T11460] bridge0: port 2(bridge_slave_1) entered blocking state [ 1154.401915][T11460] bridge0: port 2(bridge_slave_1) entered disabled state [ 1154.409145][T11460] bridge_slave_1: entered allmulticast mode [ 1154.415700][T11460] bridge_slave_1: entered promiscuous mode [ 1154.435274][T11460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1154.445721][T11460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1154.468307][T11460] team0: Port device team_slave_0 added [ 1154.475249][T11460] team0: Port device team_slave_1 added [ 1154.494967][T11460] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1154.501924][T11460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1154.504921][T11706] netlink: 28 bytes leftover after parsing attributes in process `syz.8.19562'. [ 1154.527986][T11460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1154.548845][T11460] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1154.555822][T11460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1154.581853][T11460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1154.627336][T11460] hsr_slave_0: entered promiscuous mode [ 1154.631254][T11693] Process accounting paused [ 1154.636800][T11764] loop5: detected capacity change from 0 to 256 [ 1154.644390][T11460] hsr_slave_1: entered promiscuous mode [ 1154.650407][T11460] debugfs: 'hsr0' already exists in 'hsr' [ 1154.656248][T11460] Cannot create hsr debugfs directory [ 1154.665396][T11764] Invalid ELF header magic: != ELF [ 1154.692261][T11599] netlink: 16 bytes leftover after parsing attributes in process `syz.6.19557'. [ 1154.701469][T11599] netlink: 4 bytes leftover after parsing attributes in process `syz.6.19557'. [ 1154.736985][T11815] FAULT_INJECTION: forcing a failure. [ 1154.736985][T11815] name failslab, interval 1, probability 0, space 0, times 0 [ 1154.749733][T11815] CPU: 0 UID: 0 PID: 11815 Comm: syz.5.19566 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1154.749766][T11815] Tainted: [W]=WARN [ 1154.749774][T11815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1154.749787][T11815] Call Trace: [ 1154.749793][T11815] [ 1154.749801][T11815] __dump_stack+0x1d/0x30 [ 1154.749824][T11815] dump_stack_lvl+0x95/0xd0 [ 1154.749847][T11815] dump_stack+0x15/0x1b [ 1154.749867][T11815] should_fail_ex+0x265/0x280 [ 1154.749887][T11815] should_failslab+0x8c/0xb0 [ 1154.749910][T11815] kmem_cache_alloc_noprof+0x69/0x4b0 [ 1154.749935][T11815] ? vm_area_alloc+0x2c/0xb0 [ 1154.749962][T11815] vm_area_alloc+0x2c/0xb0 [ 1154.749986][T11815] mmap_region+0xadf/0x1410 [ 1154.750032][T11815] do_mmap+0x9b3/0xbe0 [ 1154.750056][T11815] vm_mmap_pgoff+0x17a/0x2e0 [ 1154.750079][T11815] ksys_mmap_pgoff+0x268/0x310 [ 1154.750107][T11815] x64_sys_call+0x16bb/0x3000 [ 1154.750128][T11815] do_syscall_64+0xca/0x2b0 [ 1154.750166][T11815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1154.750186][T11815] RIP: 0033:0x7fbfc1c1f749 [ 1154.750198][T11815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1154.750214][T11815] RSP: 002b:00007fbfc0687038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1154.750231][T11815] RAX: ffffffffffffffda RBX: 00007fbfc1e75fa0 RCX: 00007fbfc1c1f749 [ 1154.750245][T11815] RDX: 0000000000000003 RSI: 0000000000004000 RDI: 0000200000ffc000 [ 1154.750259][T11815] RBP: 00007fbfc0687090 R08: 0000000000000006 R09: 0000000000000000 [ 1154.750273][T11815] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 1154.750287][T11815] R13: 00007fbfc1e76038 R14: 00007fbfc1e75fa0 R15: 00007ffdddbc64c8 [ 1154.750308][T11815] [ 1155.123231][T11460] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1155.132348][T11460] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1155.145291][T11460] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1155.155072][T11460] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1155.199118][T11460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1155.214779][T11460] 8021q: adding VLAN 0 to HW filter on device team0 [ 1155.225101][T17986] bridge0: port 1(bridge_slave_0) entered blocking state [ 1155.232202][T17986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1155.260172][T11460] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1155.270589][T11460] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1155.288697][T13065] bridge0: port 2(bridge_slave_1) entered blocking state [ 1155.295826][T13065] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1155.398657][T11460] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1155.401950][T11905] loop5: detected capacity change from 0 to 128 [ 1155.540542][T11460] veth0_vlan: entered promiscuous mode [ 1155.549012][T11460] veth1_vlan: entered promiscuous mode [ 1155.577503][T11460] veth0_macvtap: entered promiscuous mode [ 1155.585187][T11460] veth1_macvtap: entered promiscuous mode [ 1155.601316][T11460] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1155.617182][T11460] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1155.630139][T13068] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.639388][T13068] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.649349][T13068] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.679772][T13068] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.691098][T11935] lo speed is unknown, defaulting to 1000 [ 1155.700524][T11935] lo speed is unknown, defaulting to 1000 [ 1155.714919][T11935] lo speed is unknown, defaulting to 1000 [ 1155.722829][T11935] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1155.735290][T11935] lo speed is unknown, defaulting to 1000 [ 1155.752418][T11941] netlink: 'syz.5.19578': attribute type 21 has an invalid length. [ 1155.760600][T11941] netlink: 132 bytes leftover after parsing attributes in process `syz.5.19578'. [ 1155.807169][T11935] lo speed is unknown, defaulting to 1000 [ 1155.834707][T11947] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1155.842057][T11947] vhci_hcd vhci_hcd.2: invalid port number 96 [ 1155.843462][T11935] lo speed is unknown, defaulting to 1000 [ 1155.848461][T11947] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 1155.873799][T11935] lo speed is unknown, defaulting to 1000 [ 1155.916827][T11935] lo speed is unknown, defaulting to 1000 [ 1155.923261][T11957] netlink: 8 bytes leftover after parsing attributes in process `syz.9.19585'. [ 1155.933624][T11935] lo speed is unknown, defaulting to 1000 [ 1155.961741][T11957] Invalid ELF header magic: != ELF [ 1155.961865][T11935] lo speed is unknown, defaulting to 1000 [ 1156.003744][T11935] lo speed is unknown, defaulting to 1000 [ 1156.011022][T11965] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19586'. [ 1156.023762][T11935] lo speed is unknown, defaulting to 1000 [ 1156.030441][T11935] lo speed is unknown, defaulting to 1000 [ 1156.081542][T11947] netlink: 16 bytes leftover after parsing attributes in process `syz.6.19580'. [ 1156.103174][T11935] lo speed is unknown, defaulting to 1000 [ 1156.113069][T11935] lo speed is unknown, defaulting to 1000 [ 1156.127607][T11935] lo speed is unknown, defaulting to 1000 [ 1156.245485][T11999] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 4, id = 0 [ 1156.259239][T11998] IPVS: stopping master sync thread 11999 ... [ 1156.488706][T12010] FAULT_INJECTION: forcing a failure. [ 1156.488706][T12010] name failslab, interval 1, probability 0, space 0, times 0 [ 1156.501374][T12010] CPU: 1 UID: 0 PID: 12010 Comm: syz.8.19594 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1156.501409][T12010] Tainted: [W]=WARN [ 1156.501441][T12010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1156.501456][T12010] Call Trace: [ 1156.501462][T12010] [ 1156.501470][T12010] __dump_stack+0x1d/0x30 [ 1156.501497][T12010] dump_stack_lvl+0x95/0xd0 [ 1156.501518][T12010] dump_stack+0x15/0x1b [ 1156.501540][T12010] should_fail_ex+0x265/0x280 [ 1156.501640][T12010] should_failslab+0x8c/0xb0 [ 1156.501715][T12010] __kmalloc_cache_noprof+0x65/0x4c0 [ 1156.501742][T12010] ? sel_netnode_sid_slow+0x1eb/0x540 [ 1156.501772][T12010] sel_netnode_sid_slow+0x1eb/0x540 [ 1156.501835][T12010] sel_netnode_sid+0x1e3/0x250 [ 1156.501865][T12010] selinux_ip_postroute+0xa97/0xb50 [ 1156.501901][T12010] ? ip6t_do_table+0xe9/0xbd0 [ 1156.501975][T12010] ? nf_nat_ipv6_fn+0xa0/0x1c0 [ 1156.502081][T12010] ? nf_nat_ipv6_out+0x187/0x230 [ 1156.502109][T12010] ? __pfx_selinux_ip_postroute+0x10/0x10 [ 1156.502144][T12010] nf_hook_slow+0x78/0x180 [ 1156.502180][T12010] ip6_output+0x20a/0x250 [ 1156.502275][T12010] ? __pfx_ip6_finish_output+0x10/0x10 [ 1156.502399][T12010] ip6_mr_output+0x245/0x790 [ 1156.502566][T12010] ? __pfx_ip6t_do_table+0x10/0x10 [ 1156.502598][T12010] ? __pfx_dst_output+0x10/0x10 [ 1156.502632][T12010] ip6_local_out+0xdb/0xe0 [ 1156.502709][T12010] ip6_send_skb+0x5a/0x130 [ 1156.502734][T12010] udp_v6_send_skb+0x7a3/0xc70 [ 1156.502820][T12010] udpv6_sendmsg+0x151d/0x15b0 [ 1156.502861][T12010] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1156.502894][T12010] ? _raw_spin_unlock_bh+0x36/0x40 [ 1156.502933][T12010] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 1156.503028][T12010] inet6_sendmsg+0xac/0xd0 [ 1156.503102][T12010] __sock_sendmsg+0x8b/0x180 [ 1156.503125][T12010] __sys_sendto+0x268/0x330 [ 1156.503191][T12010] __x64_sys_sendto+0x76/0x90 [ 1156.503273][T12010] x64_sys_call+0x29a7/0x3000 [ 1156.503303][T12010] do_syscall_64+0xca/0x2b0 [ 1156.503358][T12010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1156.503383][T12010] RIP: 0033:0x7f831ff6f749 [ 1156.503400][T12010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1156.503421][T12010] RSP: 002b:00007f831e9d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1156.503443][T12010] RAX: ffffffffffffffda RBX: 00007f83201c5fa0 RCX: 00007f831ff6f749 [ 1156.503505][T12010] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1156.503519][T12010] RBP: 00007f831e9d7090 R08: 0000200000000300 R09: 000000000000001c [ 1156.503534][T12010] R10: 0000000020000001 R11: 0000000000000246 R12: 0000000000000001 [ 1156.503548][T12010] R13: 00007f83201c6038 R14: 00007f83201c5fa0 R15: 00007ffe5a49f668 [ 1156.503571][T12010] [ 1156.803824][T12001] team0: No ports can be present during mode change [ 1156.847069][T12013] loop5: detected capacity change from 0 to 256 [ 1156.857408][T12013] Invalid ELF header magic: != ELF [ 1156.892150][T12019] SELinux: Context system_u:object_r:file_context_t:s0 is not valid (left unmapped). [ 1156.942879][T12029] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1157.044285][T12049] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1157.051714][T12049] vhci_hcd vhci_hcd.2: invalid port number 96 [ 1157.058010][T12049] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 1158.004407][T12089] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1158.133160][T12097] rdma_op ffff88811eea7580 conn xmit_rdma 0000000000000000 [ 1158.198187][T12108] Invalid ELF header magic: != ELF [ 1158.264032][T12114] Invalid ELF header magic: != ELF [ 1158.594005][T12146] !yz!: rxe_newlink: already configured on team_slave_0 [ 1159.011456][ T29] kauditd_printk_skb: 511 callbacks suppressed [ 1159.011473][ T29] audit: type=1326 audit(2000000009.580:149249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12171 comm="syz.8.19654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f831ff6f749 code=0x7ffc0000 [ 1159.041990][ T29] audit: type=1326 audit(2000000009.580:149250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12171 comm="syz.8.19654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f831ff6f749 code=0x7ffc0000 [ 1159.067131][ T29] audit: type=1326 audit(2000000009.620:149251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12171 comm="syz.8.19654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f831ff6f749 code=0x7ffc0000 [ 1159.091028][ T29] audit: type=1326 audit(2000000009.620:149252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12171 comm="syz.8.19654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f831ff6f749 code=0x7ffc0000 [ 1159.114904][ T29] audit: type=1326 audit(2000000009.620:149253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12171 comm="syz.8.19654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f831ff6f749 code=0x7ffc0000 [ 1159.138856][ T29] audit: type=1326 audit(2000000009.620:149254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12171 comm="syz.8.19654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f831ff6f749 code=0x7ffc0000 [ 1159.162701][ T29] audit: type=1326 audit(2000000009.620:149255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12171 comm="syz.8.19654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f831ff6f749 code=0x7ffc0000 [ 1159.186695][ T29] audit: type=1326 audit(2000000009.620:149256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12171 comm="syz.8.19654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f831ff6f749 code=0x7ffc0000 [ 1159.210573][ T29] audit: type=1326 audit(2000000009.620:149257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12171 comm="syz.8.19654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f831ff6f749 code=0x7ffc0000 [ 1159.234423][ T29] audit: type=1326 audit(2000000009.620:149258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12171 comm="syz.8.19654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f831ff6f749 code=0x7ffc0000 [ 1159.305952][T12182] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1159.356674][T12193] __nla_validate_parse: 15 callbacks suppressed [ 1159.356690][T12193] netlink: 8 bytes leftover after parsing attributes in process `syz.6.19661'. [ 1159.364082][T12192] loop5: detected capacity change from 0 to 256 [ 1159.412833][T12198] netlink: 'syz.9.19664': attribute type 1 has an invalid length. [ 1159.426384][T12192] Invalid ELF header magic: != ELF [ 1159.444092][T12198] netlink: 48 bytes leftover after parsing attributes in process `syz.9.19664'. [ 1159.507827][T12218] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1159.597156][T12224] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1159.612563][T12224] vhci_hcd vhci_hcd.2: invalid port number 96 [ 1159.618655][T12224] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 1159.638537][T12227] loop5: detected capacity change from 0 to 512 [ 1159.684160][T12227] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 1159.712504][T12227] EXT4-fs error (device loop5): ext4_get_branch:178: inode #13: block 1024: comm syz.5.19676: invalid block [ 1159.743975][T12227] EXT4-fs (loop5): Remounting filesystem read-only [ 1159.751855][T12227] EXT4-fs (loop5): 1 truncate cleaned up [ 1159.777960][T12243] netlink: 8 bytes leftover after parsing attributes in process `LX[X'. [ 1159.796346][T12227] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1159.811429][T12227] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1159.824432][T12224] netlink: 16 bytes leftover after parsing attributes in process `syz.8.19675'. [ 1159.825534][T12243] Invalid ELF header magic: != ELF [ 1159.833559][T12224] netlink: 4 bytes leftover after parsing attributes in process `syz.8.19675'. [ 1159.934202][T12261] loop5: detected capacity change from 0 to 2048 [ 1159.990875][T12264] tipc: Enabled bearer , priority 10 [ 1159.999645][T12261] Alternate GPT is invalid, using primary GPT. [ 1160.006010][T12261] loop5: p1 p2 p3 [ 1160.009876][T12261] loop5: partition table partially beyond EOD, truncated [ 1160.017424][T12264] netlink: 56 bytes leftover after parsing attributes in process `syz.6.19684'. [ 1160.031658][T12266] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1160.134731][T12293] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19693'. [ 1160.315538][T12313] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1160.505177][T12320] SELinux: failed to load policy [ 1160.571866][T12332] FAULT_INJECTION: forcing a failure. [ 1160.571866][T12332] name failslab, interval 1, probability 0, space 0, times 0 [ 1160.584675][T12332] CPU: 0 UID: 0 PID: 12332 Comm: syz.8.19703 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1160.584773][T12332] Tainted: [W]=WARN [ 1160.584780][T12332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1160.584873][T12332] Call Trace: [ 1160.584879][T12332] [ 1160.584887][T12332] __dump_stack+0x1d/0x30 [ 1160.584989][T12332] dump_stack_lvl+0x95/0xd0 [ 1160.585011][T12332] dump_stack+0x15/0x1b [ 1160.585028][T12332] should_fail_ex+0x265/0x280 [ 1160.585048][T12332] should_failslab+0x8c/0xb0 [ 1160.585078][T12332] kmem_cache_alloc_noprof+0x69/0x4b0 [ 1160.585103][T12332] ? security_inode_alloc+0x37/0x100 [ 1160.585137][T12332] security_inode_alloc+0x37/0x100 [ 1160.585160][T12332] inode_init_always_gfp+0x4b7/0x500 [ 1160.585186][T12332] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1160.585276][T12332] alloc_inode+0x58/0x170 [ 1160.585293][T12332] do_accept+0xa0/0x3a0 [ 1160.585316][T12332] ? _raw_spin_lock+0x52/0xa0 [ 1160.585346][T12332] __sys_accept4+0xbe/0x170 [ 1160.585377][T12332] __x64_sys_accept4+0x51/0x60 [ 1160.585465][T12332] x64_sys_call+0x2b3e/0x3000 [ 1160.585492][T12332] do_syscall_64+0xca/0x2b0 [ 1160.585523][T12332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1160.585541][T12332] RIP: 0033:0x7f831ff6f749 [ 1160.585571][T12332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1160.585591][T12332] RSP: 002b:00007f831e9b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 1160.585612][T12332] RAX: ffffffffffffffda RBX: 00007f83201c6090 RCX: 00007f831ff6f749 [ 1160.585627][T12332] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 1160.585640][T12332] RBP: 00007f831e9b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1160.585656][T12332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1160.585716][T12332] R13: 00007f83201c6128 R14: 00007f83201c6090 R15: 00007ffe5a49f668 [ 1160.585737][T12332] [ 1160.844110][T12320] lo speed is unknown, defaulting to 1000 [ 1160.871883][T12351] loop5: detected capacity change from 0 to 1024 [ 1160.879842][T12351] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1160.890778][T12351] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 1160.903979][T12351] JBD2: no valid journal superblock found [ 1160.909763][T12351] EXT4-fs (loop5): Could not load journal inode [ 1161.112706][T30681] tipc: Node number set to 59 [ 1161.158331][T12379] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1161.172514][T12379] vhci_hcd vhci_hcd.2: invalid port number 96 [ 1161.178694][T12379] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 1161.259878][T12379] netlink: 16 bytes leftover after parsing attributes in process `syz.6.19713'. [ 1161.269020][T12379] netlink: 4 bytes leftover after parsing attributes in process `syz.6.19713'. [ 1161.316240][T12386] netlink: 8 bytes leftover after parsing attributes in process `LX[X'. [ 1161.333148][T12386] Invalid ELF header magic: != ELF [ 1161.541275][T12407] loop5: detected capacity change from 0 to 512 [ 1161.550724][T12421] Invalid ELF header magic: != ELF [ 1161.562270][T12407] EXT4-fs: dax option not supported [ 1161.676087][T12408] lo speed is unknown, defaulting to 1000 [ 1161.792906][T12408] chnl_net:caif_netlink_parms(): no params data found [ 1161.869320][T12408] bridge0: port 1(bridge_slave_0) entered blocking state [ 1161.876529][T12408] bridge0: port 1(bridge_slave_0) entered disabled state [ 1161.903282][T12408] bridge_slave_0: entered allmulticast mode [ 1161.909902][T12408] bridge_slave_0: entered promiscuous mode [ 1161.924310][T12408] bridge0: port 2(bridge_slave_1) entered blocking state [ 1161.924493][T12595] block device autoloading is deprecated and will be removed. [ 1161.931483][T12408] bridge0: port 2(bridge_slave_1) entered disabled state [ 1161.962937][T12408] bridge_slave_1: entered allmulticast mode [ 1161.969632][T12408] bridge_slave_1: entered promiscuous mode [ 1162.015013][T12408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1162.026113][T12408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1162.105316][T12408] team0: Port device team_slave_0 added [ 1162.112308][T12408] team0: Port device team_slave_1 added [ 1162.171936][T12408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1162.179010][T12408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1162.205032][T12408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1162.217255][T12408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1162.224269][T12408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1162.250285][T12408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1162.333610][T12686] bridge0: entered promiscuous mode [ 1162.338964][T12686] macvlan2: entered promiscuous mode [ 1162.361122][T12408] hsr_slave_0: entered promiscuous mode [ 1162.370723][T12408] hsr_slave_1: entered promiscuous mode [ 1162.377295][T12408] debugfs: 'hsr0' already exists in 'hsr' [ 1162.383078][T12408] Cannot create hsr debugfs directory [ 1162.397980][T12718] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 1162.586767][T12765] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1162.604708][T12765] vhci_hcd vhci_hcd.2: invalid port number 96 [ 1162.611000][T12765] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 1162.734728][T12765] loop8: detected capacity change from 0 to 128 [ 1162.744007][T12800] loop5: detected capacity change from 0 to 1024 [ 1162.751105][T12800] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1162.762021][T12800] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 1162.793755][T12800] JBD2: no valid journal superblock found [ 1162.799512][T12800] EXT4-fs (loop5): Could not load journal inode [ 1162.845435][T13065] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.904089][T13065] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.933859][T12408] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1162.951159][T12408] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1163.001294][T12794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1163.010007][T12794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1163.045584][T12408] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1163.061949][T12408] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1163.094228][T13065] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.144449][T13065] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.204878][T12408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1163.229736][T12408] 8021q: adding VLAN 0 to HW filter on device team0 [ 1163.269558][T18012] bridge0: port 1(bridge_slave_0) entered blocking state [ 1163.276701][T18012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1163.288802][ T898] bridge0: port 2(bridge_slave_1) entered blocking state [ 1163.295894][ T898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1163.310140][T12809] lo speed is unknown, defaulting to 1000 [ 1163.317176][T13065] bridge_slave_1: left allmulticast mode [ 1163.322881][T13065] bridge_slave_1: left promiscuous mode [ 1163.328691][T13065] bridge0: port 2(bridge_slave_1) entered disabled state [ 1163.336950][T13065] bridge_slave_0: left allmulticast mode [ 1163.342704][T13065] bridge_slave_0: left promiscuous mode [ 1163.348387][T13065] bridge0: port 1(bridge_slave_0) entered disabled state [ 1163.425721][T13065] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1163.436482][T13065] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1163.446905][T13065] bond0 (unregistering): Released all slaves [ 1163.457339][T12855] net_ratelimit: 30 callbacks suppressed [ 1163.457358][T12855] batadv0: mtu less than device minimum [ 1163.469255][T12855] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 1163.479862][T12855] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 1163.490633][T12855] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 1163.501268][T12855] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 1163.511896][T12855] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 1163.522746][T12855] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 1163.533493][T12855] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 1163.544346][T12855] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 1163.555071][T12855] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 1163.575585][T13065] tipc: Disabling bearer [ 1163.580930][T13065] tipc: Left network mode [ 1163.607399][T12869] !yz!: rxe_newlink: already configured on team_slave_0 [ 1163.722200][T13065] hsr_slave_0: left promiscuous mode [ 1163.728126][T12890] loop8: detected capacity change from 0 to 512 [ 1163.736423][T13065] hsr_slave_1: left promiscuous mode [ 1163.736561][T12890] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 1163.745519][T13065] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1163.758612][T13065] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1163.769254][T13065] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1163.776738][T13065] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1163.788946][T13065] veth1_macvtap: left promiscuous mode [ 1163.794560][T13065] veth1_vlan: left promiscuous mode [ 1163.799798][T13065] veth0_vlan: left promiscuous mode [ 1163.865573][T12908] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1163.873543][T12908] vhci_hcd vhci_hcd.2: invalid port number 96 [ 1163.879633][T12908] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 1163.986286][T12408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1164.075516][ T29] kauditd_printk_skb: 750 callbacks suppressed [ 1164.075533][ T29] audit: type=1326 audit(2000000014.650:150009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12988 comm="syz.4.19763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7138f749 code=0x7ffc0000 [ 1164.114238][ T29] audit: type=1326 audit(2000000014.650:150010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12988 comm="syz.4.19763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7138f749 code=0x7ffc0000 [ 1164.138163][ T29] audit: type=1326 audit(2000000014.650:150011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12988 comm="syz.4.19763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7138f749 code=0x7ffc0000 [ 1164.149566][T12809] chnl_net:caif_netlink_parms(): no params data found [ 1164.161959][ T29] audit: type=1326 audit(2000000014.650:150012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12988 comm="syz.4.19763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f7138f749 code=0x7ffc0000 [ 1164.161996][ T29] audit: type=1326 audit(2000000014.650:150013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12988 comm="syz.4.19763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7138f749 code=0x7ffc0000 [ 1164.210827][T12985] loop8: detected capacity change from 0 to 128 [ 1164.216414][ T29] audit: type=1326 audit(2000000014.650:150014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12988 comm="syz.4.19763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7138f749 code=0x7ffc0000 [ 1164.246368][ T29] audit: type=1326 audit(2000000014.650:150015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12988 comm="syz.4.19763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7138f749 code=0x7ffc0000 [ 1164.270159][ T29] audit: type=1326 audit(2000000014.650:150016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12988 comm="syz.4.19763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7138f749 code=0x7ffc0000 [ 1164.293906][ T29] audit: type=1326 audit(2000000014.650:150017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12988 comm="syz.4.19763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0f7138f749 code=0x7ffc0000 [ 1164.317728][ T29] audit: type=1326 audit(2000000014.650:150018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12988 comm="syz.4.19763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7138f749 code=0x7ffc0000 [ 1164.414847][T12809] bridge0: port 1(bridge_slave_0) entered blocking state [ 1164.421943][T12809] bridge0: port 1(bridge_slave_0) entered disabled state [ 1164.430436][T12809] bridge_slave_0: entered allmulticast mode [ 1164.436993][T12809] bridge_slave_0: entered promiscuous mode [ 1164.447612][T12809] bridge0: port 2(bridge_slave_1) entered blocking state [ 1164.454789][T12809] bridge0: port 2(bridge_slave_1) entered disabled state [ 1164.462258][T12809] bridge_slave_1: entered allmulticast mode [ 1164.468919][T12809] bridge_slave_1: entered promiscuous mode [ 1164.476738][T12408] veth0_vlan: entered promiscuous mode [ 1164.500149][T12809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1164.512052][T12809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1164.522041][T12408] veth1_vlan: entered promiscuous mode [ 1164.543902][T12809] team0: Port device team_slave_0 added [ 1164.550486][T13121] __nla_validate_parse: 11 callbacks suppressed [ 1164.550503][T13121] netlink: 20 bytes leftover after parsing attributes in process `syz.8.19764'. [ 1164.574910][T12809] team0: Port device team_slave_1 added [ 1164.613003][T12408] veth0_macvtap: entered promiscuous mode [ 1164.625030][T12809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1164.631979][T12809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1164.658035][T12809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1164.678614][T13149] netlink: 28 bytes leftover after parsing attributes in process `syz.5.19765'. [ 1164.713135][T12809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1164.720070][T12809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1164.746362][T12809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1164.760963][T12408] veth1_macvtap: entered promiscuous mode [ 1164.809420][T12408] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1164.823681][T12809] hsr_slave_0: entered promiscuous mode [ 1164.829855][T12809] hsr_slave_1: entered promiscuous mode [ 1164.843310][T12809] debugfs: 'hsr0' already exists in 'hsr' [ 1164.849134][T12809] Cannot create hsr debugfs directory [ 1164.855926][T12408] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1164.867686][T13065] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1164.878650][T13065] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1164.901644][T13065] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1164.959141][T13065] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1165.013855][T13211] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1165.021279][T13211] vhci_hcd vhci_hcd.2: invalid port number 96 [ 1165.027463][T13211] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 1165.167478][T13211] netlink: 16 bytes leftover after parsing attributes in process `syz.2.19723'. [ 1165.176608][T13211] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19723'. [ 1165.191657][T13270] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1165.199124][T13270] vhci_hcd vhci_hcd.2: invalid port number 96 [ 1165.205243][T13270] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 1165.255569][T12809] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1165.274951][T12809] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1165.284374][T12809] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1165.293368][T12809] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1165.350955][T13270] netlink: 16 bytes leftover after parsing attributes in process `syz.4.19773'. [ 1165.360070][T13270] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19773'. [ 1165.383189][T13293] netlink: 28 bytes leftover after parsing attributes in process `syz.2.19775'. [ 1165.414787][T12809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1165.438329][T12809] 8021q: adding VLAN 0 to HW filter on device team0 [ 1165.448938][ T185] bridge0: port 1(bridge_slave_0) entered blocking state [ 1165.456136][ T185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1165.501454][T17990] bridge0: port 2(bridge_slave_1) entered blocking state [ 1165.508527][T17990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1165.517772][T13300] netlink: 8 bytes leftover after parsing attributes in process `syz.8.19776'. [ 1165.614325][T12809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1165.686741][T13327] netlink: 16 bytes leftover after parsing attributes in process `syz.5.19780'. [ 1165.831860][T13353] netlink: 24 bytes leftover after parsing attributes in process `syz.5.19781'. [ 1165.848600][T12809] veth0_vlan: entered promiscuous mode [ 1165.867278][T12809] veth1_vlan: entered promiscuous mode [ 1165.906936][T12809] veth0_macvtap: entered promiscuous mode [ 1165.924698][T12809] veth1_macvtap: entered promiscuous mode [ 1165.945067][T12809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1165.967461][T12809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1165.988479][T18012] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1166.009116][T18012] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1166.029998][T18012] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1166.049118][T18012] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1166.068419][T13384] netlink: 'syz.6.19748': attribute type 1 has an invalid length. [ 1166.140356][T13391] loop5: detected capacity change from 0 to 512 [ 1166.157876][T13391] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1166.173834][T13391] EXT4-fs (loop5): mount failed [ 1166.468066][T13464] xt_hashlimit: max too large, truncated to 1048576 [ 1166.568700][T13472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1166.594795][T13513] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1166.602259][T13513] vhci_hcd vhci_hcd.2: invalid port number 96 [ 1166.608478][T13513] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 1166.613556][T13472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1166.837708][T13591] netlink: 'syz.2.19801': attribute type 1 has an invalid length. [ 1167.483593][T13634] lo speed is unknown, defaulting to 1000 [ 1167.621792][T13646] lo speed is unknown, defaulting to 1000 [ 1167.656483][T13650] FAULT_INJECTION: forcing a failure. [ 1167.656483][T13650] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1167.669765][T13650] CPU: 1 UID: 0 PID: 13650 Comm: syz.5.19820 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1167.669800][T13650] Tainted: [W]=WARN [ 1167.669808][T13650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1167.669859][T13650] Call Trace: [ 1167.669865][T13650] [ 1167.669872][T13650] __dump_stack+0x1d/0x30 [ 1167.669898][T13650] dump_stack_lvl+0x95/0xd0 [ 1167.669919][T13650] dump_stack+0x15/0x1b [ 1167.669939][T13650] should_fail_ex+0x265/0x280 [ 1167.670027][T13650] should_fail+0xb/0x20 [ 1167.670050][T13650] should_fail_usercopy+0x1a/0x20 [ 1167.670145][T13650] _copy_from_user+0x1c/0xb0 [ 1167.670177][T13650] do_ip6t_get_ctl+0x1a2/0xb60 [ 1167.670240][T13650] ? path_openat+0x1e82/0x23b0 [ 1167.670348][T13650] ? should_fail_ex+0xdb/0x280 [ 1167.670438][T13650] ? do_ipv6_getsockopt+0xc95/0x1460 [ 1167.670500][T13650] ? avc_has_perm_noaudit+0xab/0x130 [ 1167.670520][T13650] nf_getsockopt+0x190/0x1b0 [ 1167.670541][T13650] ipv6_getsockopt+0x178/0x1e0 [ 1167.670559][T13650] udpv6_getsockopt+0x76/0x90 [ 1167.670710][T13650] sock_common_getsockopt+0x60/0x70 [ 1167.670731][T13650] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1167.670749][T13650] do_sock_getsockopt+0x1c4/0x210 [ 1167.670838][T13650] __x64_sys_getsockopt+0x11e/0x1a0 [ 1167.670871][T13650] x64_sys_call+0x2dc7/0x3000 [ 1167.670917][T13650] do_syscall_64+0xca/0x2b0 [ 1167.671009][T13650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1167.671031][T13650] RIP: 0033:0x7fbfc1c1f749 [ 1167.671124][T13650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1167.671139][T13650] RSP: 002b:00007fbfc0666038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1167.671158][T13650] RAX: ffffffffffffffda RBX: 00007fbfc1e76090 RCX: 00007fbfc1c1f749 [ 1167.671172][T13650] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000006 [ 1167.671191][T13650] RBP: 00007fbfc0666090 R08: 0000200000000040 R09: 0000000000000000 [ 1167.671206][T13650] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000001 [ 1167.671220][T13650] R13: 00007fbfc1e76128 R14: 00007fbfc1e76090 R15: 00007ffdddbc64c8 [ 1167.671238][T13650] [ 1168.007609][T13721] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1168.676001][T13749] lo speed is unknown, defaulting to 1000 [ 1168.882235][T13821] Invalid ELF header magic: != ELF [ 1169.000842][T13837] FAULT_INJECTION: forcing a failure. [ 1169.000842][T13837] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1169.014042][T13837] CPU: 0 UID: 0 PID: 13837 Comm: syz.6.19863 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1169.014142][T13837] Tainted: [W]=WARN [ 1169.014148][T13837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1169.014159][T13837] Call Trace: [ 1169.014164][T13837] [ 1169.014172][T13837] __dump_stack+0x1d/0x30 [ 1169.014199][T13837] dump_stack_lvl+0x95/0xd0 [ 1169.014220][T13837] dump_stack+0x15/0x1b [ 1169.014306][T13837] should_fail_ex+0x265/0x280 [ 1169.014332][T13837] should_fail+0xb/0x20 [ 1169.014354][T13837] should_fail_usercopy+0x1a/0x20 [ 1169.014381][T13837] _copy_from_user+0x1c/0xb0 [ 1169.014464][T13837] do_sock_getsockopt+0xf1/0x210 [ 1169.014548][T13837] __x64_sys_getsockopt+0x11e/0x1a0 [ 1169.014584][T13837] x64_sys_call+0x2dc7/0x3000 [ 1169.014610][T13837] do_syscall_64+0xca/0x2b0 [ 1169.014640][T13837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1169.014697][T13837] RIP: 0033:0x7fc27a21f749 [ 1169.014714][T13837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1169.014733][T13837] RSP: 002b:00007fc278c5e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1169.014752][T13837] RAX: ffffffffffffffda RBX: 00007fc27a476090 RCX: 00007fc27a21f749 [ 1169.014763][T13837] RDX: 0000000000000083 RSI: 0000000000000084 RDI: 0000000000000003 [ 1169.014819][T13837] RBP: 00007fc278c5e090 R08: 0000200000000300 R09: 0000000000000000 [ 1169.014830][T13837] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1169.014840][T13837] R13: 00007fc27a476128 R14: 00007fc27a476090 R15: 00007fffade5ffb8 [ 1169.014856][T13837] [ 1169.083691][ T29] kauditd_printk_skb: 703 callbacks suppressed [ 1169.083740][ T29] audit: type=1326 audit(2000000019.590:150721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13835 comm="syz.4.19866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0f7138f749 code=0x7ffc0000 [ 1169.106193][T13824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1169.110789][ T29] audit: type=1326 audit(2000000019.590:150722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13835 comm="syz.4.19866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7138f749 code=0x7ffc0000 [ 1169.142256][T13824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1169.143343][ T29] audit: type=1326 audit(2000000019.590:150723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13835 comm="syz.4.19866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0f7138f749 code=0x7ffc0000 [ 1169.280090][ T29] audit: type=1326 audit(2000000019.710:150724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13835 comm="syz.4.19866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7138f749 code=0x7ffc0000 [ 1169.304100][ T29] audit: type=1326 audit(2000000019.710:150725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13835 comm="syz.4.19866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7138f749 code=0x7ffc0000 [ 1169.327952][ T29] audit: type=1326 audit(2000000019.730:150726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13835 comm="syz.4.19866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0f7138f749 code=0x7ffc0000 [ 1169.351663][ T29] audit: type=1326 audit(2000000019.770:150727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13835 comm="syz.4.19866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7138f749 code=0x7ffc0000 [ 1169.375501][ T29] audit: type=1326 audit(2000000019.770:150728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13835 comm="syz.4.19866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f0f7138f749 code=0x7ffc0000 [ 1169.435954][ T29] audit: type=1326 audit(2000000019.890:150729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13835 comm="syz.4.19866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7138f749 code=0x7ffc0000 [ 1169.459917][ T29] audit: type=1326 audit(2000000019.950:150730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13835 comm="syz.4.19866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7138f749 code=0x7ffc0000 [ 1169.504736][T13848] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1169.537801][T13848] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1169.637280][T13858] loop5: detected capacity change from 0 to 1024 [ 1169.644344][T13858] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1169.655305][T13858] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 1169.668933][T13858] JBD2: no valid journal superblock found [ 1169.674719][T13858] EXT4-fs (loop5): Could not load journal inode [ 1169.772500][T13867] __nla_validate_parse: 22 callbacks suppressed [ 1169.772518][T13867] netlink: 8 bytes leftover after parsing attributes in process `LX[X'. [ 1169.796470][T13867] Invalid ELF header magic: != ELF [ 1169.868223][T13880] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19877'. [ 1170.056386][T13898] netlink: 'syz.5.19883': attribute type 1 has an invalid length. [ 1170.064452][T13898] netlink: 224 bytes leftover after parsing attributes in process `syz.5.19883'. [ 1170.434254][T13942] netlink: 8 bytes leftover after parsing attributes in process `syz.8.19896'. [ 1170.465827][T13945] netlink: 8 bytes leftover after parsing attributes in process `syz.8.19897'. [ 1170.541741][T13954] loop8: detected capacity change from 0 to 512 [ 1170.548988][T13954] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1170.562079][T13954] EXT4-fs (loop8): 1 truncate cleaned up [ 1170.569519][T13954] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1170.600992][T32354] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1170.610590][T32354] ================================================================== [ 1170.618680][T32354] BUG: KCSAN: data-race in mlock_new_folio / need_mlock_drain [ 1170.626147][T32354] [ 1170.628472][T32354] read-write to 0xffff888237d27010 of 1 bytes by task 13931 on cpu 1: [ 1170.636629][T32354] mlock_new_folio+0x143/0x240 [ 1170.641398][T32354] folio_add_lru_vma+0x5f/0x70 [ 1170.646169][T32354] handle_mm_fault+0x2858/0x2c60 [ 1170.651138][T32354] __get_user_pages+0x1024/0x1ed0 [ 1170.656193][T32354] __mm_populate+0x243/0x3a0 [ 1170.660814][T32354] __se_sys_mremap+0xad4/0xb30 [ 1170.665592][T32354] __x64_sys_mremap+0x67/0x80 [ 1170.670287][T32354] x64_sys_call+0x2944/0x3000 [ 1170.674994][T32354] do_syscall_64+0xca/0x2b0 [ 1170.679520][T32354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1170.685724][T32354] [ 1170.688051][T32354] read to 0xffff888237d27010 of 1 bytes by task 32354 on cpu 0: [ 1170.695680][T32354] need_mlock_drain+0x30/0x50 [ 1170.700376][T32354] __lru_add_drain_all+0x273/0x450 [ 1170.705510][T32354] lru_add_drain_all+0x10/0x20 [ 1170.710296][T32354] invalidate_bdev+0x47/0x70 [ 1170.714889][T32354] ext4_put_super+0x624/0x7d0 [ 1170.719572][T32354] generic_shutdown_super+0xe6/0x210 [ 1170.724887][T32354] kill_block_super+0x2a/0x70 [ 1170.729595][T32354] ext4_kill_sb+0x42/0x80 [ 1170.733957][T32354] deactivate_locked_super+0x75/0x1c0 [ 1170.739352][T32354] deactivate_super+0x97/0xa0 [ 1170.744045][T32354] cleanup_mnt+0x2a9/0x320 [ 1170.748476][T32354] __cleanup_mnt+0x19/0x20 [ 1170.752912][T32354] task_work_run+0x131/0x1a0 [ 1170.757823][T32354] exit_to_user_mode_loop+0x1fe/0x740 [ 1170.763236][T32354] do_syscall_64+0x1e1/0x2b0 [ 1170.767855][T32354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1170.773754][T32354] [ 1170.776082][T32354] value changed: 0x1b -> 0x1e [ 1170.780757][T32354] [ 1170.783093][T32354] Reported by Kernel Concurrency Sanitizer on: [ 1170.789496][T32354] CPU: 0 UID: 0 PID: 32354 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1170.801046][T32354] Tainted: [W]=WARN [ 1170.804852][T32354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1170.814921][T32354] ================================================================== [ 1171.157034][T13937] loop5: detected capacity change from 0 to 1024 [ 1171.164147][T13937] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1171.175053][T13937] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 1171.195943][T13937] JBD2: no valid journal superblock found [ 1171.201698][T13937] EXT4-fs (loop5): Could not load journal inode [ 1171.218294][T13068] bridge_slave_1: left allmulticast mode [ 1171.224062][T13068] bridge_slave_1: left promiscuous mode [ 1171.229760][T13068] bridge0: port 2(bridge_slave_1) entered disabled state [ 1171.263207][T13068] bridge_slave_0: left allmulticast mode [ 1171.268904][T13068] bridge_slave_0: left promiscuous mode [ 1171.274654][T13068] bridge0: port 1(bridge_slave_0) entered disabled state [ 1171.405247][T13068] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1171.422229][T13068] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1171.440446][T13068] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1171.459690][T13068] bond0 (unregistering): Released all slaves [ 1171.527827][T13068] tipc: Left network mode [ 1171.628576][T13068] hsr_slave_0: left promiscuous mode [ 1171.635456][T13068] hsr_slave_1: left promiscuous mode [ 1171.641000][T13068] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1171.649091][T13068] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1171.657407][T13068] pim6reg (unregistering): left allmulticast mode [ 1171.687529][T13068] team0 (unregistering): Port device team_slave_1 removed [ 1171.696961][T13068] team0 (unregistering): Port device team_slave_0 removed [ 1171.705732][ T898] smc: removing ib device syz! [ 1171.946899][T13068] IPVS: stop unused estimator thread 0...