last executing test programs: 16m13.006875898s ago: executing program 32 (id=4161): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xa3}, 0x1, 0x0, 0x0, 0x8050}, 0x40000) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netdev_private(r0, 0x8946, &(0x7f0000000140)) 16m0.585060205s ago: executing program 33 (id=4311): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) (async) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000) setsockopt$sock_attach_bpf(r0, 0x1, 0x14, &(0x7f00000000c0), 0x43) (async) recvmsg$unix(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) (async) close(r1) (async) r5 = open(&(0x7f0000000280)='.\x00', 0x80, 0x28) fcntl$notify(r5, 0x402, 0x8000003d) (async) fcntl$setown(r5, 0x8, 0xffffffffffffffff) (async) setsockopt$SO_J1939_ERRQUEUE(r5, 0x6b, 0x4, &(0x7f00000002c0)=0x1, 0x4) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000180)=0x3) 11m57.171733903s ago: executing program 34 (id=8625): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x26}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) (fail_nth: 9) 10m20.810913294s ago: executing program 35 (id=10649): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) getcwd(&(0x7f00000004c0)=""/4096, 0x1000) socket$inet6_icmp(0xa, 0x2, 0x3a) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000380)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB='b *:4\tr'], 0xa) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1, 0xfffffe00) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010200000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900010073797a30000000000900030073797a32000000001400048008000140000000000800024000000b002c000000030a03000000000000000000020000000900010073797a30000000000900030073797a32"], 0xb4}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x7, 0xff9, &(0x7f00000014c0)=""/4089, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1b, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00'}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000002680)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000020000000000000000000000000000000000000000000000a9b1f1d868e8c1cc68a9631e1870f14202051139627c7f9c429cbacdad9b71124be765ac58ec26876fca7e41a236699a93768694dec9ede89632a54891eaecbb602a38e383e254cff410c2b059b49b0aeb6ffd1604387da933193c6bdf2a0088cefe60c24bb666a7a26e6705af8036"], 0x48) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) io_uring_setup(0x204b, &(0x7f0000005740)={0x0, 0x1e, 0x3080, 0x0, 0x200027d}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) 9m36.525617476s ago: executing program 5 (id=11605): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) (async) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="510c000000001c00"/17], 0x28}}, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 32) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010000c7ce360863078120abd001e402010902120001000000000904000000ff"], 0x0) (rerun: 32) syz_usb_control_io(r4, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0xc, @string={0xc, 0x3, "4c031e84492745000057"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_disconnect(r4) (async) syz_usb_disconnect(r4) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) (async, rerun: 64) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x6daa, @rand_addr=' \x01\x00', 0x7}, 0x1c) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}}, 0x0) 9m36.471397457s ago: executing program 5 (id=11607): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x81, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000001880)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001840)={&(0x7f00000005c0)={0x9c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x1}, [@CTA_NAT_DST={0x34, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0xd}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x4, 0x97]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xcf6}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x4}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1000}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x542}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xdf}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'snmp_trap\x00'}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000}, 0x4020084) personality(0xeaffffffffffffff) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @host}, 0x10) connect$vsock_stream(r2, &(0x7f00000001c0)={0x28, 0x0, 0x2710}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$xdp(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000007bc0)=[{&(0x7f0000000280)}, {&(0x7f0000000380)="51f48382741e831d9aeb5f1784f31b5da8a9c7825bc368176fd19cdc42816634c211347ec533371f4f76c3f7a8", 0x2d}, {&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000001680)="b46f1011389da49cc70ac6dcb3b213754839bc82788f85a55bc124cf31c60052ba9d1afcbd6e421e79ce91f105e7fde0a86b6642cf991927ac06198580dd44eb60d63bb24eb3b743a1b6441bb33caf46212c0d1cdad6058e90d20682c03661b99fc470cdfb1fb98c28627829dca863871960cec5525aeb7ac5181b5580079aea9f70d0884473380c7a9e08c8c0a16a2edc990f2d32897386646b22d62232430654d304db103f066c3f06ae6afb00e83af5ad06b712fbfc4170abbf63018c7f30f8d8c0b29446994bf0aad52e082338ce0a", 0xd1}, {&(0x7f0000002bc0)="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", 0x120}, {&(0x7f0000001940)="f125e9d818f89004197e9621ab8a68ca731e05e9ff55319c506fd7150989bda040ac5fb562d39a50bcf7600a016807f21a45fa369a0eb63a51afe84bbac04bdfe03f831f028492ddb82872f70a55579e423c6a5c9dcf23895d96404fb22c6daf31405729487fecdbde6dbc72", 0x6c}, {&(0x7f00000018c0)="95846a89f4370b25fbca94387fe5431603e29f3026a46f249c6587b0f2eaf5248d548968e5ba71a00fd78898c29fe97f5e8608c1fe689de4906ac5d031a3a672421103cecde0843e79fa1810dccf", 0x4e}, {&(0x7f0000006980)="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", 0x11d}, {&(0x7f0000001780)="7aa519699001c64dc355fce214a7259e9360d073ac17dcf4de2efefb50a5f0e905776207c28f81216117efa2cc1dbf9f1ca4f766b12c34530839b97d27af45f501d213b7ce0c9a3d715582dda539e507ce1e3e10d9536c8a8b1cc10968e32d6fb4b63586e0036231d061869d6b9c438dec0d227cbce4eec4a2065a2f7f7213fe7ae04ec96684e5e22aaefc901bde89e91bf4786cce31ae59298e53a41c1f76fe5556f57606f5bbb4df33cb77", 0xac}, {&(0x7f00000003c0)="2cca440c804a5cb96804ce6c6b6e8d935ff6b6dc3769d76d9f3e6bb8b5420c70801b41102bb5153f27542479cc94b942a4c02809e1b0455883b267a39f70f5b116a67b7b23", 0x45}, {&(0x7f0000000500)="0ff34a70c6adbb8a20e8eb0327d4ebc6380896df04bbdb89d2fbbe6395ba6f5d9ca8d406fc39bf7d21c0f0d2c678393b07eb76702bbb77f30bac3f789fc28fd93167f0d6ec2feb1ab12867d6548289d07bda9a8ea1eb9232225b", 0x5a}, {&(0x7f0000006ac0)="fab19e6f1f19bedfc41cb954b88f5dbf8349b20ea94aaf4014fbc3fe6ceae0b3b7640da016871edf1bafefed3c54d11a29a10bf9cc2e3f34cd17c25748201e86c29382929cd3e59e90fcea2bd188d48af656ee857e4586e031251f2110c4c9f1f23ae8903edb786c46900874f6d2bfb7a3c3ea47e33e2dbf312093f26ced914bd018a3a4d9bd7edb64b1085546d022d4d297df762513def43a6150a7ebadb0b02a62fb3fc02a511a3b4ab20d0db6a5149582d42b63cd9d6fdf9e4f0d8eee7ece3e1586d21dca813320e8ebb5edb3901c89bbe988f0fa9665761391ff5233c41f9eba8d132368ee5c8982", 0xea}, {&(0x7f0000006bc0)="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", 0x937}], 0xd}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r6 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r6, 0x2007ffb) sendfile(r6, r6, 0x0, 0x1000000201005) 9m36.026457663s ago: executing program 5 (id=11611): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r0, &(0x7f00000005c0)="04", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffff9, @rand_addr=' \x01\x00'}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) 9m35.504906801s ago: executing program 5 (id=11615): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x8, &(0x7f0000000040), 0x9, 0x53a, &(0x7f0000000a40)="$eJzs3U9sI1cZAPBvJvHau02bLfQAqNClFBa0WjvxtquqF8qpQqgS0COHbUi8UbT2ehU7pQl7yB65I7ESJzhx5oDEAakn7kgc4MalHJAKrEBNERJGHttZb2Inbv7Ym/j3k0bzZt54vvcymvcmz8m8AKbWlYjYjogLEfFuRMx39yfdJd7sLO3jPn50f3nn0f3lJFqtd/6RZPntfdH3mbZnuucsRMT334r4YbIn6B8jGptbd5aq1cp6d1epWbtXamxuXV+rLa1WVit3y+WbizcXXr/xWvnE6vpS7dcfXYyI3/32ix/+YfsbP24Xa66b11+Pk9Spem43TttsRHznNIJNwEy3PheO8uEjfYiTlEbEZyLi5ez+n4+Z7Go+6cnL9M0xlg4AOA2t1ny05vu3AYDzLs3GwJK02B0LmIs0LRY7Y3gvxKW0Wm80r92ub9xd6YyVXY5cenutWlnojhVejlxye222spile9vVSnnP9o2IeD4ifpq/mG0Xl+vVlUk++ADAFHtmT///73yn/wcAzrnC42R+kuUAAManMOkCAABjp/8HgOmj/weA6aP/B4Dpo/8HgOmj/weAqfLdt99uL62d7vuvV97b3LhTf+/6SqVxp1jbWC4u19fvFVfr9dXsnT21w85XrdfvLb4aG++XmpVGs9TY3LpVq2/cbd7K3ut9q5IbS60AgIM8/9IHf04iYvuNi9kSfe/7P7SvfvG0SwecpnTSBQAmZuaAvP+MsRzA+O2f7QuYFsbjYXr9r9VqRd/cvRHxYDfV9zLQoX8i9HA39cn3Ys+ZHksHzht60C8fwKm7+vljjP8DZ5rxf5heR3sEH/AsD5w5xv9herVaiTn/AWDKGOMHBn5r36f/+/+FVt/Gw1MqEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJwBc9mSpMXuXOBzkabFYsSzEXE5csnttWplISKei4g/5XP59vZiRJg3CADOsvRvSXf+r6vzr8ztzb2Q/ySfrSPiRz9/52fvLzWb64sRF5J/7u5vPuzuL0+i/ADAYXr9dK8f7/n40f3l3jLO8nz0rc7kou24O92lkzMbs9m6kI01XPpX0t3uaD+vzJxA/O0HEfG5QfVPsrGRy92ZT/fGb8d+dqzx0yfip1leZ93+WXz2BMoC0+aDdvvz5qD7L40r2Xrw/V/IWqjj67V/O/vav3S3/ZsZ0v5dGTXGq7//9r6drflO3oOIL8xG7PRO3tf+9OInQ+K/MmL8v7z4pZeH5bV+EXE1BtU/eSJWqVm7V2psbl1fqy2tVlYrd8vlm4s3F16/8Vq5lI1Rl3oj1fv9/Y1rzw2L367/pSHxC4fU/6sj1v+X/333B18+IP7XvzL4+r9wQPx2n/i1EeMvXfpNYVheO/7KkPofdv2vjRj/w79urYx4KAAwBo3NrTtL1Wpl/fiJwoHHpJX1Ru64IXKHH5NEbJ9IdUZJ5H/1k7cOPzg/tvIcMRHDsmaelhKem0T+6SjGCIlJt0zAaXt800+6JAAAAAAAAAAAAAAAwDAj/T/QxU9z8P7EhKsIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAOfb/AAAA//+af9Tf") r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) waitid(0x0, r0, 0x0, 0x8, 0xfffffffffffffffd) r1 = syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x6, 0x10, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x93c8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r4}, 0x10) r5 = socket$inet6(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r6}, 0x10) sendto$inet6(r5, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x64, r7, 0x1, 0x10, 0x2, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) wait4(r1, 0x0, 0x40000000, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0xa4) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000140)) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x18) ptrace$getsig(0x4202, r1, 0x7, &(0x7f0000000340)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x84402, 0x20) ioctl$EXT4_IOC_MIGRATE(r8, 0x6609) socket$nl_xfrm(0x10, 0x3, 0x6) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r11, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYRESOCT=r11], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 9m34.665180422s ago: executing program 5 (id=11627): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'vlan0\x00', 0x3}, 0x18) fsopen(&(0x7f0000000040)='proc\x00', 0x0) (async) r1 = fsopen(&(0x7f0000000040)='proc\x00', 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7, 0x5, 0x4, 0x0, 0x0, 0xff, 0x111d0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_bp={&(0x7f0000000080)}, 0x100008, 0x2, 0x101, 0x5, 0x0, 0x4, 0x1000, 0x0, 0x5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x2) fgetxattr(r0, &(0x7f0000000140)=@known='com.apple.FinderInfo\x00', &(0x7f0000000180)=""/137, 0x89) fcntl$setsig(r1, 0xa, 0x1b) (async) fcntl$setsig(r1, 0xa, 0x1b) setsockopt$MRT_DEL_MFC(r0, 0x0, 0xcd, &(0x7f0000000240)={@loopback, @dev={0xac, 0x14, 0x14, 0x30}, 0xffffffffffffffff, "4cd9683f42cabb861d78d2fd413f0aba1162a2d490b4ba9bc9dd60150cd43369", 0x1, 0x8, 0x1, 0x1}, 0x3c) fcntl$getownex(r1, 0x10, &(0x7f0000000280)={0x0, 0x0}) getpgid(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r1) (async) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r1) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r4, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x5}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x4800) (async) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r4, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x5}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x4800) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x2, 0x1c}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) (async) sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x2, 0x1c}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r3) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r6, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x805) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000680)={0x0, 0x1ff, 0x400}) (async) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000680)={0x0, 0x1ff, 0x400}) socket(0x1, 0x1, 0x3) (async) r7 = socket(0x1, 0x1, 0x3) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f00000006c0)=[@in6={0xa, 0x4e21, 0x40b, @remote}], 0x1c) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000840)={0x1, 0xffffffffffffffff}, 0x4) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000880), 0x480001, 0x0) r10 = openat$nvram(0xffffffffffffff9c, &(0x7f00000008c0), 0x121500, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x10, 0x11, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x4, 0x5, 0x7ff, 0x81}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000900)=[r8, r9, 0xffffffffffffffff, 0xffffffffffffffff, r10], &(0x7f0000000940)=[{0x5, 0x3, 0x4, 0x5}], 0x10, 0x101, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000d40)={&(0x7f0000000a40)="b54c8f1a7d2c8d9fba0da69aa1eea511b0cd60fb1dc3c85643a57fdd427992cd322886c27550ddf37f74f645cc303e43356d3528a5049a7404a5c2050c25f023cc6f5f7c2b2d239d8d4553a75e40afa5e21d0acd1f74ff63536ee9c5942eec15759ae6ab8f50af4eb333967a872452f1179d6b0577326715b3082a09977bc5881ac8bd2e49f01c53d473c27c28893006c1cefe00cbc348d968a6ff3548329e1170063b173e853f5c5f7b10fbd797e50736668dfa239e6ef1fc5c7b538be8aa3112ad39dc6cd2cb139bb998174b042ee31eac9c87540a412005b0621588bd7419ab08b1242a17e42023b6bc0302383d5efa76af1156f752", &(0x7f0000000b40)=""/207, &(0x7f0000000c40)="a17002569d3376868957feef8af36a128f04c64ba1ae5b5e249d9958d04e54f15558d9bd908717f9c36e43b6fa2626cd70133c9a88013648c60fff5273c6681bb328c3a2c44c6032572c32e6d042b7bd9a9e7b12d48b2d70125368c733ff7495959b7d7f361c9a30e1d28ade209ba956908a8239bb3551556d5f2cef706f10dc4569fdb08b17f0230be6e9700856df844777a53ea1a2202c341a2db5890b17f027a40a1c36edf05c2c950ac0", &(0x7f0000000d00)="e8e22f0473", 0x8, r10, 0x4}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000d40)={&(0x7f0000000a40)="b54c8f1a7d2c8d9fba0da69aa1eea511b0cd60fb1dc3c85643a57fdd427992cd322886c27550ddf37f74f645cc303e43356d3528a5049a7404a5c2050c25f023cc6f5f7c2b2d239d8d4553a75e40afa5e21d0acd1f74ff63536ee9c5942eec15759ae6ab8f50af4eb333967a872452f1179d6b0577326715b3082a09977bc5881ac8bd2e49f01c53d473c27c28893006c1cefe00cbc348d968a6ff3548329e1170063b173e853f5c5f7b10fbd797e50736668dfa239e6ef1fc5c7b538be8aa3112ad39dc6cd2cb139bb998174b042ee31eac9c87540a412005b0621588bd7419ab08b1242a17e42023b6bc0302383d5efa76af1156f752", &(0x7f0000000b40)=""/207, &(0x7f0000000c40)="a17002569d3376868957feef8af36a128f04c64ba1ae5b5e249d9958d04e54f15558d9bd908717f9c36e43b6fa2626cd70133c9a88013648c60fff5273c6681bb328c3a2c44c6032572c32e6d042b7bd9a9e7b12d48b2d70125368c733ff7495959b7d7f361c9a30e1d28ade209ba956908a8239bb3551556d5f2cef706f10dc4569fdb08b17f0230be6e9700856df844777a53ea1a2202c341a2db5890b17f027a40a1c36edf05c2c950ac0", &(0x7f0000000d00)="e8e22f0473", 0x8, r10, 0x4}, 0x38) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002140)={r10, 0xe0, &(0x7f0000002040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001e80)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f0000001ec0)=[0x0], &(0x7f0000001f00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x3b, &(0x7f0000001f40)=[{}, {}], 0x10, 0x10, &(0x7f0000001f80), &(0x7f0000001fc0), 0x8, 0xeb, 0x8, 0x8, &(0x7f0000002000)}}, 0x10) r13 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002180)=0xffffffffffffffff, 0x4) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002200)={0x2, 0x4, 0x8, 0x1, 0x80, r9, 0x80000001, '\x00', 0x0, r10, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002300)={0x1, 0x11, &(0x7f0000000d80)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}}, @alu={0x3, 0x0, 0x2, 0xb, 0x2, 0x4}, @map_fd={0x18, 0x9, 0x1, 0x0, r9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], &(0x7f0000000e40)='GPL\x00', 0xffffffff, 0x1000, &(0x7f0000000e80)=""/4096, 0x40f00, 0x11, '\x00', r12, @fallback=0x1, r13, 0x8, &(0x7f00000021c0)={0x3, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r11, 0x1, &(0x7f0000002280)=[r9, r8, r9, r14], &(0x7f00000022c0)=[{0x0, 0x2, 0x0, 0xb}], 0x10, 0x3, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000002300)={0x1, 0x11, &(0x7f0000000d80)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}}, @alu={0x3, 0x0, 0x2, 0xb, 0x2, 0x4}, @map_fd={0x18, 0x9, 0x1, 0x0, r9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], &(0x7f0000000e40)='GPL\x00', 0xffffffff, 0x1000, &(0x7f0000000e80)=""/4096, 0x40f00, 0x11, '\x00', r12, @fallback=0x1, r13, 0x8, &(0x7f00000021c0)={0x3, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r11, 0x1, &(0x7f0000002280)=[r9, r8, r9, r14], &(0x7f00000022c0)=[{0x0, 0x2, 0x0, 0xb}], 0x10, 0x3, @void, @value}, 0x94) sendmsg$TIPC_NL_NET_GET(r7, &(0x7f0000002600)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000025c0)={&(0x7f0000002400)={0x1b8, r6, 0x100, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}, @TIPC_NLA_NODE={0x9c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "eefbccd88f2fa04bbf73b0d272060f47100b16a7844d8ed5803cc20198"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "3d9eab23830110d833b454b1581b7ac0fa442e32bca023f59a50f59c4cacac19a255"}}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe0}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6e}]}, @TIPC_NLA_LINK={0xa0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) (async) sendmsg$TIPC_NL_NET_GET(r7, &(0x7f0000002600)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000025c0)={&(0x7f0000002400)={0x1b8, r6, 0x100, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}, @TIPC_NLA_NODE={0x9c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "eefbccd88f2fa04bbf73b0d272060f47100b16a7844d8ed5803cc20198"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "3d9eab23830110d833b454b1581b7ac0fa442e32bca023f59a50f59c4cacac19a255"}}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe0}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6e}]}, @TIPC_NLA_LINK={0xa0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) 9m34.120883569s ago: executing program 5 (id=11629): r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0xf, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) 9m34.099034399s ago: executing program 36 (id=11629): r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0xf, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) 7m40.562051618s ago: executing program 6 (id=12127): unshare(0x22020600) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x4, 0x0}, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@multicast1, 0x4e23, 0x2, 0x0, 0x12d5c, 0x12d5c}}, 0x44) 7m40.501204299s ago: executing program 6 (id=12129): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x18, 0x1418, 0x1, 0x20, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) 7m40.364978411s ago: executing program 6 (id=12134): sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x30, 0x1412, 0x1, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4004010) 7m40.233960413s ago: executing program 6 (id=12137): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/wireless\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000400)=""/159, 0x9f}], 0x1, 0x105, 0x97e) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) socket$inet(0x2, 0x800, 0x70) 7m39.384211725s ago: executing program 6 (id=12144): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) personality(0x400000) 7m39.225896307s ago: executing program 6 (id=12146): mount(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f00007ba000/0x3000)=nil, 0x3000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="03040000b500000000000000feef"], 0xc8) ptrace(0x10, 0x1) syz_emit_ethernet(0xe0, 0x0, 0x0) 7m24.243203544s ago: executing program 37 (id=12146): mount(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f00007ba000/0x3000)=nil, 0x3000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="03040000b500000000000000feef"], 0xc8) ptrace(0x10, 0x1) syz_emit_ethernet(0xe0, 0x0, 0x0) 5m47.961457464s ago: executing program 8 (id=14104): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000003"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) getrandom(&(0x7f0000000200)=""/32, 0x20, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) recvmsg$unix(0xffffffffffffffff, 0x0, 0x43) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[], 0x118}}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) write$char_usb(r4, &(0x7f00000008c0)='-0', 0x2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 5m47.940164144s ago: executing program 8 (id=14105): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x40ffffffff}, 0x11008, 0x5, 0x3a65, 0x5, 0x0, 0x5, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) unshare(0x2c020400) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001640)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x7, 0x0, 0x0, 0xfffffffd, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}, 0x80000001, 0xfffffffc}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xb, 0x0, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000, 0x0, 0x1]}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x4, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x0, 0x7, 0xfea7, 0x1, 0xffff8000, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x1, 0xa89c, 0x1, 0xc, 0x492217a0, 0xff, 0x5, 0x3, 0x1ff, 0xe5, 0x1000002f, 0xe, 0x3, 0xa, 0x3, 0x1, 0x9, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0000, 0x8, 0x8, 0xffffff40, 0x100, 0x8, 0x5, 0x7, 0xe0b2, 0xfffffffe, 0x8fc, 0x84, 0x9, 0x3, 0x9, 0x80000001, 0x6, 0x0, 0x8, 0x800, 0x9, 0x1, 0x100, 0x401, 0x8, 0x3, 0xb5, 0x10001, 0x4, 0x1, 0x7f, 0xfffffffc, 0x8, 0x2, 0x7f, 0x0, 0x2, 0xc, 0x0, 0x4, 0x8000, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x0, 0x7, 0xeb22, 0xd, 0x8000, 0xfffffff7, 0x0, 0x4, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0x10000, 0x5, 0x1, 0x0, 0x2, 0x7, 0x5, 0x6, 0x5, 0x4, 0x2, 0x81, 0x0, 0x10, 0x6, 0x7fff, 0x800, 0xfffffff4, 0x10000, 0x5, 0x8, 0xba, 0x4, 0x89, 0x2, 0x6, 0x100, 0x9, 0xffffa3e0, 0x86b9, 0xff, 0x1, 0x2, 0xf, 0x24b9, 0x3a, 0xe01, 0x1, 0x6430, 0xd, 0x8, 0x0, 0x3, 0x2, 0x3, 0x0, 0x200, 0xfffffeff, 0x9, 0xff, 0xa, 0x6, 0x7, 0x100, 0x1, 0x8001, 0x100, 0xb, 0x8, 0x101, 0x7, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x0, 0x1, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0x0, 0x0, 0x5, 0x2, 0x65, 0x4, 0xfffffa0c, 0x3, 0x0, 0x4, 0x4, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x0, 0x6, 0x8, 0x28, 0x2, 0x5, 0x10001, 0x2, 0xd, 0x0, 0x3, 0x723, 0x0, 0xe, 0x9, 0x4, 0x6, 0x7, 0x1, 0x2, 0x7, 0x3, 0x8, 0x57, 0xfffffffb, 0x2, 0x7f, 0x2, 0x80000001, 0x0, 0x9, 0xf, 0xfffffffe, 0x928, 0x4, 0xfffffffd, 0x5, 0x6042, 0xb87, 0x6, 0x8d8d, 0x55, 0x101, 0x2, 0x64e8, 0xc, 0x82f, 0x2, 0x80a, 0xfff, 0x6, 0x3f7, 0x4, 0x2000008, 0x8, 0x1, 0x5d, 0x9, 0xd, 0x80]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x3}}}}]}]}, 0x88c}}, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000080)=0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000054850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000600)={0xd8, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_macvtap\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'macvlan0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_macvtap\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_bond\x00'}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x854}, 0x4840) sendmsg$nl_xfrm(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)=ANY=[@ANYBLOB="38010000100013070000000000000000ac1e00010000000000000000000000007f00000100000000000000000000000000000000000000000a0000005e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001000004d432000000ac14140000000000fe00000000000000fdffffffffffffff00000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000200000000000000000000000000100000000000000000000000000000000000010000000000000002000400000000000000000048000200656362286369706865725f6e756c6c2900"/240], 0x138}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000000f40)={'filter\x00', 0x10, 0x4, 0x3f0, 0x110, 0x0, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="e5fce0c960bc", @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1e}, 0xf, 0xffffffff}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @broadcast, @loopback, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) fgetxattr(r0, &(0x7f00000005c0)=@random={'user.', '%%{+\x00'}, 0x0, 0x0) iopl(0x3) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x100000000000000, 0x0) 5m47.894466215s ago: executing program 8 (id=14106): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff14"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffff7ffffe9}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000f0070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c617374000000000400028010000180090001006c61737400000000140001800c000100636f756e746572000400028008000340000001"], 0xc8}}, 0x20050800) 5m47.881904625s ago: executing program 8 (id=14107): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000056, &(0x7f0000000240), 0x1, 0x54f, &(0x7f0000000b00)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbZdnamc8HbnvOvTc995t7v6fn5iQkgKE1kf0oRLwcEd8kEQfbto1GvnFibb/V+1dnsyWJRuPTv5JI8nWt/ZP89/688lJE/PZVxPHCxnZryysLpXI5Xczrk/XKpcna8sqJC5XSfDqfXpyemTn19sz0e+++M7BY3zj7z/ef3P7w1NdHV7/75e6hm0mcjgP5tvY4nsC19spETOTPyVicfmTHqQE0tpMk230A9GUkz/OxyPqAgzGSZz3w//dlRDSAIZXIfxhSrXFA695+QPfBz417H6zdAG2Mf3TttZHY07w32reaPHRnlN3vjg+g/ayNX/+8dTNbYnCvQwBs6dr1iDg5Orqx/0vy/q9/J3vY59E29H/w7NzOxj9vdhr/FNbHP9Fh/LO/Q+72Y+v8L9wdQDNdZeO/9zuOf9cnrcZH8toLzTHfWHL+QjnN+rYXI+JYjO3O6pvN55xavdPotq19/JctWfutsWB+HHdHdz/8mLlSvfQkMbe7dz3ilY7j32T9/Ccdzn/2fJztsY0j6a3Xum3bOv6nq/FTxOsdz/+DGa1k8/nJyeb1MNm6Kjb6+8aR37u1v93xZ+d/3+bxjyft87W1x2/jxz3/pt229Xv970o+a5Z35euulOr1xamIXcnHG9dPP3hsq97aP4v/2NHN+79O1//eiPi8x/hvHP751f7jf7qy+Oce6/w/fuHOR1/80K393s7/W83SsXxNL/1frwf4JM8dAAAAAAAA7DSFiDgQSaG4Xi4UisW193ccjn2FcrVWP36+unRxLpqflR2PsUJrpvtg2/shpvL3w7bq04/UZyLiUER8O7K3WS/OVstz2x08AAAAAAAAAAAAAAAAAAAA7BD7u3z+P/PHyHYfHfDU+cpvGF5b5v8gvukJ2JH8/4fhJf9heMl/GF7yH4aX/IfhJf9heMl/GF7yHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAbq7Jkz2dJYvX91NqvPXV5eWqhePjGX1haKlaXZ4mx18VJxvlqdL6fF2Wplq79XrlYvTU3H0pXJelqrT9aWV85VqksX6+cuVErz6bl07JlEBQAAAAAAAAAAAAAAAAAAAM+X2vLKQqlcThcVFPoqjO6Mw1AYcGG7eyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeOC/AAAA///ktDiZ") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x404, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x554, 0x81}, 0xcec0, 0x2, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x56}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$igmp(0x2, 0x3, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004510007c000000000106907864010101ac1414aa00004e22e2bdb18a13512a5cce777c89b2c487da8b342f250ca1f09685e300000100000000005e56f88a81090043514d57b0555c6c7deaf7af", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ac2000009078000008870000000600000006fe06e2d4c3d9fe04f989080a0000020000000009050a0000000200000002fe08f98943ecdca905220000000b00000800000000050000008c000000010000000dfffe00000000000300000005000000070000"], 0x0) fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) memfd_create(&(0x7f0000000080)='@/\x00', 0x5) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x20, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x1, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x158) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x8200, &(0x7f0000000000)=ANY=[@ANYBLOB]) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r2, r1, 0x0, 0xa, &(0x7f0000000140)='syzkaller\x00'}, 0x30) socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f600000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000001a000100000000000000000002000000000000000000000005001b000600000008001900", @ANYRES32], 0x2c}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)) ioprio_set$pid(0x2, 0x0, 0x2000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) 5m47.773827017s ago: executing program 8 (id=14108): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f0000000180)="ea2a4e", 0x3, 0x80, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096", 0xe3}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def", 0xe8}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c66", 0x22}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec4", 0x35}], 0x4}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c2", 0x5f}, {&(0x7f0000000e80)="5be3b011e12323e4ab88c0472f0700000000000000e71ba6231f303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e3", 0x62}], 0x2}}], 0x2, 0xc0) 5m47.655180528s ago: executing program 8 (id=14110): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18) r1 = socket$xdp(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) unshare(0x2c020400) r3 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0xa3c}, {0xa, 0xfffe, 0xfffffffd, @dev, 0x4}, 0x1000, {[0x9, 0x0, 0xfffffffe, 0xfffffef9, 0x0, 0x1, 0x2]}}, 0x5c) r4 = socket$netlink(0x10, 0x3, 0x400000000000004) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d9000000000020b208850000007b000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000180)="480000001400190d7ebdeb75fd0d9c562c08000000000000002ea6ff3cd3c461ebe430a2ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6", 0x48}], 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="fb6b", 0x2}], 0x1}, 0x0) 5m47.630017408s ago: executing program 38 (id=14110): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18) r1 = socket$xdp(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) unshare(0x2c020400) r3 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0xa3c}, {0xa, 0xfffe, 0xfffffffd, @dev, 0x4}, 0x1000, {[0x9, 0x0, 0xfffffffe, 0xfffffef9, 0x0, 0x1, 0x2]}}, 0x5c) r4 = socket$netlink(0x10, 0x3, 0x400000000000004) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d9000000000020b208850000007b000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000180)="480000001400190d7ebdeb75fd0d9c562c08000000000000002ea6ff3cd3c461ebe430a2ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6", 0x48}], 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="fb6b", 0x2}], 0x1}, 0x0) 4m49.222778635s ago: executing program 3 (id=15302): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x98}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x98}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) 4m48.723750012s ago: executing program 3 (id=15308): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002600)=@delchain={0x1e8, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x40, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x4}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}, @filter_kind_options=@f_route={{0xa}, {0x158, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xca}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x144, 0x6, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mirred={0x110, 0x9, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x5, 0x10000000, 0xae, 0x2}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x3, 0x10000000, 0x8, 0x8}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1336e5ff, 0x9, 0x6, 0x0, 0x1}, 0x7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x4, 0x20000000, 0x8}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x100, 0x6, 0x7, 0x1f31, 0xfffffff5}, 0x4}}]}, {0x41, 0x6, "216194e50e7faa7649d1c06839be3b59a7f1bb6c7fbd0e7344b4e9b561d4b406f4a7a0c7e6ebe935ccd4c10fd3ff9357cc52da0d5a0f390e738e2309da"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x81}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 4m48.679820412s ago: executing program 3 (id=15310): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007009300000000000c0001"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 4m48.626853673s ago: executing program 3 (id=15311): r0 = io_uring_setup(0x749b, &(0x7f00000002c0)={0x0, 0x9c57, 0x10, 0x3, 0x5f}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x19, r3, 0x1, 0x1, 0x6, @remote}, 0x14) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 4m48.581072404s ago: executing program 3 (id=15312): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x451, &(0x7f0000000480)="$eJzs20tvG1UUAOAz46bvklDKow/AUBARj6RJC3TBBgRSN0hIsCjLkKZVqdugJki0qmhAqCxRfwGwROIXsIINAlYgtrBHSBXqhsICDRp7nBrHDnbs1Gn9fdIk986Mfc/xzLXvzLUDGFrl/E8SsTMifomI0YgoNe9Qrv27cf3S7F/XL80mkWWv/5HkD4s/r1+are+aFP93FJXxNCL9KIn9LdpduHDxzEylMne+qE8unn1ncuHCxWdOn505NXdq7tz00aNHDk89/9z0s33Jc1ce67735w/sPfbm1Vdnj1996/sv83h3Ftsb86gZ67nNcpSXX5Nmj/f87BvLroZysmmAgdCVvK/nh2uk2v9HoxQ3D95ovPLhQIMD1lWWZdmWFWuXRwBLGXAHS2LQEQCDUf+gz69/68stHH4M3LUXaxdAed43iqW2ZVOkxT4jTde3/VSOiONLf3+aL9HyPgQAQH99nY9/nm41/kvjvob97irmhsYi4u6I2B0R90TEnoi4N6K67/0R8UCX7Zeb6ivHPz9tW1NiHcrHfy8Uc1v/Hf/VR38xVipqu6r5jyQnT1fmDhWvyXiMbMnrU6u08c3LP3/Sblvj+C9f8vbrY8Eijt83Nd2gOzGzONNLzo2ufVC9B3h5Zf7J8kxAEhF7I2LfGp5/a0ScfvKLA+22/3/+q+jDPFP2ecQTteO/FE351yWrz09Obo3K3KHJ+lmx0g8/XnmtXfs95d8H+fHf3vL8X85/LGmcr13ovo0rv37c9ppmref/5uSNanlzse69mcXF81MRm5Olleunbz62Xq/vn+c/frB1/98d8c9nxeP2R0R+Ej8YEQ9FxMNF7I9ExKMRcXCV/L976bG3157/+srzP9HV8e++UDrz7Vft2u/s+B+plsaLNZ28/3UaYC+vHQAAANwu0up34JN0YrmcphMTte/w74ntaWV+YfGpk/PvnjtR+678WIyk9Ttdow33Q6eKe8P1+nRT/XD1vnGWZdm2an1idr6yXnPqQGd2tOn/ud9Kg44OWHddzaO1+0UbcFvye00YXvo/DC/9H4aX/g/Dq1X/vxxxYwChALeYz38YXvo/DC/9H4aX/g9DqZff9a9W2H1svZ75TiuUNkYYXRci3RBhrK2QbowwaoUtEdHpzpfjVgU26HcmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/vg3AAD//zLQ7Dk=") r3 = syz_io_uring_setup(0x83f, &(0x7f00000000c0)={0x0, 0xa9ee, 0x0, 0x3, 0x8002ae}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x109880}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) r6 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r6, &(0x7f0000000280)='io\x00') syz_open_procfs(r6, &(0x7f0000000040)='net/fib_trie\x00') move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) 4m48.226600009s ago: executing program 3 (id=15318): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) unshare(0x2c020400) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) 4m39.566710608s ago: executing program 4 (id=15426): bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x400, 0xffffffff, 0x6, 0x4, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5453, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=@newsa={0x10c, 0x10, 0x1, 0x0, 0x0, {{@in=@rand_addr=0x64010102, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in, 0x0, 0x32}, @in6=@loopback, {0xfffffffffffffffe}, {}, {}, 0x0, 0x0, 0xa, 0x4, 0x0, 0xaf}, [@replay_esn_val={0x1c, 0x17, {0x0, 0xffffffff}}]}, 0x10c}}, 0x0) 4m39.514929759s ago: executing program 4 (id=15428): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYRES64=0x0], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) r2 = socket$packet(0x11, 0x3, 0x300) r3 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) add_key(&(0x7f0000000380)='.dead\x00', &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, r3) setgroups(0x1, &(0x7f0000000180)=[0xffffffffffffffff]) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)=@getchain={0x24, 0x11, 0x1, 0x70bd2c, 0x27dfdbff, {0x0, 0x0, 0x0, r4, {0xd}, {0xfff1, 0xfff2}, {0x0, 0xe}}}, 0x24}}, 0x40000) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001200), 0x2, 0x0) r8 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x400}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r9}, &(0x7f0000000180), &(0x7f00000001c0)=r8}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000e80)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, r11, 0x1}}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x3f, 0x1, 0x0) 4m39.383887921s ago: executing program 4 (id=15435): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x3}, 0x18) (async) getxattr(0x0, &(0x7f0000000380)=ANY=[], 0x0, 0x0) (async) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000fbdbdf2505"], 0x34}, 0x1, 0x0, 0x0, 0x40404}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYRES32=r1], 0x44}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) (async) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r8, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) 4m39.335643142s ago: executing program 4 (id=15438): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x4}, 0x10) sendmsg$tipc(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4008000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x20000, 0x380}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0xfff}]}}}]}, 0x40}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0xd0}, [@ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x102}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f00000000c0)={0x1, 0x3}, 0x8) shutdown(r5, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x900) move_mount(r6, &(0x7f0000000240)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x240) r7 = epoll_create1(0x80000) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") creat(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r8, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x1, 0x0, 0x0, 0x1, 0x0, "ef359f413bb901527fe4d0ce5d29c3ee5e5c3676345a41499dc2aac63a01000000000000004faa2ae2c084a0ea0000000000000000000800002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r2, &(0x7f0000000100)={0x30002008}) r9 = dup3(r0, r1, 0x80000) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r9, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r9, 0x10f, 0x88) 4m38.465945304s ago: executing program 4 (id=15454): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYRES64=0x0], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd']) r2 = socket$packet(0x11, 0x3, 0x300) r3 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) add_key(&(0x7f0000000380)='.dead\x00', &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, r3) setgroups(0x1, &(0x7f0000000180)=[0xffffffffffffffff]) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(r4, &(0x7f0000000080)={0x11, 0x4, r5, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x14) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)=@getchain={0x24, 0x11, 0x1, 0x70bd2c, 0x27dfdbff, {0x0, 0x0, 0x0, r5, {0xd}, {0xfff1, 0xfff2}, {0x0, 0xe}}}, 0x24}}, 0x40000) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001200), 0x2, 0x0) r9 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x400}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r10}, &(0x7f0000000180), &(0x7f00000001c0)=r9}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r11}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000e80)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$RDMA_USER_CM_CMD_QUERY(r8, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, r12, 0x1}}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) prctl$PR_SET_SECCOMP(0x3f, 0x1, 0x0) 4m38.184924468s ago: executing program 4 (id=15455): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbff, 0x800000}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10) gettid() r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r4}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4f1c, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='fib_table_lookup\x00', r0, 0x0, 0x9}, 0x18) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000f80)={'gre0\x00', 0x0}) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0x2000) 4m38.081460899s ago: executing program 39 (id=15455): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbff, 0x800000}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10) gettid() r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r4}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4f1c, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='fib_table_lookup\x00', r0, 0x0, 0x9}, 0x18) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000f80)={'gre0\x00', 0x0}) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0x2000) 4m33.191008407s ago: executing program 40 (id=15318): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) unshare(0x2c020400) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) 3.498194141s ago: executing program 9 (id=20140): socket$nl_route(0x10, 0x3, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x400, 0xffffffff, 0x6, 0x4, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0xa200, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f00000000c0)=""/87) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r3, 0x9c3fa077fa966179, 0x4, 0x0, {{0x7e}, {@void, @void}}}, 0x1c}}, 0x0) 3.265427555s ago: executing program 9 (id=20142): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8040, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x0, 0x0, "ff00f7000000000000000000af88008300"}) r1 = syz_open_pts(r0, 0x141601) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x8, 0x20000000, 0xfffffffc, 0x7fffffd, 0x5, "682341f2fd71a6a76177920ea7e60c0ac7a4a5"}) 2.422307336s ago: executing program 9 (id=20157): set_tid_address(0x0) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="050000009f6000"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000003"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8800) 2.391622516s ago: executing program 9 (id=20159): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x2, 0x0, 0x4, 0x900}}) 2.260407098s ago: executing program 9 (id=20162): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='mm_page_free\x00', r0}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8102) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@ipv4_delroute={0x24, 0x19, 0x901, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x6, 0x4, 0x7fe2, 0x1, 0x40000, 0xffffffffffffffff, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) flock(0xffffffffffffffff, 0x2) dup3(0xffffffffffffffff, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x7f, 0x7ffc0002}]}) syz_open_dev$vcsn(&(0x7f0000000080), 0x9, 0x18700) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001000071f111cdd5cfc11600000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a010100000000f9ff0000010000000900010073797a30000000000900030073797a32000000001c000000060a010400000000000000000100000008000b4004"], 0x90}}, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) kexec_load(0x3e00, 0x0, &(0x7f00000002c0), 0x0) 1.661730507s ago: executing program 1 (id=20171): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="44010000100001000000000019002000fe800000000000000000000000000000ac1e000100000000000000000000000000000000000000000000000032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0100000000000000000000000000000000000032"], 0x144}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) sendmsg$rds(r3, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000001c00)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000001b40)=[{&(0x7f0000001a80)=""/79, 0x4f}], 0x1}}], 0x48}, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r2) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010326bd6000000000002d9300000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20040814) 1.661197637s ago: executing program 9 (id=20172): syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpgid(r0) sched_setscheduler(r1, 0x1, &(0x7f0000000280)=0xb) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000084) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000240), 0x36, 0xcc800) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) syz_clone3(&(0x7f00000002c0)={0x44100000, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1.624345377s ago: executing program 1 (id=20174): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x20) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f0000000140)='./file0\x00') r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x7}, 0x18) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x184) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}, {0x0}], 0x2, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x4, r7}}], 0x20, 0x2400e044}, 0x0) 1.161662723s ago: executing program 7 (id=20178): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x52b, &(0x7f0000000f40)="$eJzs3V9rLGcZAPBnNrvHk3NymlS90IK12krOQc9u0tg2eFEriF4V1HpfY7IJIZtsyG7ak1BMDn4AQUQFr/TGG8EPIEjBGy9FKOi1oqKInuqFF9qR2Z1Nc5L913aTTZPfDybzvjPvzPO8G2Z2ZmeYCeDKeiIiXoiIt9I0vRMR0/n0Qj7EYXvI2r354LXlbEgiTV/6RxJJPq2zriQf38wXux4RX/tyxDeT03Ebe/sbS7VadSevV5qb25XG3v7d9c2ltepadWthYf7ZxecWn1mcG0k/b0XE81/8y/e/89MvPf/Lz7z6x5f/dvtbWVpT+fzj/XiHiv1mtrtean0WxxfYeZfBLqJiq4e5yW4tJk5NuX/GOQEA0F12jP/BiPhkRNyJ6ZjofzgLAAAAvA+ln5+K/yYRaXfXekwHAAAA3kcKrXtgk0I5vxdgKgqFcrl9D++H40ahVm80P71a391aad8rOxOlwup6rTqX3ys8E6Ukq8+3ym/Xnz5RX4iIRyPie9OTrXp5uV5bGfePHwAAAHBF3Dxx/v/v6fb5f8fBOJMDAAAARmdm3AkAAAAAZ27Y8/8bZ5wHAAAAcHZc/wcAAIBL7SsvvpgNaef91yuv7O1u1F+5u1JtbJQ3d5fLy/Wd7fJavb7Wembf5qD11er17c/G1u69SrPaaFYae9djs7671Xx5/aFXYAMAAADn6NGPv/77JCIOPzfZGjLXhlt0yGbARVU8KiX5uMtm/YdH2uM/n1NSwLmYGHcCwNgUx50AMDalcScAjF0yYH7Pm3d+k48/Mdp8AACA0Zv9aO/r/4W+Sx72nw1ceDZiuLpc/4erq3X9f9g7eR0swKVSGnQE0HebPxhxNsA4vOfr/wOl6TtKCAAAGLmp1pAUysVOvVAolyNutV4LUEpW12vVuYh4JCJ+N136QFafb7VMBp4zAAAAAAAAAAAAAAAAAAAAAAAAAABtaZpECgAAAFxqEYW/Jr9qP8t/dvqpqZO/D1xL/jMd+StCX/3RSz+4t9Rs7sxn0/95NL35w3z60+P4BQMAAACuhAEv8H9Y5zy9cx4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKP05oPXljvDecb9+xciYqZb/GJcb42vRykibvwrieKx5ZKImBhB/Mnsz0e6xU+ytI5Cdos/OYL4h/f7xo/D/FPoFv/mCOLDVfZ6tv95odv2V4gnWuPu218x4qH6u9V7/xdH+7+JHtv/rSFjPPbGzys949+PeKx4Kv5BFqETP+kR/8kh43/j6/v7vealP46Y7fr9k3SaZHvIqDQ3tyuNvf2765tLa9W16tbCwvyzi88tPrM4V1ldr1Xzv11jfPdjv3irX/9v9Ig/M6D/T51a27WuMf73xr0HH2oXS93i336yS/xf/yRvcTp+If/u+1RezubPdsqH7fJxj//st4/36/9Kj/4P+v/f7rXSE+589dt/GrIpAHAOGnv7G0u1WnXn0hays/QhG2dHZxciZ4XzKRyMdIVpmqbZNvUe1pPERfhYWoVx75kAAIBRe/ugf9yZAAAAAAAAAAAAAAAAAAAAwNV1Ho8TOxnz8KiUjOIR2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI/H/AAAA///s19ky") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x10, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) write$binfmt_register(r0, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) 1.060624395s ago: executing program 2 (id=20179): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback={0x2000000}, 0xffffffff}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = gettid() r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r5}, 0x18) sendmsg$unix(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='Q', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="0000000018"], 0xa0}, 0x4004881) 1.037440376s ago: executing program 2 (id=20180): mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x198) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) lstat(&(0x7f0000000580)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 952.248547ms ago: executing program 0 (id=20181): socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) io_setup(0x2, &(0x7f0000002380)=0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) io_destroy(r0) 923.350757ms ago: executing program 2 (id=20182): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffe, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x10, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = io_uring_setup(0x28f, &(0x7f0000000080)={0x0, 0x4033, 0x20000, 0x2, 0x13f}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x41) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x101) r5 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x8) r7 = dup(r6) r8 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0) sendfile(r7, r8, 0x0, 0x8000fffffffe) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x41, 0x103) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9, 0x0, 0x7}, 0x18) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r10, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r11, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') mknod$loop(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x400, 0x1) 900.738008ms ago: executing program 7 (id=20183): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='mm_page_free\x00', r1}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8102) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@ipv4_delroute={0x24, 0x19, 0x901, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x6, 0x4, 0x7fe2, 0x1, 0x40000, 0xffffffffffffffff, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) flock(0xffffffffffffffff, 0x2) dup3(0xffffffffffffffff, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x7f, 0x7ffc0002}]}) syz_open_dev$vcsn(&(0x7f0000000080), 0x9, 0x18700) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001000071f111cdd5cfc11600000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a010100000000f9ff0000010000000900010073797a30000000000900030073797a32000000001c000000060a010400000000000000000100000008000b4004"], 0x90}}, 0x0) r5 = socket$kcm(0x10, 0x400000002, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) kexec_load(0x3e00, 0x0, &(0x7f00000002c0), 0x0) 875.341448ms ago: executing program 0 (id=20184): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '\xd0\xae\xde\xc1\xaa \xff\xd8\x1d\x1b\xf8\x93)!|\xb0X\xa3\x96\xed\xa2\xab@\xa2m\x93\xdd\b<\x00t\xdc\xabl\xab!\xae\x16\xc4\xcd\xf9{\xdc5_;A\xd2{eC\x014\\\xb3\xc4\xce\xc3yS2-\x01\xbe\xaarW\x96O\xd3\x0f\xe2\xd7/\x17\x1d\xa7.8\x9f8-\xea<\x8d\x91\x90j\xea\xd5\xd5\xae\xcc\xc0\x97\xef\x10\x92\xea\x98|+\x00\x00\x00\x00\x00\x00\x00\x00'}}]}}) 790.719519ms ago: executing program 2 (id=20185): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000008001400200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r3], 0x50) 789.972779ms ago: executing program 0 (id=20186): socket$nl_route(0x10, 0x3, 0x0) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={0x0, r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setpriority(0x3, 0x0, 0xfffffffd) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x65, 0xfc, 0x5, 0x0, 0x0, 0x7, 0x89008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc46, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x8, 0x7ffffefc, 0x3, 0x1, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1}, 0x0, 0x6, 0xffffffffffffffff, 0x9) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r2, 0x3) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r3, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000002840)=ANY=[@ANYBLOB="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"/273], 0x114}], 0x1}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5}}}}}}}, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0xd) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000f40)=ANY=[@ANYBLOB="18e0ffff000700000000000000002600181106039ebc60cb3e0000f8a6723c37e86ceb3b006c8a0bbae00952617874ec055f5630db45b4541d83506808e39d171ab7ca205e4e93222c02f0abc4cce11ce8a7bcda4ad8789f1d02bd598cb69e380671720d03b23c54f76f27643821c27f0a48a54da41d87a8efedffd1e6149f72ba36f07d08bb68997b5fab90857540d89075e5c52473dbbde7035a5d8e9eeae23ee1eb595aea0838dbd583e4144cedfadd6df4f647df6fe5dcac225257b732cf7551b3e90afd2af052b2826f7b2b6be223e6f964282015c5b1375bc0f157fe6966a344fc2ad5285303b517e099c414dfb562a57f0c334162e2266bd400e222d991e4a38128b15459a6b7b4b2918f", @ANYRES64=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$UHID_DESTROY(r1, &(0x7f0000000080), 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000f00)='kfree\x00', r4, 0x0, 0x4}, 0x18) r5 = syz_io_uring_setup(0x109, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010000000000000006400000181100", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x41, 0x0) writev(r7, &(0x7f0000000380)=[{&(0x7f0000000e40)="c15bba0b98", 0x5}, {0x0}], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000005c0)='kfree\x00', r6, 0x0, 0x69}, 0x18) io_uring_register$IORING_REGISTER_BUFFERS2(r5, 0xf, 0x0, 0x0) 714.75267ms ago: executing program 1 (id=20187): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400a685b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc0100000000000000000000000000010004000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c0027cc"], 0x124}}, 0x0) 577.825652ms ago: executing program 2 (id=20188): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r4}, 0x10) setitimer(0x1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x1, {0x0, 0x0, 0x0, r2, {}, {0xd}, {0xfff3}}}, 0x24}}, 0x0) 384.165735ms ago: executing program 2 (id=20189): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8040, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x0, 0x0, "ff00f7000000000000000000af88008300"}) r1 = syz_open_pts(r0, 0x141601) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x8, 0x20000000, 0xfffffffc, 0x7fffffd, 0x5, "682341f2fd71a6a76177920ea7e60c0ac7a4a5"}) 311.713795ms ago: executing program 7 (id=20190): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) sendmsg$unix(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='Q', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="0000000018"], 0xa0}, 0x4004881) 285.100456ms ago: executing program 1 (id=20191): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x18) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) socket$l2tp6(0xa, 0x2, 0x73) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x1e, 0x0, 0x0, 0xfd, @time, {}, {}, @result}], 0x1c) r2 = memfd_create(&(0x7f00000001c0)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb80xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) gettid() r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001400010000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kmem_cache_free\x00', r3}, 0x18) r4 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r4, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) pipe(0x0) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x9) write$P9_RWRITE(0xffffffffffffffff, 0x0, 0x0) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), 0x0}, 0x20) mkdir(0x0, 0x0) r6 = inotify_init() inotify_add_watch(r6, 0x0, 0x40000000) inotify_add_watch(r6, 0x0, 0x2) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0xc03e) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0) close_range(r0, r1, 0x0) 178.696077ms ago: executing program 7 (id=20195): socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) io_setup(0x2, &(0x7f0000002380)=0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) io_destroy(r0) 57.916039ms ago: executing program 1 (id=20196): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xb}]}) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) close_range(r1, 0xffffffffffffffff, 0x0) msgrcv(0x0, &(0x7f00000001c0)={0x0, ""/250}, 0x102, 0x1, 0x800) 51.639399ms ago: executing program 7 (id=20197): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000008500000069000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000680)='kfree\x00', r1}, 0x18) syz_read_part_table(0x105f, &(0x7f00000011c0)="$eJzsz71xwkAYBNA9S7KkxHYJKsOhOnDkCtyITDk0QEBIBDn1wGhu1AIQvJfc7c79zBeeaixJmva7bMVXn3wkafO/xiVd3pLxdLy0ZWn6tTsnQ5Lh51CvdMntc25qmHZj3Vz7uv5tL5e8r2en7au55Hf/oDEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4KXdAwAA///MJwro") 39.524719ms ago: executing program 0 (id=20198): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 0s ago: executing program 0 (id=20199): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000)=0x715e9936, &(0x7f0000000040)=0x4) (async) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x8) flock(r0, 0x1) capset(&(0x7f0000000100), &(0x7f0000000140)={0x3, 0x0, 0x900, 0x0, 0xffffff65, 0x90b}) (async) getpid() (async, rerun: 64) r1 = socket$inet_smc(0x2b, 0x1, 0x0) (rerun: 64) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @private=0xa010101}, 0x10) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) (async, rerun: 32) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) (rerun: 32) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x1064, 0x0) (async) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f0000000280), &(0x7f00000002c0)=0x30) getpeername(r1, &(0x7f0000000300)=@l2tp={0x2, 0x0, @multicast1}, &(0x7f0000000380)=0x80) (async) r4 = socket(0x2a, 0x0, 0x7ff) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000003c0)={0x0, @private, @dev}, &(0x7f0000000400)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000440)={'syztnl0\x00', r5, 0x2f, 0x5, 0x5, 0x3, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @private2, 0x8, 0x1, 0xf39, 0x6}}) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r4) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, r7, 0x420, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5f}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x8004) (async, rerun: 32) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x2, 0x8}, 0xc) (async, rerun: 32) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000680)=0xffffffffffffffff, 0x4) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0x8000, 0x200, 0x5, 0x2099, r8, 0x8a27, '\x00', r6, r9, 0x4, 0x5, 0x3, 0xe, @void, @value, @void, @value}, 0x50) socket(0xb, 0x6, 0x9) (async) remap_file_pages(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x71, 0x80000) (async, rerun: 32) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x6, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @jmp={0x5, 0x0, 0x6, 0x5, 0xb, 0x0, 0x10}]}, &(0x7f0000000780)='syzkaller\x00', 0x100, 0x5c, &(0x7f00000007c0)=""/92, 0x41000, 0x64, '\x00', r5, 0x25, r9, 0x8, &(0x7f0000000840)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000880)={0x5, 0x6, 0x7fffffff, 0x7}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000008c0)=[r8, r8, r10], &(0x7f0000000900)=[{0x5, 0x5, 0x10, 0x1}, {0x5, 0x1, 0x3, 0x8}], 0x10, 0x6, @void, @value}, 0x94) (rerun: 32) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000b00)={@fallback=r2, 0x5, 0x1, 0x1, &(0x7f0000000a00)=[0x0], 0x1, 0x0, &(0x7f0000000a40)=[0x0], &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) (async, rerun: 32) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e40)={0x11, 0x19, &(0x7f0000000b80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x32c, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ldst={0x2, 0x0, 0x2, 0xa, 0x8, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000c80)='syzkaller\x00', 0x6bd0, 0xe2, &(0x7f0000000cc0)=""/226, 0x41100, 0x22, '\x00', r5, 0x0, r9, 0x8, &(0x7f0000000dc0)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000e00)=[{0x4, 0x5, 0xf, 0x6}, {0x0, 0x2, 0xc, 0x4}, {0x3, 0x5, 0x4, 0xb}], 0x10, 0x3, @void, @value}, 0x94) (rerun: 32) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000b40)={r11, r6, 0x25, 0x10, @val=@tcx={@void, @value=r13, @void, @void, r12}}, 0x1c) preadv(r1, &(0x7f0000001100)=[{&(0x7f0000000f00)=""/35, 0x23}, {&(0x7f0000000f40)=""/165, 0xa5}, {&(0x7f0000001000)=""/250, 0xfa}], 0x3, 0x400, 0x0) (async) lstat(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)) (async) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000001240)={'veth1_to_team\x00', &(0x7f0000001200)=@ethtool_rxfh={0xd72187837ca54e4a, 0x1, 0x0, 0x1, 0x1, "8ac830", 0x2, [0x6, 0x80, 0x9, 0x9, 0x4, 0x147, 0x5, 0xfffffff8]}}) kernel console output (not intermixed with test programs): 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1169.262648][T24875] RSP: 002b:00007fb126587038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1169.262705][T24875] RAX: ffffffffffffffda RBX: 00007fb128145fa0 RCX: 00007fb127f1e969 [ 1169.262716][T24875] RDX: 0000000000000090 RSI: 0000200000000080 RDI: 0000000000000006 [ 1169.262744][T24875] RBP: 00007fb126587090 R08: 0000000000000000 R09: 0000000000000000 [ 1169.262809][T24875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1169.262821][T24875] R13: 0000000000000000 R14: 00007fb128145fa0 R15: 00007ffe50c57828 [ 1169.262839][T24875] [ 1169.263194][ T29] audit: type=1326 audit(2000000093.860:55705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24884 comm="syz.9.19618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd124c8e969 code=0x7ffc0000 [ 1169.519295][ T29] audit: type=1326 audit(2000000094.080:55706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24884 comm="syz.9.19618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd124c8e969 code=0x7ffc0000 [ 1169.537966][T24890] tipc: Enabling of bearer rejected, already enabled [ 1169.546765][ T29] audit: type=1326 audit(2000000094.080:55707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24884 comm="syz.9.19618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd124c8e969 code=0x7ffc0000 [ 1169.577929][ T29] audit: type=1326 audit(2000000094.080:55708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24884 comm="syz.9.19618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd124c8e969 code=0x7ffc0000 [ 1169.628158][T24892] loop1: detected capacity change from 0 to 8192 [ 1170.046642][T24901] FAULT_INJECTION: forcing a failure. [ 1170.046642][T24901] name failslab, interval 1, probability 0, space 0, times 0 [ 1170.062964][T24901] CPU: 0 UID: 0 PID: 24901 Comm: syz.0.19620 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(voluntary) [ 1170.062986][T24901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1170.062997][T24901] Call Trace: [ 1170.063002][T24901] [ 1170.063009][T24901] __dump_stack+0x1d/0x30 [ 1170.063031][T24901] dump_stack_lvl+0xe8/0x140 [ 1170.063114][T24901] dump_stack+0x15/0x1b [ 1170.063132][T24901] should_fail_ex+0x265/0x280 [ 1170.063172][T24901] should_failslab+0x8c/0xb0 [ 1170.063268][T24901] __kmalloc_noprof+0xa5/0x3e0 [ 1170.063286][T24901] ? cond_policydb_dup+0xa3/0x4e0 [ 1170.063370][T24901] cond_policydb_dup+0xa3/0x4e0 [ 1170.063396][T24901] security_set_bools+0xa0/0x340 [ 1170.063482][T24901] sel_commit_bools_write+0x1ea/0x270 [ 1170.063530][T24901] vfs_writev+0x3eb/0x870 [ 1170.063563][T24901] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 1170.063593][T24901] ? mutex_lock+0xd/0x30 [ 1170.063686][T24901] do_writev+0xe7/0x210 [ 1170.063721][T24901] __x64_sys_writev+0x45/0x50 [ 1170.063751][T24901] x64_sys_call+0x2006/0x2fb0 [ 1170.063773][T24901] do_syscall_64+0xd0/0x1a0 [ 1170.063808][T24901] ? clear_bhb_loop+0x25/0x80 [ 1170.063829][T24901] ? clear_bhb_loop+0x25/0x80 [ 1170.063852][T24901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1170.063874][T24901] RIP: 0033:0x7fa32b2de969 [ 1170.063889][T24901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1170.063908][T24901] RSP: 002b:00007fa329926038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1170.064004][T24901] RAX: ffffffffffffffda RBX: 00007fa32b506080 RCX: 00007fa32b2de969 [ 1170.064014][T24901] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000006 [ 1170.064024][T24901] RBP: 00007fa329926090 R08: 0000000000000000 R09: 0000000000000000 [ 1170.064033][T24901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1170.064046][T24901] R13: 0000000000000000 R14: 00007fa32b506080 R15: 00007ffeb3f62958 [ 1170.064088][T24901] [ 1170.310809][T24892] loop1: p1 p2 p3 p4 [ 1170.315038][T24892] loop1: p1 start 1074790144 is beyond EOD, truncated [ 1170.404401][T24905] vlan2: entered allmulticast mode [ 1170.410330][T24905] bond0: entered allmulticast mode [ 1170.415460][T24905] bond_slave_0: entered allmulticast mode [ 1170.424325][T24905] bond_slave_1: entered allmulticast mode [ 1170.485258][T24892] loop1: p3 size 100663552 extends beyond EOD, truncated [ 1170.498257][T24892] loop1: p4 size 81920 extends beyond EOD, truncated [ 1170.563280][T24906] netlink: 132 bytes leftover after parsing attributes in process `syz.0.19624'. [ 1170.635913][T24911] binfmt_misc: register: failed to install interpreter file ./file2 [ 1171.251824][T24928] loop9: detected capacity change from 0 to 512 [ 1171.291187][T24928] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1171.305827][T24928] EXT4-fs error (device loop9): ext4_orphan_get:1417: comm syz.9.19631: bad orphan inode 13 [ 1171.397705][T24928] ext4_test_bit(bit=12, block=18) = 1 [ 1171.403293][T24928] is_bad_inode(inode)=0 [ 1171.407568][T24928] NEXT_ORPHAN(inode)=2130706432 [ 1171.417311][T24928] max_ino=32 [ 1171.420682][T24928] i_nlink=1 [ 1171.457038][T24928] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1171.520717][T20807] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1171.624850][T24931] loop1: detected capacity change from 0 to 8192 [ 1171.754865][T24938] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 1171.754865][T24938] program syz.9.19633 not setting count and/or reply_len properly [ 1172.126637][T24955] SELinux: syz.7.19641 (24955) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 1173.004211][T24972] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24972 comm=syz.7.19647 [ 1173.081557][T24972] netlink: 36 bytes leftover after parsing attributes in process `syz.7.19647'. [ 1173.108490][T24984] tipc: Enabling of bearer rejected, already enabled [ 1173.133466][T24982] SELinux: ebitmap: truncated map [ 1173.151855][T24982] SELinux: failed to load policy [ 1173.236315][T24987] SELinux: syz.2.19653 (24987) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 1173.335791][T24997] FAULT_INJECTION: forcing a failure. [ 1173.335791][T24997] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1173.352651][T24997] CPU: 0 UID: 0 PID: 24997 Comm: syz.7.19658 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(voluntary) [ 1173.352681][T24997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1173.352701][T24997] Call Trace: [ 1173.352708][T24997] [ 1173.352716][T24997] __dump_stack+0x1d/0x30 [ 1173.352738][T24997] dump_stack_lvl+0xe8/0x140 [ 1173.352756][T24997] dump_stack+0x15/0x1b [ 1173.352769][T24997] should_fail_ex+0x265/0x280 [ 1173.352868][T24997] should_fail+0xb/0x20 [ 1173.352943][T24997] should_fail_usercopy+0x1a/0x20 [ 1173.353036][T24997] _copy_from_user+0x1c/0xb0 [ 1173.353055][T24997] __sys_sendto+0x19e/0x330 [ 1173.353090][T24997] __x64_sys_sendto+0x76/0x90 [ 1173.353133][T24997] x64_sys_call+0x2eb6/0x2fb0 [ 1173.353156][T24997] do_syscall_64+0xd0/0x1a0 [ 1173.353235][T24997] ? clear_bhb_loop+0x25/0x80 [ 1173.353294][T24997] ? clear_bhb_loop+0x25/0x80 [ 1173.353313][T24997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1173.353334][T24997] RIP: 0033:0x7fb127f1e969 [ 1173.353417][T24997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1173.353436][T24997] RSP: 002b:00007fb126587038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1173.353453][T24997] RAX: ffffffffffffffda RBX: 00007fb128145fa0 RCX: 00007fb127f1e969 [ 1173.353463][T24997] RDX: 000000000000ffe0 RSI: 0000200000000100 RDI: 0000000000000007 [ 1173.353555][T24997] RBP: 00007fb126587090 R08: 0000200000000140 R09: 000000000000001c [ 1173.353567][T24997] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000001 [ 1173.353581][T24997] R13: 0000000000000000 R14: 00007fb128145fa0 R15: 00007ffe50c57828 [ 1173.353600][T24997] [ 1173.675825][T24991] loop1: detected capacity change from 0 to 8192 [ 1173.716870][T25011] binfmt_misc: register: failed to install interpreter file ./file2 [ 1173.750210][T24991] loop1: p1 p2 p3 p4 [ 1173.762565][T24991] loop1: p1 start 1074790144 is beyond EOD, truncated [ 1173.825244][T24991] loop1: p3 size 100663552 extends beyond EOD, truncated [ 1173.874359][T24991] loop1: p4 size 81920 extends beyond EOD, truncated [ 1174.318725][T25022] loop1: detected capacity change from 0 to 512 [ 1174.350206][T25022] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.19666: iget: bad extended attribute block 1 [ 1174.469960][T25022] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.19666: couldn't read orphan inode 15 (err -117) [ 1174.484687][T25022] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1174.510022][T25032] SELinux: syz.2.19669 (25032) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 1174.583876][T25030] loop9: detected capacity change from 0 to 512 [ 1174.635650][T25030] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #15: comm syz.9.19667: iget: bad extended attribute block 1 [ 1174.700277][T21577] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1174.735827][T25030] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.19667: couldn't read orphan inode 15 (err -117) [ 1174.776996][T25042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1174.795603][T25030] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1174.811994][T25042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1174.830368][T25030] FAULT_INJECTION: forcing a failure. [ 1174.830368][T25030] name failslab, interval 1, probability 0, space 0, times 0 [ 1174.846064][T25030] CPU: 0 UID: 0 PID: 25030 Comm: syz.9.19667 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(voluntary) [ 1174.846089][T25030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1174.846143][T25030] Call Trace: [ 1174.846151][T25030] [ 1174.846159][T25030] __dump_stack+0x1d/0x30 [ 1174.846184][T25030] dump_stack_lvl+0xe8/0x140 [ 1174.846205][T25030] dump_stack+0x15/0x1b [ 1174.846246][T25030] should_fail_ex+0x265/0x280 [ 1174.846282][T25030] ? ext4_getfsmap_datadev+0x4f6/0x1340 [ 1174.846311][T25030] should_failslab+0x8c/0xb0 [ 1174.846336][T25030] __kmalloc_cache_noprof+0x4c/0x320 [ 1174.846414][T25030] ? ext4_bg_num_gdb+0xa6/0x170 [ 1174.846441][T25030] ext4_getfsmap_datadev+0x4f6/0x1340 [ 1174.846479][T25030] ? __pfx_ext4_getfsmap_datadev+0x10/0x10 [ 1174.846519][T25030] ext4_getfsmap+0x800/0x830 [ 1174.846599][T25030] ? __pfx_ext4_getfsmap_datadev+0x10/0x10 [ 1174.846628][T25030] ? __pfx_ext4_getfsmap_format+0x10/0x10 [ 1174.846668][T25030] ? __pfx_ext4_getfsmap_datadev+0x10/0x10 [ 1174.846695][T25030] ? ext4_fsmap_to_internal+0xba/0xd0 [ 1174.846722][T25030] ext4_ioctl+0x1eb5/0x2060 [ 1174.846754][T25030] ? __pfx_ext4_ioctl+0x10/0x10 [ 1174.846846][T25030] __se_sys_ioctl+0xcb/0x140 [ 1174.846868][T25030] __x64_sys_ioctl+0x43/0x50 [ 1174.846890][T25030] x64_sys_call+0x19a8/0x2fb0 [ 1174.846953][T25030] do_syscall_64+0xd0/0x1a0 [ 1174.846971][T25030] ? clear_bhb_loop+0x25/0x80 [ 1174.846989][T25030] ? clear_bhb_loop+0x25/0x80 [ 1174.847016][T25030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1174.847064][T25030] RIP: 0033:0x7fd124c8e969 [ 1174.847076][T25030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1174.847090][T25030] RSP: 002b:00007fd1232f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1174.847106][T25030] RAX: ffffffffffffffda RBX: 00007fd124eb5fa0 RCX: 00007fd124c8e969 [ 1174.847167][T25030] RDX: 0000200000000d40 RSI: 00000000c0c0583b RDI: 0000000000000009 [ 1174.847177][T25030] RBP: 00007fd1232f7090 R08: 0000000000000000 R09: 0000000000000000 [ 1174.847187][T25030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1174.847197][T25030] R13: 0000000000000000 R14: 00007fd124eb5fa0 R15: 00007fff5b9e2318 [ 1174.847214][T25030] [ 1174.888577][T25047] binfmt_misc: register: failed to install interpreter file ./file2 [ 1175.055870][T25048] SELinux: policydb magic number 0x6572666b does not match expected magic number 0xf97cff8c [ 1175.055894][T25048] SELinux: failed to load policy [ 1175.472549][T25065] SELinux: syz.2.19682 (25065) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 1175.497521][T20807] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1175.586303][ T29] kauditd_printk_skb: 127 callbacks suppressed [ 1175.586324][ T29] audit: type=1326 audit(2000000100.180:55836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25061 comm="syz.7.19680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb127f1e969 code=0x7ffc0000 [ 1175.644126][ T7297] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 1175.656636][ T7297] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 1175.664036][ T7297] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 1175.679881][T25076] netlink: 256 bytes leftover after parsing attributes in process `syz.7.19680'. [ 1175.727003][T25079] tipc: Enabling of bearer rejected, already enabled [ 1175.749603][ T7297] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 1175.757071][ T7297] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 1175.768361][ T7297] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 1175.777011][ T7297] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 1175.784508][ T7297] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 1175.795707][ T7297] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 1175.804156][ T7297] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 1175.811549][ T7297] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 1175.823076][ T7297] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 1175.831519][ T7297] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 1175.840746][ T29] audit: type=1326 audit(2000000100.240:55837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25061 comm="syz.7.19680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7fb127f1e969 code=0x7ffc0000 [ 1175.867838][ T29] audit: type=1326 audit(2000000100.240:55838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25061 comm="syz.7.19680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb127f1e969 code=0x7ffc0000 [ 1175.895123][ T29] audit: type=1326 audit(2000000100.240:55839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25061 comm="syz.7.19680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb127f1e969 code=0x7ffc0000 [ 1175.922430][ T29] audit: type=1326 audit(2000000100.240:55840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25061 comm="syz.7.19680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb127f1e969 code=0x7ffc0000 [ 1175.946193][ T29] audit: type=1326 audit(2000000100.240:55841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25061 comm="syz.7.19680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb127f1e969 code=0x7ffc0000 [ 1175.969254][T25076] lo speed is unknown, defaulting to 1000 [ 1175.974826][ T29] audit: type=1326 audit(2000000100.240:55842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25061 comm="syz.7.19680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb127f1e969 code=0x7ffc0000 [ 1176.003179][ T7297] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 1176.003191][ T29] audit: type=1326 audit(2000000100.240:55843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25061 comm="syz.7.19680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb127f1e969 code=0x7ffc0000 [ 1176.016554][ T7297] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 1176.038284][ T29] audit: type=1326 audit(2000000100.240:55844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25061 comm="syz.7.19680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb127f1e969 code=0x7ffc0000 [ 1176.047186][ T7297] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 1176.069276][ T29] audit: type=1326 audit(2000000100.240:55845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25061 comm="syz.7.19680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb127f1e969 code=0x7ffc0000 [ 1176.078128][ T7297] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 1176.109699][ T7297] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 1176.117095][ T7297] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 1176.124607][ T7297] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 1176.137343][ T7297] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 1176.145606][ T7297] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 1176.152989][T25084] FAULT_INJECTION: forcing a failure. [ 1176.152989][T25084] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1176.153011][ T7297] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 1176.168143][T25084] CPU: 0 UID: 0 PID: 25084 Comm: syz.9.19684 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(voluntary) [ 1176.168210][T25084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1176.168225][T25084] Call Trace: [ 1176.168313][T25084] [ 1176.168323][T25084] __dump_stack+0x1d/0x30 [ 1176.168351][T25084] dump_stack_lvl+0xe8/0x140 [ 1176.168376][T25084] dump_stack+0x15/0x1b [ 1176.168398][T25084] should_fail_ex+0x265/0x280 [ 1176.168516][T25084] should_fail+0xb/0x20 [ 1176.168553][T25084] should_fail_usercopy+0x1a/0x20 [ 1176.168577][T25084] _copy_from_iter+0xcf/0xdd0 [ 1176.168603][T25084] ? __build_skb_around+0x1a0/0x200 [ 1176.168651][T25084] ? __alloc_skb+0x223/0x320 [ 1176.168705][T25084] pfkey_sendmsg+0x126/0x900 [ 1176.168735][T25084] ? avc_has_perm+0xd3/0x150 [ 1176.168800][T25084] ? selinux_socket_sendmsg+0x175/0x1b0 [ 1176.168836][T25084] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1176.168875][T25084] __sock_sendmsg+0x142/0x180 [ 1176.168949][T25084] ____sys_sendmsg+0x31e/0x4e0 [ 1176.168977][T25084] ___sys_sendmsg+0x17b/0x1d0 [ 1176.169019][T25084] __x64_sys_sendmsg+0xd4/0x160 [ 1176.169082][T25084] x64_sys_call+0x2999/0x2fb0 [ 1176.169172][T25084] do_syscall_64+0xd0/0x1a0 [ 1176.169202][T25084] ? clear_bhb_loop+0x25/0x80 [ 1176.169257][T25084] ? clear_bhb_loop+0x25/0x80 [ 1176.169285][T25084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1176.169339][T25084] RIP: 0033:0x7fd124c8e969 [ 1176.169370][T25084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1176.169393][T25084] RSP: 002b:00007fd1232f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1176.169476][T25084] RAX: ffffffffffffffda RBX: 00007fd124eb5fa0 RCX: 00007fd124c8e969 [ 1176.169529][T25084] RDX: 0000000000000000 RSI: 0000200000003780 RDI: 0000000000000003 [ 1176.169543][T25084] RBP: 00007fd1232f7090 R08: 0000000000000000 R09: 0000000000000000 [ 1176.169556][T25084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1176.169569][T25084] R13: 0000000000000000 R14: 00007fd124eb5fa0 R15: 00007fff5b9e2318 [ 1176.169595][T25084] [ 1176.170897][T25085] netlink: 300 bytes leftover after parsing attributes in process `syz.2.19689'. [ 1176.179348][ T7297] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 1176.441204][ T7297] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 1176.448601][ T7297] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 1176.459753][ T7297] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 1176.467133][ T7297] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 1176.486917][ T7297] hid-generic 0000:0000:0000.007A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1176.532751][T25097] SELinux: syz.7.19695 (25097) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 1176.607825][T25105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19699'. [ 1176.695030][T25105] Process accounting resumed [ 1176.736081][T14393] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 1176.744074][T14393] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 1176.753348][T14393] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 1176.757478][T14393] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 1176.770122][T14393] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 1176.777518][T14393] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 1176.786763][T14393] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 1176.795557][T14393] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 1176.803013][T14393] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 1176.812663][T14393] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 1176.817380][T25119] netlink: 256 bytes leftover after parsing attributes in process `syz.0.19704'. [ 1176.821208][T14393] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 1176.821232][T14393] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 1176.821255][T14393] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 1176.829123][T14393] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 1176.865772][T14393] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 1176.865797][T14393] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 1176.865822][T14393] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 1176.865860][T14393] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 1176.865952][T14393] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 1176.865975][T14393] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 1176.866015][T14393] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 1176.866038][T14393] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 1176.866060][T14393] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 1176.866114][T14393] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 1176.866137][T14393] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 1176.866161][T14393] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 1176.866185][T14393] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 1176.866253][T14393] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 1176.871774][T14393] hid-generic 0000:0000:0000.007B: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1176.927087][T25115] lo speed is unknown, defaulting to 1000 [ 1176.938222][ T7297] hid-generic 0000:0000:0000.007C: unknown main item tag 0x0 [ 1177.052733][ T7297] hid-generic 0000:0000:0000.007C: unknown main item tag 0x0 [ 1177.052756][ T7297] hid-generic 0000:0000:0000.007C: unknown main item tag 0x0 [ 1177.082446][ T7297] hid-generic 0000:0000:0000.007C: unknown main item tag 0x0 [ 1177.093292][ T7297] hid-generic 0000:0000:0000.007C: unknown main item tag 0x0 [ 1177.100760][ T7297] hid-generic 0000:0000:0000.007C: unknown main item tag 0x0 [ 1177.108172][ T7297] hid-generic 0000:0000:0000.007C: unknown main item tag 0x0 [ 1177.117369][ T7297] hid-generic 0000:0000:0000.007C: unknown main item tag 0x0 [ 1177.128354][ T7297] hid-generic 0000:0000:0000.007C: unknown main item tag 0x0 [ 1177.135775][ T7297] hid-generic 0000:0000:0000.007C: unknown main item tag 0x0 [ 1177.144907][ T7297] hid-generic 0000:0000:0000.007C: unknown main item tag 0x0 [ 1177.155936][ T7297] hid-generic 0000:0000:0000.007C: unknown main item tag 0x0 [ 1177.163413][ T7297] hid-generic 0000:0000:0000.007C: unknown main item tag 0x0 [ 1177.173143][ T7297] hid-generic 0000:0000:0000.007C: unknown main item tag 0x0 [ 1177.174220][T25124] netlink: 256 bytes leftover after parsing attributes in process `syz.1.19706'. [ 1177.180547][ T7297] hid-generic 0000:0000:0000.007C: unknown main item tag 0x0 [ 1177.180573][ T7297] hid-generic 0000:0000:0000.007C: unknown main item tag 0x0 [ 1177.209954][ T7297] hid-generic 0000:0000:0000.007C: unknown main item tag 0x0 [ 1177.217423][ T7297] hid-generic 0000:0000:0000.007C: unknown main item tag 0x0 [ 1177.228023][ T7297] hid-generic 0000:0000:0000.007C: unknown main item tag 0x0 [ 1177.237547][ T7297] hid-generic 0000:0000:0000.007C: unknown main item tag 0x0 [ 1177.244983][ T7297] hid-generic 0000:0000:0000.007C: unknown main item tag 0x0 [ 1177.255785][ T7297] hid-generic 0000:0000:0000.007C: unknown main item tag 0x0 [ 1177.264916][ T7297] hid-generic 0000:0000:0000.007C: unknown main item tag 0x0 [ 1177.272317][ T7297] hid-generic 0000:0000:0000.007C: unknown main item tag 0x0 [ 1177.283175][ T7297] hid-generic 0000:0000:0000.007C: unknown main item tag 0x0 [ 1177.292406][ T7297] hid-generic 0000:0000:0000.007C: unknown main item tag 0x0 [ 1177.299838][ T7297] hid-generic 0000:0000:0000.007C: unknown main item tag 0x0 [ 1177.307210][ T7297] hid-generic 0000:0000:0000.007C: unknown main item tag 0x0 [ 1177.321269][T25130] netlink: 44 bytes leftover after parsing attributes in process `syz.9.19708'. [ 1177.331340][ T7297] hid-generic 0000:0000:0000.007C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1177.346314][T25124] lo speed is unknown, defaulting to 1000 [ 1177.449810][T25144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19714'. [ 1177.482424][T25144] bond1: entered promiscuous mode [ 1177.487560][T25144] bond1: entered allmulticast mode [ 1177.515906][T25144] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1177.521705][T25148] loop1: detected capacity change from 0 to 8192 [ 1177.563176][T25154] 9pnet_fd: Insufficient options for proto=fd [ 1177.580296][T25148] loop1: p1 p2 p3 p4 [ 1177.591416][T25148] loop1: p1 start 1074790144 is beyond EOD, truncated [ 1177.610254][T25148] loop1: p3 size 100663552 extends beyond EOD, truncated [ 1177.636627][T25148] loop1: p4 size 81920 extends beyond EOD, truncated [ 1177.784792][T14393] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 1177.793644][T14393] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 1177.795981][T25168] tipc: Enabling of bearer rejected, already enabled [ 1177.803503][T14393] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 1177.838963][T14393] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 1177.846421][T14393] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 1177.855052][T14393] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 1177.864738][T14393] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 1177.872186][T14393] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 1177.880813][T14393] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 1177.888389][T14393] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 1177.898028][T14393] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 1177.905458][T14393] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 1177.914078][T14393] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 1177.924485][T25165] netlink: 256 bytes leftover after parsing attributes in process `syz.2.19722'. [ 1177.934864][T14393] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 1177.934891][T14393] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 1177.934915][T14393] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 1177.935054][T14393] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 1177.935078][T14393] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 1177.935102][T14393] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 1177.935180][T14393] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 1177.935205][T14393] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 1177.935236][T14393] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 1177.935276][T14393] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 1177.935298][T14393] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 1177.935322][T14393] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 1177.935426][T14393] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 1177.935503][T14393] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 1177.935522][T14393] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 1177.936033][T14393] hid-generic 0000:0000:0000.007D: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1178.111882][T25174] loop1: detected capacity change from 0 to 512 [ 1178.166692][ T3469] hid-generic 0000:0000:0000.007E: unknown main item tag 0x0 [ 1178.174662][ T3469] hid-generic 0000:0000:0000.007E: unknown main item tag 0x0 [ 1178.186679][ T3469] hid-generic 0000:0000:0000.007E: unknown main item tag 0x0 [ 1178.203503][T25174] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1178.205489][T25183] netlink: 256 bytes leftover after parsing attributes in process `syz.0.19728'. [ 1178.214244][T25174] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.19726: bad orphan inode 13 [ 1178.214356][T25174] ext4_test_bit(bit=12, block=18) = 1 [ 1178.214397][T25174] is_bad_inode(inode)=0 [ 1178.214404][T25174] NEXT_ORPHAN(inode)=2130706432 [ 1178.214412][T25174] max_ino=32 [ 1178.214419][T25174] i_nlink=1 [ 1178.214937][T25174] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1178.243317][T25165] lo speed is unknown, defaulting to 1000 [ 1178.287601][T21577] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1178.308429][ T3469] hid-generic 0000:0000:0000.007E: unknown main item tag 0x0 [ 1178.315878][ T3469] hid-generic 0000:0000:0000.007E: unknown main item tag 0x0 [ 1178.323347][ T3469] hid-generic 0000:0000:0000.007E: unknown main item tag 0x0 [ 1178.335845][ T3469] hid-generic 0000:0000:0000.007E: unknown main item tag 0x0 [ 1178.343296][ T3469] hid-generic 0000:0000:0000.007E: unknown main item tag 0x0 [ 1178.350722][ T3469] hid-generic 0000:0000:0000.007E: unknown main item tag 0x0 [ 1178.358188][ T3469] hid-generic 0000:0000:0000.007E: unknown main item tag 0x0 [ 1178.365665][ T3469] hid-generic 0000:0000:0000.007E: unknown main item tag 0x0 [ 1178.378456][ T3469] hid-generic 0000:0000:0000.007E: unknown main item tag 0x0 [ 1178.385948][ T3469] hid-generic 0000:0000:0000.007E: unknown main item tag 0x0 [ 1178.408851][ T3469] hid-generic 0000:0000:0000.007E: unknown main item tag 0x0 [ 1178.416256][ T3469] hid-generic 0000:0000:0000.007E: unknown main item tag 0x0 [ 1178.423692][ T3469] hid-generic 0000:0000:0000.007E: unknown main item tag 0x0 [ 1178.436024][ T3469] hid-generic 0000:0000:0000.007E: unknown main item tag 0x0 [ 1178.443491][ T3469] hid-generic 0000:0000:0000.007E: unknown main item tag 0x0 [ 1178.450901][ T3469] hid-generic 0000:0000:0000.007E: unknown main item tag 0x0 [ 1178.452803][T25188] loop7: detected capacity change from 0 to 8192 [ 1178.458308][ T3469] hid-generic 0000:0000:0000.007E: unknown main item tag 0x0 [ 1178.477874][ T3469] hid-generic 0000:0000:0000.007E: unknown main item tag 0x0 [ 1178.485313][ T3469] hid-generic 0000:0000:0000.007E: unknown main item tag 0x0 [ 1178.495525][ T3469] hid-generic 0000:0000:0000.007E: unknown main item tag 0x0 [ 1178.505149][ T3469] hid-generic 0000:0000:0000.007E: unknown main item tag 0x0 [ 1178.512842][ T3469] hid-generic 0000:0000:0000.007E: unknown main item tag 0x0 [ 1178.523127][ T3469] hid-generic 0000:0000:0000.007E: unknown main item tag 0x0 [ 1178.527231][T25183] lo speed is unknown, defaulting to 1000 [ 1178.530518][ T3469] hid-generic 0000:0000:0000.007E: unknown main item tag 0x0 [ 1178.530546][ T3469] hid-generic 0000:0000:0000.007E: unknown main item tag 0x0 [ 1178.565936][ T3469] hid-generic 0000:0000:0000.007E: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1178.581900][T25188] loop7: p1 p2 p3 p4 [ 1178.586445][T25188] loop7: p1 start 1074790144 is beyond EOD, truncated [ 1178.593928][T25188] loop7: p3 size 100663552 extends beyond EOD, truncated [ 1178.595337][T25195] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25195 comm=syz.1.19734 [ 1178.602811][T25188] loop7: p4 size 81920 extends beyond EOD, truncated [ 1178.921413][T25220] veth1_to_team: entered promiscuous mode [ 1178.928128][T25218] veth1_to_team: left promiscuous mode [ 1178.935179][T25219] loop1: detected capacity change from 0 to 8192 [ 1179.332953][T25229] loop9: detected capacity change from 0 to 8192 [ 1179.932057][T25219] loop1: p1 p2 p3 p4 [ 1179.936309][T25219] loop1: p1 start 1074790144 is beyond EOD, truncated [ 1179.955975][T25219] loop1: p3 size 100663552 extends beyond EOD, truncated [ 1179.989137][T25242] netlink: 100 bytes leftover after parsing attributes in process `syz.2.19750'. [ 1180.042451][T25219] loop1: p4 size 81920 extends beyond EOD, truncated [ 1180.054881][T25229] loop9: p1 p2 p3 p4 [ 1180.060990][T25229] loop9: p1 start 1074790144 is beyond EOD, truncated [ 1180.087299][T25229] loop9: p3 size 100663552 extends beyond EOD, truncated [ 1180.106684][T25229] loop9: p4 size 81920 extends beyond EOD, truncated [ 1180.619695][ T29] kauditd_printk_skb: 799 callbacks suppressed [ 1180.619706][ T29] audit: type=1326 audit(2000000105.220:56645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25255 comm="syz.1.19757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb4906e969 code=0x7ffc0000 [ 1180.654690][ T29] audit: type=1326 audit(2000000105.220:56646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25255 comm="syz.1.19757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb4906e969 code=0x7ffc0000 [ 1180.716562][ T29] audit: type=1326 audit(2000000105.280:56647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25255 comm="syz.1.19757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb4906e969 code=0x7ffc0000 [ 1180.716596][ T29] audit: type=1326 audit(2000000105.280:56648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25255 comm="syz.1.19757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb4906e969 code=0x7ffc0000 [ 1180.716624][ T29] audit: type=1326 audit(2000000105.280:56649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25255 comm="syz.1.19757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb4906e969 code=0x7ffc0000 [ 1180.716691][ T29] audit: type=1326 audit(2000000105.280:56650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25255 comm="syz.1.19757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb4906e969 code=0x7ffc0000 [ 1180.716768][ T29] audit: type=1326 audit(2000000105.280:56651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25255 comm="syz.1.19757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb4906e969 code=0x7ffc0000 [ 1180.716847][ T29] audit: type=1326 audit(2000000105.280:56652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25255 comm="syz.1.19757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb4906e969 code=0x7ffc0000 [ 1180.716867][ T29] audit: type=1326 audit(2000000105.280:56653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25255 comm="syz.1.19757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb4906e969 code=0x7ffc0000 [ 1180.716990][ T29] audit: type=1326 audit(2000000105.290:56654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25255 comm="syz.1.19757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb4906e969 code=0x7ffc0000 [ 1180.830702][ T3469] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 1181.000120][T25265] netlink: 256 bytes leftover after parsing attributes in process `syz.1.19761'. [ 1181.011572][ T3469] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 1181.022439][ T3469] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 1181.039910][ T3469] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 1181.047330][ T3469] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 1181.054778][ T3469] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 1181.067099][ T3469] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 1181.075181][ T3469] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 1181.082958][ T3469] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 1181.095439][ T3469] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 1181.102919][ T3469] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 1181.110350][ T3469] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 1181.117847][ T3469] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 1181.130891][ T3469] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 1181.138311][ T3469] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 1181.145750][ T3469] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 1181.156416][ T3469] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 1181.165743][ T3469] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 1181.172899][T25253] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25253 comm=syz.0.19756 [ 1181.173215][ T3469] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 1181.198020][ T3469] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 1181.204789][T25265] lo speed is unknown, defaulting to 1000 [ 1181.205412][ T3469] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 1181.218601][ T3469] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 1181.231466][ T3469] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 1181.239033][ T3469] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 1181.246412][ T3469] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 1181.255978][ T3469] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 1181.266054][ T3469] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 1181.273608][ T3469] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 1181.294421][ T3469] hid-generic 0000:0000:0000.007F: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1181.314703][T25253] netlink: 36 bytes leftover after parsing attributes in process `syz.0.19756'. [ 1181.398160][T25280] netlink: 44 bytes leftover after parsing attributes in process `syz.2.19765'. [ 1181.541670][T25297] tipc: Enabling of bearer rejected, already enabled [ 1181.585595][T25289] loop7: detected capacity change from 0 to 8192 [ 1181.662414][T25289] loop7: p1 p2 p3 p4 [ 1181.666625][T25289] loop7: p1 start 1074790144 is beyond EOD, truncated [ 1181.682099][T25289] loop7: p3 size 100663552 extends beyond EOD, truncated [ 1181.689795][T25289] loop7: p4 size 81920 extends beyond EOD, truncated [ 1181.707449][T25312] binfmt_misc: register: failed to install interpreter file ./file2 [ 1181.747248][T25314] netlink: 44 bytes leftover after parsing attributes in process `syz.0.19779'. [ 1181.831374][T25328] tipc: Enabling of bearer rejected, already enabled [ 1181.843829][T25330] tipc: Enabling of bearer rejected, already enabled [ 1182.044933][T25345] netlink: 44 bytes leftover after parsing attributes in process `syz.2.19793'. [ 1182.109217][T25354] loop7: detected capacity change from 0 to 512 [ 1182.127693][T25348] loop1: detected capacity change from 0 to 8192 [ 1182.134315][T25356] tipc: Enabling of bearer rejected, already enabled [ 1182.151252][T25354] EXT4-fs (loop7): 1 orphan inode deleted [ 1182.157360][T25354] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1182.177792][T16498] EXT4-fs error (device loop7): ext4_release_dquot:6971: comm kworker/u8:54: Failed to release dquot type 1 [ 1182.192198][T25354] ext4 filesystem being mounted at /472/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1182.199774][T25348] loop1: p1 p2 p3 p4 [ 1182.207942][T25348] loop1: p1 start 1074790144 is beyond EOD, truncated [ 1182.217557][T25363] binfmt_misc: register: failed to install interpreter file ./file2 [ 1182.229244][T25348] loop1: p3 size 100663552 extends beyond EOD, truncated [ 1182.237021][T25348] loop1: p4 size 81920 extends beyond EOD, truncated [ 1182.246795][T19042] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1182.305271][T25371] tmpfs: Bad value for 'mpol' [ 1182.317409][T25371] loop1: detected capacity change from 0 to 512 [ 1182.333863][T25371] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1182.353258][T25371] ext4 filesystem being mounted at /267/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1182.368573][T25371] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1182.417419][T25383] netlink: 44 bytes leftover after parsing attributes in process `syz.9.19806'. [ 1182.510361][T25393] tipc: Enabling of bearer rejected, already enabled [ 1182.561608][ T3469] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 1182.569131][ T3469] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 1182.576633][ T3469] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 1182.592096][T25396] netlink: 256 bytes leftover after parsing attributes in process `syz.7.19810'. [ 1182.617685][ T3469] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 1182.626434][ T3469] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 1182.633953][ T3469] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 1182.645367][ T3469] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 1182.654020][ T3469] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 1182.661488][ T3469] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 1182.672990][ T3469] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 1182.681692][ T3469] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 1182.689146][ T3469] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 1182.696539][ T3469] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 1182.706153][T25396] lo speed is unknown, defaulting to 1000 [ 1182.722801][T25404] binfmt_misc: register: failed to install interpreter file ./file2 [ 1182.756226][ T3469] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 1182.767494][ T3469] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 1182.776056][ T3469] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 1182.783532][ T3469] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 1182.794672][ T3469] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 1182.803317][ T3469] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 1182.810793][ T3469] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 1182.818295][ T3469] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 1182.830898][ T3469] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 1182.838307][ T3469] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 1182.845804][ T3469] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 1182.856011][ T3469] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 1182.865565][ T3469] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 1182.872969][ T3469] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 1182.883440][ T3469] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 1182.909464][ T3469] hid-generic 0000:0000:0000.0080: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1182.932813][T25416] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1421 [ 1182.954170][T25421] netlink: 44 bytes leftover after parsing attributes in process `syz.7.19820'. [ 1182.982507][T25423] tipc: Enabling of bearer rejected, already enabled [ 1182.984529][T25424] netlink: 100 bytes leftover after parsing attributes in process `syz.2.19819'. [ 1183.036938][T25431] loop7: detected capacity change from 0 to 512 [ 1183.061855][T25431] EXT4-fs (loop7): 1 orphan inode deleted [ 1183.067972][T25431] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1183.085829][T25431] ext4 filesystem being mounted at /478/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1183.096515][T16496] EXT4-fs error (device loop7): ext4_release_dquot:6971: comm kworker/u8:52: Failed to release dquot type 1 [ 1183.123775][T19042] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1183.192139][ T3469] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 1183.199726][ T3469] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 1183.207123][ T3469] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 1183.222219][T25447] netlink: 256 bytes leftover after parsing attributes in process `syz.0.19831'. [ 1183.232286][ T3469] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 1183.243004][ T3469] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 1183.248556][T25438] loop9: detected capacity change from 0 to 8192 [ 1183.252248][ T3469] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 1183.264777][ T3469] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 1183.275772][ T3469] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 1183.284686][ T3469] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 1183.292234][ T3469] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 1183.303111][ T3469] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 1183.312098][ T3469] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 1183.319574][ T3469] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 1183.327624][ T3469] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 1183.332461][T25447] lo speed is unknown, defaulting to 1000 [ 1183.338927][ T3469] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 1183.348155][ T3469] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 1183.357256][ T3469] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 1183.368158][ T3469] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 1183.375568][ T3469] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 1183.384695][ T3469] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 1183.395744][ T3469] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 1183.403249][ T3469] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 1183.412280][ T3469] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 1183.423198][ T3469] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 1183.430623][ T3469] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 1183.437998][ T3469] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 1183.447085][ T3469] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 1183.458021][ T3469] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 1183.468471][ T3469] hid-generic 0000:0000:0000.0081: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1183.471715][T25438] loop9: p1 p2 p3 p4 [ 1183.487271][T25438] loop9: p1 start 1074790144 is beyond EOD, truncated [ 1183.497077][T25438] loop9: p3 size 100663552 extends beyond EOD, truncated [ 1183.506255][T25438] loop9: p4 size 81920 extends beyond EOD, truncated [ 1183.575989][T25459] tipc: Enabling of bearer rejected, already enabled [ 1183.597377][ T3469] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0 [ 1183.604860][ T3469] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0 [ 1183.612316][ T3469] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0 [ 1183.627608][T25462] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1421 [ 1183.638500][ T3469] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0 [ 1183.645973][ T3469] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0 [ 1183.657855][T25468] loop9: detected capacity change from 0 to 512 [ 1183.665029][ T3469] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0 [ 1183.672442][ T3469] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0 [ 1183.678056][T25468] EXT4-fs (loop9): 1 orphan inode deleted [ 1183.684757][ T3469] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0 [ 1183.694511][T18533] EXT4-fs error (device loop9): ext4_release_dquot:6971: comm kworker/u8:69: Failed to release dquot type 1 [ 1183.696059][ T3469] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0 [ 1183.708056][T25468] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1183.719192][ T3469] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0 [ 1183.736537][ T3469] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0 [ 1183.737410][T25468] ext4 filesystem being mounted at /281/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1183.749582][ T3469] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0 [ 1183.764332][ T3469] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0 [ 1183.795480][T20807] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1183.829893][T25464] lo speed is unknown, defaulting to 1000 [ 1183.893490][ T3469] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0 [ 1183.896283][T25479] FAULT_INJECTION: forcing a failure. [ 1183.896283][T25479] name failslab, interval 1, probability 0, space 0, times 0 [ 1183.900945][ T3469] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0 [ 1183.900965][ T3469] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0 [ 1183.900987][ T3469] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0 [ 1183.914991][T25479] CPU: 0 UID: 0 PID: 25479 Comm: syz.7.19841 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(voluntary) [ 1183.915027][T25479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1183.915043][T25479] Call Trace: [ 1183.915089][T25479] [ 1183.915097][T25479] __dump_stack+0x1d/0x30 [ 1183.915122][T25479] dump_stack_lvl+0xe8/0x140 [ 1183.915164][T25479] dump_stack+0x15/0x1b [ 1183.915182][T25479] should_fail_ex+0x265/0x280 [ 1183.915295][T25479] should_failslab+0x8c/0xb0 [ 1183.915328][T25479] kmem_cache_alloc_noprof+0x50/0x310 [ 1183.915430][T25479] ? skb_clone+0x151/0x1f0 [ 1183.915454][T25479] skb_clone+0x151/0x1f0 [ 1183.915475][T25479] __netlink_deliver_tap+0x2c9/0x500 [ 1183.915515][T25479] netlink_unicast+0x64c/0x670 [ 1183.915549][T25479] netlink_sendmsg+0x58b/0x6b0 [ 1183.915611][T25479] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1183.915647][T25479] __sock_sendmsg+0x142/0x180 [ 1183.915675][T25479] ____sys_sendmsg+0x31e/0x4e0 [ 1183.915699][T25479] ___sys_sendmsg+0x17b/0x1d0 [ 1183.915867][T25479] __x64_sys_sendmsg+0xd4/0x160 [ 1183.915975][T25479] x64_sys_call+0x2999/0x2fb0 [ 1183.915998][T25479] do_syscall_64+0xd0/0x1a0 [ 1183.916022][T25479] ? clear_bhb_loop+0x25/0x80 [ 1183.916046][T25479] ? clear_bhb_loop+0x25/0x80 [ 1183.916069][T25479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1183.916133][T25479] RIP: 0033:0x7fb127f1e969 [ 1183.916178][T25479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1183.916198][T25479] RSP: 002b:00007fb126587038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1183.916219][T25479] RAX: ffffffffffffffda RBX: 00007fb128145fa0 RCX: 00007fb127f1e969 [ 1183.916233][T25479] RDX: 0000000000008000 RSI: 0000200000000780 RDI: 0000000000000005 [ 1183.916248][T25479] RBP: 00007fb126587090 R08: 0000000000000000 R09: 0000000000000000 [ 1183.916261][T25479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1183.916325][T25479] R13: 0000000000000000 R14: 00007fb128145fa0 R15: 00007ffe50c57828 [ 1183.916345][T25479] [ 1184.185846][ T3469] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0 [ 1184.197959][ T3469] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0 [ 1184.205419][ T3469] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0 [ 1184.212804][ T3469] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0 [ 1184.223157][T25495] tipc: Enabling of bearer rejected, already enabled [ 1184.232793][ T3469] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0 [ 1184.240193][ T3469] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0 [ 1184.247612][ T3469] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0 [ 1184.260190][ T3469] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0 [ 1184.267583][ T3469] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0 [ 1184.275011][ T3469] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0 [ 1184.285764][ T3469] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0 [ 1184.303646][ T3469] hid-generic 0000:0000:0000.0082: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1184.314502][T25499] loop7: detected capacity change from 0 to 512 [ 1184.332244][T25499] EXT4-fs (loop7): 1 orphan inode deleted [ 1184.346159][T25499] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1184.365531][T16498] EXT4-fs error (device loop7): ext4_release_dquot:6971: comm kworker/u8:54: Failed to release dquot type 1 [ 1184.387958][T25499] ext4 filesystem being mounted at /489/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1184.455281][T25508] 9pnet_fd: Insufficient options for proto=fd [ 1185.385844][T25535] loop1: detected capacity change from 0 to 1024 [ 1185.413584][T19042] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1185.450204][T25535] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1185.515270][T25535] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 1185.572115][T25544] netlink: 'syz.2.19863': attribute type 2 has an invalid length. [ 1185.662792][T21577] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1185.935478][T25554] loop9: detected capacity change from 0 to 512 [ 1185.953845][ T29] kauditd_printk_skb: 314 callbacks suppressed [ 1185.953861][ T29] audit: type=1326 audit(2000000110.550:56963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25555 comm="syz.7.19861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb127f1e969 code=0x7ffc0000 [ 1185.993907][T14393] hid-generic 0000:0000:0000.0083: unknown main item tag 0x0 [ 1186.001475][T14393] hid-generic 0000:0000:0000.0083: unknown main item tag 0x0 [ 1186.011085][ T29] audit: type=1326 audit(2000000110.590:56964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25555 comm="syz.7.19861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7fb127f1e969 code=0x7ffc0000 [ 1186.011112][ T29] audit: type=1326 audit(2000000110.590:56965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25555 comm="syz.7.19861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb127f1e969 code=0x7ffc0000 [ 1186.011139][ T29] audit: type=1326 audit(2000000110.590:56966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25555 comm="syz.7.19861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb127f1e969 code=0x7ffc0000 [ 1186.011194][ T29] audit: type=1326 audit(2000000110.590:56967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25555 comm="syz.7.19861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb127f1e969 code=0x7ffc0000 [ 1186.011216][ T29] audit: type=1326 audit(2000000110.590:56968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25555 comm="syz.7.19861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb127f1e969 code=0x7ffc0000 [ 1186.011236][ T29] audit: type=1326 audit(2000000110.590:56969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25555 comm="syz.7.19861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb127f1e969 code=0x7ffc0000 [ 1186.036517][T14393] hid-generic 0000:0000:0000.0083: unknown main item tag 0x0 [ 1186.036709][T25560] 9pnet_fd: Insufficient options for proto=fd [ 1186.038408][T25556] __nla_validate_parse: 6 callbacks suppressed [ 1186.038423][T25556] netlink: 256 bytes leftover after parsing attributes in process `syz.7.19861'. [ 1186.071735][T25554] EXT4-fs (loop9): 1 orphan inode deleted [ 1186.096759][ T29] audit: type=1326 audit(2000000110.590:56970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25555 comm="syz.7.19861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb127f1e969 code=0x7ffc0000 [ 1186.120962][T14393] hid-generic 0000:0000:0000.0083: unknown main item tag 0x0 [ 1186.145614][ T29] audit: type=1326 audit(2000000110.590:56971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25555 comm="syz.7.19861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb127f1e969 code=0x7ffc0000 [ 1186.167235][T14393] hid-generic 0000:0000:0000.0083: unknown main item tag 0x0 [ 1186.178626][ T29] audit: type=1326 audit(2000000110.590:56972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25555 comm="syz.7.19861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb127f1e969 code=0x7ffc0000 [ 1186.181948][T14393] hid-generic 0000:0000:0000.0083: unknown main item tag 0x0 [ 1186.284576][T25556] lo speed is unknown, defaulting to 1000 [ 1186.304739][T14393] hid-generic 0000:0000:0000.0083: unknown main item tag 0x0 [ 1186.304765][T14393] hid-generic 0000:0000:0000.0083: unknown main item tag 0x0 [ 1186.304784][T14393] hid-generic 0000:0000:0000.0083: unknown main item tag 0x0 [ 1186.304807][T14393] hid-generic 0000:0000:0000.0083: unknown main item tag 0x0 [ 1186.304829][T14393] hid-generic 0000:0000:0000.0083: unknown main item tag 0x0 [ 1186.304852][T14393] hid-generic 0000:0000:0000.0083: unknown main item tag 0x0 [ 1186.304917][T14393] hid-generic 0000:0000:0000.0083: unknown main item tag 0x0 [ 1186.311571][T25554] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1186.319484][T16498] EXT4-fs error (device loop9): ext4_release_dquot:6971: comm kworker/u8:54: Failed to release dquot type 1 [ 1186.328610][T25554] ext4 filesystem being mounted at /289/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1186.504190][T14393] hid-generic 0000:0000:0000.0083: unknown main item tag 0x0 [ 1186.515122][T14393] hid-generic 0000:0000:0000.0083: unknown main item tag 0x0 [ 1186.522543][T14393] hid-generic 0000:0000:0000.0083: unknown main item tag 0x0 [ 1186.529947][T14393] hid-generic 0000:0000:0000.0083: unknown main item tag 0x0 [ 1186.537408][T14393] hid-generic 0000:0000:0000.0083: unknown main item tag 0x0 [ 1186.548016][T14393] hid-generic 0000:0000:0000.0083: unknown main item tag 0x0 [ 1186.555484][T14393] hid-generic 0000:0000:0000.0083: unknown main item tag 0x0 [ 1186.562898][T14393] hid-generic 0000:0000:0000.0083: unknown main item tag 0x0 [ 1186.573801][T14393] hid-generic 0000:0000:0000.0083: unknown main item tag 0x0 [ 1186.581230][T14393] hid-generic 0000:0000:0000.0083: unknown main item tag 0x0 [ 1186.588620][T14393] hid-generic 0000:0000:0000.0083: unknown main item tag 0x0 [ 1186.596231][T14393] hid-generic 0000:0000:0000.0083: unknown main item tag 0x0 [ 1186.606942][T14393] hid-generic 0000:0000:0000.0083: unknown main item tag 0x0 [ 1186.614357][T14393] hid-generic 0000:0000:0000.0083: unknown main item tag 0x0 [ 1186.621773][T14393] hid-generic 0000:0000:0000.0083: unknown main item tag 0x0 [ 1186.676549][T14393] hid-generic 0000:0000:0000.0083: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1186.815574][T20807] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1186.875340][T25585] netlink: 44 bytes leftover after parsing attributes in process `syz.2.19880'. [ 1187.255460][T25599] tmpfs: Bad value for 'mpol' [ 1187.263740][T25599] netlink: 48 bytes leftover after parsing attributes in process `syz.0.19885'. [ 1187.412901][T25612] FAULT_INJECTION: forcing a failure. [ 1187.412901][T25612] name failslab, interval 1, probability 0, space 0, times 0 [ 1187.425673][T25612] CPU: 0 UID: 0 PID: 25612 Comm: syz.0.19885 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(voluntary) [ 1187.425765][T25612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1187.425780][T25612] Call Trace: [ 1187.425842][T25612] [ 1187.425850][T25612] __dump_stack+0x1d/0x30 [ 1187.425874][T25612] dump_stack_lvl+0xe8/0x140 [ 1187.425896][T25612] dump_stack+0x15/0x1b [ 1187.425914][T25612] should_fail_ex+0x265/0x280 [ 1187.425958][T25612] should_failslab+0x8c/0xb0 [ 1187.425997][T25612] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 1187.426020][T25612] ? htable_create+0x222/0x450 [ 1187.426058][T25612] kstrdup+0x3e/0xd0 [ 1187.426078][T25612] htable_create+0x222/0x450 [ 1187.426220][T25612] ? __rcu_read_unlock+0x4f/0x70 [ 1187.426245][T25612] hashlimit_mt_check_common+0x5db/0x6c0 [ 1187.426281][T25612] hashlimit_mt_check_v1+0x12d/0x160 [ 1187.426315][T25612] xt_check_match+0x2aa/0x4f0 [ 1187.426364][T25612] ? xt_find_target+0x1cd/0x200 [ 1187.426385][T25612] ? strnlen+0x28/0x50 [ 1187.426407][T25612] ? strcmp+0x22/0x50 [ 1187.426441][T25612] ? xt_find_match+0x1d1/0x210 [ 1187.426567][T25612] translate_table+0xb4b/0x1070 [ 1187.426622][T25612] do_ip6t_set_ctl+0x678/0x840 [ 1187.426650][T25612] ? kstrtoull+0x111/0x140 [ 1187.426690][T25612] ? __rcu_read_unlock+0x4f/0x70 [ 1187.426726][T25612] nf_setsockopt+0x196/0x1b0 [ 1187.426755][T25612] ipv6_setsockopt+0x11a/0x130 [ 1187.426787][T25612] rawv6_setsockopt+0x1d2/0x420 [ 1187.426805][T25612] sock_common_setsockopt+0x66/0x80 [ 1187.426844][T25612] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1187.426911][T25612] __sys_setsockopt+0x181/0x200 [ 1187.426948][T25612] __x64_sys_setsockopt+0x64/0x80 [ 1187.427037][T25612] x64_sys_call+0x2bd5/0x2fb0 [ 1187.427054][T25612] do_syscall_64+0xd0/0x1a0 [ 1187.427110][T25612] ? clear_bhb_loop+0x25/0x80 [ 1187.427129][T25612] ? clear_bhb_loop+0x25/0x80 [ 1187.427191][T25612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1187.427213][T25612] RIP: 0033:0x7fa32b2de969 [ 1187.427293][T25612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1187.427349][T25612] RSP: 002b:00007fa329905038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1187.427366][T25612] RAX: ffffffffffffffda RBX: 00007fa32b506160 RCX: 00007fa32b2de969 [ 1187.427376][T25612] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 000000000000000b [ 1187.427385][T25612] RBP: 00007fa329905090 R08: 0000000000000488 R09: 0000000000000000 [ 1187.427395][T25612] R10: 0000200000000b00 R11: 0000000000000246 R12: 0000000000000001 [ 1187.427451][T25612] R13: 0000000000000000 R14: 00007fa32b506160 R15: 00007ffeb3f62958 [ 1187.427473][T25612] [ 1187.842131][T25627] loop7: detected capacity change from 0 to 2048 [ 1187.875017][T25627] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1187.919744][T25627] EXT4-fs (loop7): resizing filesystem from 512 to 96 blocks [ 1187.927168][T25627] EXT4-fs warning (device loop7): ext4_resize_fs:2042: can't shrink FS - resize aborted [ 1187.955670][T25631] loop9: detected capacity change from 0 to 8192 [ 1187.981526][T19042] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1187.992902][T25631] loop9: p1 p2 p3 p4 [ 1187.997191][T25631] loop9: p1 start 1074790144 is beyond EOD, truncated [ 1188.004583][T25631] loop9: p3 size 100663552 extends beyond EOD, truncated [ 1188.012228][T25631] loop9: p4 size 81920 extends beyond EOD, truncated [ 1188.184831][T25654] FAULT_INJECTION: forcing a failure. [ 1188.184831][T25654] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1188.198332][T25654] CPU: 0 UID: 0 PID: 25654 Comm: syz.2.19902 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(voluntary) [ 1188.198426][T25654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1188.198442][T25654] Call Trace: [ 1188.198448][T25654] [ 1188.198455][T25654] __dump_stack+0x1d/0x30 [ 1188.198476][T25654] dump_stack_lvl+0xe8/0x140 [ 1188.198508][T25654] dump_stack+0x15/0x1b [ 1188.198529][T25654] should_fail_ex+0x265/0x280 [ 1188.198571][T25654] should_fail_alloc_page+0xf2/0x100 [ 1188.198684][T25654] __alloc_frozen_pages_noprof+0xff/0x360 [ 1188.198719][T25654] alloc_pages_mpol+0xb3/0x250 [ 1188.198814][T25654] vma_alloc_folio_noprof+0x1aa/0x300 [ 1188.198907][T25654] handle_mm_fault+0x1056/0x2ae0 [ 1188.198943][T25654] ? __rcu_read_lock+0x37/0x50 [ 1188.198979][T25654] __get_user_pages+0xde2/0x1d20 [ 1188.199141][T25654] __gup_longterm_locked+0x30f/0x1010 [ 1188.199190][T25654] ? ___pte_offset_map+0xc3/0x140 [ 1188.199276][T25654] gup_fast_fallback+0x1134/0x1500 [ 1188.199317][T25654] pin_user_pages_fast+0x5f/0x90 [ 1188.199403][T25654] io_pin_pages+0xb5/0x170 [ 1188.199431][T25654] io_sqe_buffer_register+0x184/0x1220 [ 1188.199470][T25654] ? __kvmalloc_node_noprof+0x37c/0x4d0 [ 1188.199511][T25654] ? io_sqe_buffers_register+0xc2/0x530 [ 1188.199587][T25654] io_sqe_buffers_register+0x2a5/0x530 [ 1188.199612][T25654] __se_sys_io_uring_register+0xa9f/0xeb0 [ 1188.199638][T25654] ? fput+0x8f/0xc0 [ 1188.199673][T25654] ? ksys_write+0x16e/0x1a0 [ 1188.199780][T25654] __x64_sys_io_uring_register+0x55/0x70 [ 1188.199805][T25654] x64_sys_call+0xc91/0x2fb0 [ 1188.199854][T25654] do_syscall_64+0xd0/0x1a0 [ 1188.199876][T25654] ? clear_bhb_loop+0x25/0x80 [ 1188.199973][T25654] ? clear_bhb_loop+0x25/0x80 [ 1188.199991][T25654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1188.200014][T25654] RIP: 0033:0x7fa0de4de969 [ 1188.200095][T25654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1188.200112][T25654] RSP: 002b:00007fa0dcb47038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 1188.200132][T25654] RAX: ffffffffffffffda RBX: 00007fa0de705fa0 RCX: 00007fa0de4de969 [ 1188.200145][T25654] RDX: 00002000000002c0 RSI: 0000000000000000 RDI: 0000000000000004 [ 1188.200213][T25654] RBP: 00007fa0dcb47090 R08: 0000000000000000 R09: 0000000000000000 [ 1188.200226][T25654] R10: 100000000000011a R11: 0000000000000246 R12: 0000000000000002 [ 1188.200239][T25654] R13: 0000000000000000 R14: 00007fa0de705fa0 R15: 00007ffc81778bd8 [ 1188.200279][T25654] [ 1188.669947][T25658] tipc: Enabling of bearer rejected, already enabled [ 1188.958395][ T3390] hid-generic 0000:0000:0000.0084: unknown main item tag 0x0 [ 1188.969730][ T3390] hid-generic 0000:0000:0000.0084: unknown main item tag 0x0 [ 1188.977128][ T3390] hid-generic 0000:0000:0000.0084: unknown main item tag 0x0 [ 1188.992879][T25671] netlink: 256 bytes leftover after parsing attributes in process `syz.0.19910'. [ 1189.011005][ T3390] hid-generic 0000:0000:0000.0084: unknown main item tag 0x0 [ 1189.018562][ T3390] hid-generic 0000:0000:0000.0084: unknown main item tag 0x0 [ 1189.026872][T25669] loop7: detected capacity change from 0 to 8192 [ 1189.036130][ T3390] hid-generic 0000:0000:0000.0084: unknown main item tag 0x0 [ 1189.043603][ T3390] hid-generic 0000:0000:0000.0084: unknown main item tag 0x0 [ 1189.053215][ T3390] hid-generic 0000:0000:0000.0084: unknown main item tag 0x0 [ 1189.061946][ T3390] hid-generic 0000:0000:0000.0084: unknown main item tag 0x0 [ 1189.069394][ T3390] hid-generic 0000:0000:0000.0084: unknown main item tag 0x0 [ 1189.076798][ T3390] hid-generic 0000:0000:0000.0084: unknown main item tag 0x0 [ 1189.081540][T25671] lo speed is unknown, defaulting to 1000 [ 1189.086756][ T3390] hid-generic 0000:0000:0000.0084: unknown main item tag 0x0 [ 1189.098587][ T3390] hid-generic 0000:0000:0000.0084: unknown main item tag 0x0 [ 1189.129271][T25669] loop7: p1 p2 p3 p4 [ 1189.133515][T25669] loop7: p1 start 1074790144 is beyond EOD, truncated [ 1189.159697][ T3390] hid-generic 0000:0000:0000.0084: unknown main item tag 0x0 [ 1189.167192][ T3390] hid-generic 0000:0000:0000.0084: unknown main item tag 0x0 [ 1189.175261][T25669] loop7: p3 size 100663552 extends beyond EOD, truncated [ 1189.176931][T25669] loop7: p4 size 81920 extends beyond EOD, [ 1189.185235][ T3390] hid-generic 0000:0000:0000.0084: unknown main item tag 0x0 [ 1189.185321][ T3390] hid-generic 0000:0000:0000.0084: unknown main item tag 0x0 [ 1189.185347][ T3390] hid-generic 0000:0000:0000.0084: unknown main item tag 0x0 [ 1189.185383][ T3390] hid-generic 0000:0000:0000.0084: unknown main item tag 0x0 [ 1189.185406][ T3390] hid-generic 0000:0000:0000.0084: unknown main item tag 0x0 [ 1189.185424][ T3390] hid-generic 0000:0000:0000.0084: unknown main item tag 0x0 [ 1189.185444][ T3390] hid-generic 0000:0000:0000.0084: unknown main item tag 0x0 [ 1189.185465][ T3390] hid-generic 0000:0000:0000.0084: unknown main item tag 0x0 [ 1189.185559][ T3390] hid-generic 0000:0000:0000.0084: unknown main item tag 0x0 [ 1189.185582][ T3390] hid-generic 0000:0000:0000.0084: unknown main item tag 0x0 [ 1189.185601][ T3390] hid-generic 0000:0000:0000.0084: unknown main item tag 0x0 [ 1189.185624][ T3390] hid-generic 0000:0000:0000.0084: unknown main item tag 0x0 [ 1189.185706][ T3390] hid-generic 0000:0000:0000.0084: unknown main item tag 0x0 [ 1189.221789][ T3390] hid-generic 0000:0000:0000.0084: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1189.320457][T25669] truncated [ 1189.414060][T25694] loop1: detected capacity change from 0 to 512 [ 1189.429956][T25692] can0: slcan on ttyS3. [ 1189.445002][T25692] FAULT_INJECTION: forcing a failure. [ 1189.445002][T25692] name failslab, interval 1, probability 0, space 0, times 0 [ 1189.459146][T25692] CPU: 0 UID: 0 PID: 25692 Comm: syz.2.19918 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(voluntary) [ 1189.459181][T25692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1189.459198][T25692] Call Trace: [ 1189.459270][T25692] [ 1189.459279][T25692] __dump_stack+0x1d/0x30 [ 1189.459304][T25692] dump_stack_lvl+0xe8/0x140 [ 1189.459361][T25692] dump_stack+0x15/0x1b [ 1189.459382][T25692] should_fail_ex+0x265/0x280 [ 1189.459421][T25692] should_failslab+0x8c/0xb0 [ 1189.459455][T25692] __kmalloc_noprof+0xa5/0x3e0 [ 1189.459551][T25692] ? unregister_netdevice_many_notify+0x4cf/0x16a0 [ 1189.459581][T25692] unregister_netdevice_many_notify+0x4cf/0x16a0 [ 1189.459616][T25692] unregister_netdevice_queue+0x1f5/0x220 [ 1189.459692][T25692] unregister_netdev+0xb3/0xe0 [ 1189.459710][T25692] unregister_candev+0x15/0x20 [ 1189.459802][T25692] slcan_close+0x46/0xe0 [ 1189.459833][T25692] ? __pfx_slcan_close+0x10/0x10 [ 1189.459855][T25692] tty_ldisc_close+0x71/0xa0 [ 1189.459926][T25692] tty_set_ldisc+0x1b9/0x380 [ 1189.459945][T25692] tiocsetd+0x51/0x60 [ 1189.460048][T25692] tty_ioctl+0xa7f/0xb80 [ 1189.460072][T25692] ? __pfx_tty_ioctl+0x10/0x10 [ 1189.460096][T25692] __se_sys_ioctl+0xcb/0x140 [ 1189.460171][T25692] __x64_sys_ioctl+0x43/0x50 [ 1189.460236][T25692] x64_sys_call+0x19a8/0x2fb0 [ 1189.460258][T25692] do_syscall_64+0xd0/0x1a0 [ 1189.460282][T25692] ? clear_bhb_loop+0x25/0x80 [ 1189.460304][T25692] ? clear_bhb_loop+0x25/0x80 [ 1189.460326][T25692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1189.460365][T25692] RIP: 0033:0x7fa0de4de969 [ 1189.460404][T25692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1189.460424][T25692] RSP: 002b:00007fa0dcb47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1189.460441][T25692] RAX: ffffffffffffffda RBX: 00007fa0de705fa0 RCX: 00007fa0de4de969 [ 1189.460455][T25692] RDX: 0000200000000100 RSI: 0000000000005423 RDI: 0000000000000003 [ 1189.460530][T25692] RBP: 00007fa0dcb47090 R08: 0000000000000000 R09: 0000000000000000 [ 1189.460541][T25692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1189.460552][T25692] R13: 0000000000000000 R14: 00007fa0de705fa0 R15: 00007ffc81778bd8 [ 1189.460567][T25692] [ 1189.768729][T25692] can0 (unregistered): slcan off ttyS3. [ 1189.785487][T25694] EXT4-fs (loop1): 1 orphan inode deleted [ 1189.791864][T25694] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1189.802052][T25699] can0: slcan on ttyS3. [ 1189.819224][T25703] 9pnet_fd: Insufficient options for proto=fd [ 1189.825386][T16498] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:54: Failed to release dquot type 1 [ 1189.834349][T25694] ext4 filesystem being mounted at /282/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1189.881860][T25688] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25688 comm=syz.0.19916 [ 1189.894581][T25699] can0 (unregistered): slcan off ttyS3. [ 1189.921379][T21577] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1189.948117][T25688] netlink: 36 bytes leftover after parsing attributes in process `syz.0.19916'. [ 1190.139088][T25727] 9pnet_fd: Insufficient options for proto=fd [ 1190.170629][T25731] loop7: detected capacity change from 0 to 128 [ 1190.178177][T25730] sd 0:0:1:0: device reset [ 1190.178927][T25731] FAULT_INJECTION: forcing a failure. [ 1190.178927][T25731] name failslab, interval 1, probability 0, space 0, times 0 [ 1190.200902][T25731] CPU: 1 UID: 0 PID: 25731 Comm: syz.7.19934 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(voluntary) [ 1190.200989][T25731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1190.201003][T25731] Call Trace: [ 1190.201009][T25731] [ 1190.201074][T25731] __dump_stack+0x1d/0x30 [ 1190.201093][T25731] dump_stack_lvl+0xe8/0x140 [ 1190.201114][T25731] dump_stack+0x15/0x1b [ 1190.201152][T25731] should_fail_ex+0x265/0x280 [ 1190.201194][T25731] should_failslab+0x8c/0xb0 [ 1190.201222][T25731] __kmalloc_noprof+0xa5/0x3e0 [ 1190.201309][T25731] ? copy_splice_read+0xc2/0x5f0 [ 1190.201398][T25731] copy_splice_read+0xc2/0x5f0 [ 1190.201426][T25731] ? __pfx_filemap_splice_read+0x10/0x10 [ 1190.201456][T25731] splice_direct_to_actor+0x290/0x680 [ 1190.201477][T25731] ? __pfx_direct_splice_actor+0x10/0x10 [ 1190.201566][T25731] do_splice_direct+0xda/0x150 [ 1190.201586][T25731] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1190.201614][T25731] do_sendfile+0x380/0x640 [ 1190.201697][T25731] __x64_sys_sendfile64+0x105/0x150 [ 1190.201788][T25731] x64_sys_call+0xb39/0x2fb0 [ 1190.201810][T25731] do_syscall_64+0xd0/0x1a0 [ 1190.201834][T25731] ? clear_bhb_loop+0x25/0x80 [ 1190.201854][T25731] ? clear_bhb_loop+0x25/0x80 [ 1190.201946][T25731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1190.201967][T25731] RIP: 0033:0x7fb127f1e969 [ 1190.201979][T25731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1190.201995][T25731] RSP: 002b:00007fb126587038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1190.202055][T25731] RAX: ffffffffffffffda RBX: 00007fb128145fa0 RCX: 00007fb127f1e969 [ 1190.202068][T25731] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 1190.202081][T25731] RBP: 00007fb126587090 R08: 0000000000000000 R09: 0000000000000000 [ 1190.202094][T25731] R10: 0000000800000009 R11: 0000000000000246 R12: 0000000000000001 [ 1190.202107][T25731] R13: 0000000000000000 R14: 00007fb128145fa0 R15: 00007ffe50c57828 [ 1190.202124][T25731] [ 1190.455029][T25739] loop1: detected capacity change from 0 to 512 [ 1190.476291][T25739] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1190.489275][T25739] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.19937: bad orphan inode 13 [ 1190.533872][T25739] ext4_test_bit(bit=12, block=18) = 1 [ 1190.539420][T25739] is_bad_inode(inode)=0 [ 1190.543735][T25739] NEXT_ORPHAN(inode)=2130706432 [ 1190.548706][T25739] max_ino=32 [ 1190.551917][T25739] i_nlink=1 [ 1190.583305][T25739] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1190.604691][T25756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1190.630483][T25756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1190.647736][T25756] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:20000 [ 1190.655321][T25758] loop7: detected capacity change from 0 to 512 [ 1190.669614][T21577] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1190.704169][T25758] EXT4-fs (loop7): 1 orphan inode deleted [ 1190.716752][T25758] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1190.733181][T25758] ext4 filesystem being mounted at /505/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1190.747666][T18533] EXT4-fs error (device loop7): ext4_release_dquot:6971: comm kworker/u8:69: Failed to release dquot type 1 [ 1190.780012][T19042] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1190.962421][ T29] kauditd_printk_skb: 225 callbacks suppressed [ 1190.962435][ T29] audit: type=1326 audit(2000000115.550:57195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25775 comm="syz.1.19952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ffb4906e969 code=0x7ffc0000 [ 1190.997983][ T29] audit: type=1326 audit(2000000115.600:57196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25775 comm="syz.1.19952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb4906e969 code=0x7ffc0000 [ 1191.025370][ T29] audit: type=1326 audit(2000000115.600:57197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25775 comm="syz.1.19952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb4906e969 code=0x7ffc0000 [ 1191.049180][ T29] audit: type=1326 audit(2000000115.600:57198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25775 comm="syz.1.19952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7ffb4906e969 code=0x7ffc0000 [ 1191.076592][ T29] audit: type=1326 audit(2000000115.600:57199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25775 comm="syz.1.19952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb4906e969 code=0x7ffc0000 [ 1191.103832][ T29] audit: type=1326 audit(2000000115.600:57200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25775 comm="syz.1.19952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb4906e969 code=0x7ffc0000 [ 1191.127584][ T29] audit: type=1326 audit(2000000115.600:57201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25775 comm="syz.1.19952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ffb4906e969 code=0x7ffc0000 [ 1191.154633][ T29] audit: type=1326 audit(2000000115.600:57202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25775 comm="syz.1.19952" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffb4906e969 code=0x0 [ 1191.252532][ T29] audit: type=1326 audit(2000000115.850:57203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25787 comm="syz.0.19956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa32b2de969 code=0x7ffc0000 [ 1191.279870][ T29] audit: type=1326 audit(2000000115.850:57204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25787 comm="syz.0.19956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa32b2de969 code=0x7ffc0000 [ 1191.322022][ T9360] hid-generic 0000:0000:0000.0085: unknown main item tag 0x0 [ 1191.329546][ T9360] hid-generic 0000:0000:0000.0085: unknown main item tag 0x0 [ 1191.336937][ T9360] hid-generic 0000:0000:0000.0085: unknown main item tag 0x0 [ 1191.351029][T25788] netlink: 256 bytes leftover after parsing attributes in process `syz.0.19956'. [ 1191.374630][T25790] netlink: 'syz.2.19955': attribute type 2 has an invalid length. [ 1191.383515][T25790] netlink: 'syz.2.19955': attribute type 1 has an invalid length. [ 1191.391354][T25790] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.19955'. [ 1191.410579][ T9360] hid-generic 0000:0000:0000.0085: unknown main item tag 0x0 [ 1191.418018][ T9360] hid-generic 0000:0000:0000.0085: unknown main item tag 0x0 [ 1191.425482][ T9360] hid-generic 0000:0000:0000.0085: unknown main item tag 0x0 [ 1191.436868][ T9360] hid-generic 0000:0000:0000.0085: unknown main item tag 0x0 [ 1191.445434][ T9360] hid-generic 0000:0000:0000.0085: unknown main item tag 0x0 [ 1191.452844][ T9360] hid-generic 0000:0000:0000.0085: unknown main item tag 0x0 [ 1191.464662][ T9360] hid-generic 0000:0000:0000.0085: unknown main item tag 0x0 [ 1191.473343][ T9360] hid-generic 0000:0000:0000.0085: unknown main item tag 0x0 [ 1191.480785][ T9360] hid-generic 0000:0000:0000.0085: unknown main item tag 0x0 [ 1191.488199][ T9360] hid-generic 0000:0000:0000.0085: unknown main item tag 0x0 [ 1191.501861][ T9360] hid-generic 0000:0000:0000.0085: unknown main item tag 0x0 [ 1191.509346][ T9360] hid-generic 0000:0000:0000.0085: unknown main item tag 0x0 [ 1191.516759][ T9360] hid-generic 0000:0000:0000.0085: unknown main item tag 0x0 [ 1191.527050][ T9360] hid-generic 0000:0000:0000.0085: unknown main item tag 0x0 [ 1191.536775][ T9360] hid-generic 0000:0000:0000.0085: unknown main item tag 0x0 [ 1191.544280][ T9360] hid-generic 0000:0000:0000.0085: unknown main item tag 0x0 [ 1191.554533][ T9360] hid-generic 0000:0000:0000.0085: unknown main item tag 0x0 [ 1191.564238][ T9360] hid-generic 0000:0000:0000.0085: unknown main item tag 0x0 [ 1191.571644][ T9360] hid-generic 0000:0000:0000.0085: unknown main item tag 0x0 [ 1191.582159][ T9360] hid-generic 0000:0000:0000.0085: unknown main item tag 0x0 [ 1191.591734][ T9360] hid-generic 0000:0000:0000.0085: unknown main item tag 0x0 [ 1191.599171][ T9360] hid-generic 0000:0000:0000.0085: unknown main item tag 0x0 [ 1191.606575][ T9360] hid-generic 0000:0000:0000.0085: unknown main item tag 0x0 [ 1191.616863][T25788] lo speed is unknown, defaulting to 1000 [ 1191.625035][ T9360] hid-generic 0000:0000:0000.0085: unknown main item tag 0x0 [ 1191.632438][ T9360] hid-generic 0000:0000:0000.0085: unknown main item tag 0x0 [ 1191.652388][ T9360] hid-generic 0000:0000:0000.0085: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1191.696879][T25795] loop9: detected capacity change from 0 to 512 [ 1191.772141][T25795] EXT4-fs (loop9): 1 orphan inode deleted [ 1191.783992][T25795] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1191.805276][T16498] EXT4-fs error (device loop9): ext4_release_dquot:6971: comm kworker/u8:54: Failed to release dquot type 1 [ 1191.896442][T25795] ext4 filesystem being mounted at /302/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1191.952389][T20807] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1192.065143][T25809] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25809 comm=syz.1.19962 [ 1192.098056][T25809] netlink: 36 bytes leftover after parsing attributes in process `syz.1.19962'. [ 1192.131824][ T1052] hid-generic 0000:0000:0000.0086: unknown main item tag 0x0 [ 1192.139337][ T1052] hid-generic 0000:0000:0000.0086: unknown main item tag 0x0 [ 1192.146796][ T1052] hid-generic 0000:0000:0000.0086: unknown main item tag 0x0 [ 1192.178972][T25818] netlink: 256 bytes leftover after parsing attributes in process `syz.9.19966'. [ 1192.202641][T25822] netlink: 100 bytes leftover after parsing attributes in process `syz.2.19968'. [ 1192.246645][ T1052] hid-generic 0000:0000:0000.0086: unknown main item tag 0x0 [ 1192.259528][ T1052] hid-generic 0000:0000:0000.0086: unknown main item tag 0x0 [ 1192.266989][ T1052] hid-generic 0000:0000:0000.0086: unknown main item tag 0x0 [ 1192.274391][ T1052] hid-generic 0000:0000:0000.0086: unknown main item tag 0x0 [ 1192.285842][ T1052] hid-generic 0000:0000:0000.0086: unknown main item tag 0x0 [ 1192.294443][ T1052] hid-generic 0000:0000:0000.0086: unknown main item tag 0x0 [ 1192.294691][T25818] lo speed is unknown, defaulting to 1000 [ 1192.301830][ T1052] hid-generic 0000:0000:0000.0086: unknown main item tag 0x0 [ 1192.301912][ T1052] hid-generic 0000:0000:0000.0086: unknown main item tag 0x0 [ 1192.301948][ T1052] hid-generic 0000:0000:0000.0086: unknown main item tag 0x0 [ 1192.301994][ T1052] hid-generic 0000:0000:0000.0086: unknown main item tag 0x0 [ 1192.404927][ T1052] hid-generic 0000:0000:0000.0086: unknown main item tag 0x0 [ 1192.417875][ T1052] hid-generic 0000:0000:0000.0086: unknown main item tag 0x0 [ 1192.425466][ T1052] hid-generic 0000:0000:0000.0086: unknown main item tag 0x0 [ 1192.432969][ T1052] hid-generic 0000:0000:0000.0086: unknown main item tag 0x0 [ 1192.440465][ T1052] hid-generic 0000:0000:0000.0086: unknown main item tag 0x0 [ 1192.453135][ T1052] hid-generic 0000:0000:0000.0086: unknown main item tag 0x0 [ 1192.460575][ T1052] hid-generic 0000:0000:0000.0086: unknown main item tag 0x0 [ 1192.468006][ T1052] hid-generic 0000:0000:0000.0086: unknown main item tag 0x0 [ 1192.475977][ T1052] hid-generic 0000:0000:0000.0086: unknown main item tag 0x0 [ 1192.488359][ T1052] hid-generic 0000:0000:0000.0086: unknown main item tag 0x0 [ 1192.495774][ T1052] hid-generic 0000:0000:0000.0086: unknown main item tag 0x0 [ 1192.503799][ T1052] hid-generic 0000:0000:0000.0086: unknown main item tag 0x0 [ 1192.516280][ T1052] hid-generic 0000:0000:0000.0086: unknown main item tag 0x0 [ 1192.523691][ T1052] hid-generic 0000:0000:0000.0086: unknown main item tag 0x0 [ 1192.531696][ T1052] hid-generic 0000:0000:0000.0086: unknown main item tag 0x0 [ 1192.556073][ T1052] hid-generic 0000:0000:0000.0086: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1192.655235][T25841] loop9: detected capacity change from 0 to 512 [ 1192.692575][T25841] EXT4-fs (loop9): 1 orphan inode deleted [ 1192.701961][T25841] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1192.717872][ T38] EXT4-fs error (device loop9): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 1 [ 1192.735900][T25841] ext4 filesystem being mounted at /306/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1192.787033][T20807] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1192.830964][T25845] netlink: 'syz.0.19977': attribute type 7 has an invalid length. [ 1192.904237][T25856] tipc: Enabling of bearer rejected, already enabled [ 1193.135869][T25868] loop7: detected capacity change from 0 to 164 [ 1193.160722][T25868] Unable to read rock-ridge attributes [ 1193.178459][T25868] Unable to read rock-ridge attributes [ 1193.820011][T25895] SELinux: syz.1.19995 (25895) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 1194.060174][T25902] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25902 comm=syz.9.19996 [ 1194.090709][T25902] netlink: 36 bytes leftover after parsing attributes in process `syz.9.19996'. [ 1194.224670][T25914] loop7: detected capacity change from 0 to 4096 [ 1194.245463][T25914] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1194.321728][T25925] tipc: Enabling of bearer rejected, already enabled [ 1194.374870][T25928] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 1194.403277][T25928] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 1194.811050][T25955] tipc: Enabling of bearer rejected, already enabled [ 1195.015539][T21577] block device autoloading is deprecated and will be removed. [ 1195.118233][T25965] loop9: detected capacity change from 0 to 8192 [ 1195.215211][T25970] 9pnet_fd: Insufficient options for proto=fd [ 1195.241019][T25965] loop9: p1 p2 p3 p4 [ 1195.245309][T25965] loop9: p1 start 1074790144 is beyond EOD, truncated [ 1195.285249][T25965] loop9: p3 size 100663552 extends beyond EOD, truncated [ 1195.306492][T25972] FAULT_INJECTION: forcing a failure. [ 1195.306492][T25972] name failslab, interval 1, probability 0, space 0, times 0 [ 1195.322182][T25972] CPU: 0 UID: 0 PID: 25972 Comm: syz.0.20028 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(voluntary) [ 1195.322212][T25972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1195.322226][T25972] Call Trace: [ 1195.322233][T25972] [ 1195.322241][T25972] __dump_stack+0x1d/0x30 [ 1195.322263][T25972] dump_stack_lvl+0xe8/0x140 [ 1195.322340][T25972] dump_stack+0x15/0x1b [ 1195.322358][T25972] should_fail_ex+0x265/0x280 [ 1195.322391][T25972] ? alloc_lookup_fw_priv+0x147/0x350 [ 1195.322414][T25972] should_failslab+0x8c/0xb0 [ 1195.322449][T25972] __kmalloc_cache_noprof+0x4c/0x320 [ 1195.322470][T25972] alloc_lookup_fw_priv+0x147/0x350 [ 1195.322548][T25972] _request_firmware+0x28b/0xbb0 [ 1195.322579][T25972] ? __rtnl_unlock+0x95/0xb0 [ 1195.322607][T25972] ? netdev_run_todo+0x7cc/0x820 [ 1195.322723][T25972] request_firmware+0x36/0x50 [ 1195.322746][T25972] reg_reload_regdb+0x57/0x250 [ 1195.322765][T25972] nl80211_reload_regdb+0xe/0x20 [ 1195.322873][T25972] genl_family_rcv_msg_doit+0x140/0x1b0 [ 1195.322899][T25972] genl_rcv_msg+0x422/0x460 [ 1195.322922][T25972] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1195.322986][T25972] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 1195.323009][T25972] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1195.323042][T25972] netlink_rcv_skb+0x120/0x220 [ 1195.323121][T25972] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1195.323147][T25972] genl_rcv+0x28/0x40 [ 1195.323205][T25972] netlink_unicast+0x59e/0x670 [ 1195.323265][T25972] netlink_sendmsg+0x58b/0x6b0 [ 1195.323365][T25972] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1195.323393][T25972] __sock_sendmsg+0x142/0x180 [ 1195.323447][T25972] ____sys_sendmsg+0x31e/0x4e0 [ 1195.323471][T25972] ___sys_sendmsg+0x17b/0x1d0 [ 1195.323507][T25972] __x64_sys_sendmsg+0xd4/0x160 [ 1195.323588][T25972] x64_sys_call+0x2999/0x2fb0 [ 1195.323611][T25972] do_syscall_64+0xd0/0x1a0 [ 1195.323648][T25972] ? clear_bhb_loop+0x25/0x80 [ 1195.323750][T25972] ? clear_bhb_loop+0x25/0x80 [ 1195.323767][T25972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1195.323857][T25972] RIP: 0033:0x7fa32b2de969 [ 1195.323869][T25972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1195.323885][T25972] RSP: 002b:00007fa329947038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1195.323903][T25972] RAX: ffffffffffffffda RBX: 00007fa32b505fa0 RCX: 00007fa32b2de969 [ 1195.323913][T25972] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000005 [ 1195.323925][T25972] RBP: 00007fa329947090 R08: 0000000000000000 R09: 0000000000000000 [ 1195.323942][T25972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1195.323955][T25972] R13: 0000000000000000 R14: 00007fa32b505fa0 R15: 00007ffeb3f62958 [ 1195.323977][T25972] [ 1195.326956][T25965] loop9: p4 size 81920 extends beyond EOD, truncated [ 1195.906922][T19042] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1196.067337][ T29] kauditd_printk_skb: 291 callbacks suppressed [ 1196.067353][ T29] audit: type=1326 audit(2000000120.660:57494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25982 comm="syz.9.20033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd124c8e969 code=0x7ffc0000 [ 1196.127756][T25985] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25985 comm=syz.9.20033 [ 1196.163271][T25985] netlink: 36 bytes leftover after parsing attributes in process `syz.9.20033'. [ 1196.186154][ T29] audit: type=1326 audit(2000000120.700:57495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25982 comm="syz.9.20033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd124c8d2d0 code=0x7ffc0000 [ 1196.213810][ T29] audit: type=1326 audit(2000000120.700:57496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25982 comm="syz.9.20033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd124c8e969 code=0x7ffc0000 [ 1196.237685][ T29] audit: type=1326 audit(2000000120.700:57497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25982 comm="syz.9.20033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd124c8e969 code=0x7ffc0000 [ 1196.265095][ T29] audit: type=1326 audit(2000000120.710:57498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25982 comm="syz.9.20033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd124c8e969 code=0x7ffc0000 [ 1196.292455][ T29] audit: type=1326 audit(2000000120.710:57499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25982 comm="syz.9.20033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd124c8e969 code=0x7ffc0000 [ 1196.316305][ T29] audit: type=1326 audit(2000000120.710:57500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25982 comm="syz.9.20033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd124c8e969 code=0x7ffc0000 [ 1196.343510][ T29] audit: type=1326 audit(2000000120.710:57501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25982 comm="syz.9.20033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd124c8e969 code=0x7ffc0000 [ 1196.367173][ T29] audit: type=1326 audit(2000000120.710:57502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25982 comm="syz.9.20033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd124c8e969 code=0x7ffc0000 [ 1196.394223][ T29] audit: type=1326 audit(2000000120.710:57503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25982 comm="syz.9.20033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd124c8e969 code=0x7ffc0000 [ 1196.785136][T26020] loop1: detected capacity change from 0 to 512 [ 1196.835982][T26020] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1196.919321][T26020] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.20046: bad orphan inode 13 [ 1196.981529][T26020] ext4_test_bit(bit=12, block=18) = 1 [ 1196.986942][T26020] is_bad_inode(inode)=0 [ 1196.994633][T26020] NEXT_ORPHAN(inode)=2130706432 [ 1196.999548][T26020] max_ino=32 [ 1197.002742][T26020] i_nlink=1 [ 1197.093785][T26020] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1197.256544][T21577] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1197.819858][T26052] loop7: detected capacity change from 0 to 8192 [ 1197.897076][T26052] loop7: p1 p2 p3 p4 [ 1197.906192][T26052] loop7: p1 start 1074790144 is beyond EOD, truncated [ 1197.918382][T26052] loop7: p3 size 100663552 extends beyond EOD, truncated [ 1197.954509][T26052] loop7: p4 size 81920 extends beyond EOD, truncated [ 1198.043966][T26068] loop1: detected capacity change from 0 to 512 [ 1198.084283][T26068] EXT4-fs (loop1): 1 orphan inode deleted [ 1198.100717][T26068] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1198.114326][ T38] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 1 [ 1198.162572][T26068] ext4 filesystem being mounted at /305/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1198.212640][T15017] hid-generic 0000:0000:0000.0087: unknown main item tag 0x0 [ 1198.222892][T15017] hid-generic 0000:0000:0000.0087: unknown main item tag 0x0 [ 1198.231008][T15017] hid-generic 0000:0000:0000.0087: unknown main item tag 0x0 [ 1198.245526][T21577] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1198.264970][T26081] netlink: 256 bytes leftover after parsing attributes in process `syz.9.20070'. [ 1198.304921][T15017] hid-generic 0000:0000:0000.0087: unknown main item tag 0x0 [ 1198.315231][T15017] hid-generic 0000:0000:0000.0087: unknown main item tag 0x0 [ 1198.323332][T15017] hid-generic 0000:0000:0000.0087: unknown main item tag 0x0 [ 1198.330756][T15017] hid-generic 0000:0000:0000.0087: unknown main item tag 0x0 [ 1198.338154][T15017] hid-generic 0000:0000:0000.0087: unknown main item tag 0x0 [ 1198.348564][T15017] hid-generic 0000:0000:0000.0087: unknown main item tag 0x0 [ 1198.356609][T15017] hid-generic 0000:0000:0000.0087: unknown main item tag 0x0 [ 1198.364080][T15017] hid-generic 0000:0000:0000.0087: unknown main item tag 0x0 [ 1198.374595][T15017] hid-generic 0000:0000:0000.0087: unknown main item tag 0x0 [ 1198.382715][T15017] hid-generic 0000:0000:0000.0087: unknown main item tag 0x0 [ 1198.469356][T26081] lo speed is unknown, defaulting to 1000 [ 1198.574647][T15017] hid-generic 0000:0000:0000.0087: unknown main item tag 0x0 [ 1198.585230][T15017] hid-generic 0000:0000:0000.0087: unknown main item tag 0x0 [ 1198.593525][T15017] hid-generic 0000:0000:0000.0087: unknown main item tag 0x0 [ 1198.600982][T15017] hid-generic 0000:0000:0000.0087: unknown main item tag 0x0 [ 1198.608521][T15017] hid-generic 0000:0000:0000.0087: unknown main item tag 0x0 [ 1198.619556][T15017] hid-generic 0000:0000:0000.0087: unknown main item tag 0x0 [ 1198.626964][T15017] hid-generic 0000:0000:0000.0087: unknown main item tag 0x0 [ 1198.634508][T15017] hid-generic 0000:0000:0000.0087: unknown main item tag 0x0 [ 1198.644315][T15017] hid-generic 0000:0000:0000.0087: unknown main item tag 0x0 [ 1198.652847][T15017] hid-generic 0000:0000:0000.0087: unknown main item tag 0x0 [ 1198.660262][T15017] hid-generic 0000:0000:0000.0087: unknown main item tag 0x0 [ 1198.667878][T15017] hid-generic 0000:0000:0000.0087: unknown main item tag 0x0 [ 1198.677759][T15017] hid-generic 0000:0000:0000.0087: unknown main item tag 0x0 [ 1198.686674][T15017] hid-generic 0000:0000:0000.0087: unknown main item tag 0x0 [ 1198.694133][T15017] hid-generic 0000:0000:0000.0087: unknown main item tag 0x0 [ 1198.891804][T26100] loop7: detected capacity change from 0 to 512 [ 1198.899110][T15017] hid-generic 0000:0000:0000.0087: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1198.935805][T26100] EXT4-fs (loop7): 1 orphan inode deleted [ 1198.950059][ T38] EXT4-fs error (device loop7): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 1 [ 1198.962105][T26100] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1198.989427][T26100] ext4 filesystem being mounted at /524/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1199.045502][T19042] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1199.126895][T26111] loop9: detected capacity change from 0 to 8192 [ 1199.190180][T26111] loop9: p1 p2 p3 p4 [ 1199.190805][T26121] FAULT_INJECTION: forcing a failure. [ 1199.190805][T26121] name failslab, interval 1, probability 0, space 0, times 0 [ 1199.194390][T26111] loop9: p1 start 1074790144 is beyond EOD, truncated [ 1199.206910][T26121] CPU: 0 UID: 0 PID: 26121 Comm: syz.2.20086 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(voluntary) [ 1199.206985][T26121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1199.207000][T26121] Call Trace: [ 1199.207053][T26121] [ 1199.207063][T26121] __dump_stack+0x1d/0x30 [ 1199.207088][T26121] dump_stack_lvl+0xe8/0x140 [ 1199.207111][T26121] dump_stack+0x15/0x1b [ 1199.207130][T26121] should_fail_ex+0x265/0x280 [ 1199.207204][T26121] should_failslab+0x8c/0xb0 [ 1199.207238][T26121] kmem_cache_alloc_noprof+0x50/0x310 [ 1199.207276][T26121] ? audit_log_start+0x365/0x6c0 [ 1199.207312][T26121] audit_log_start+0x365/0x6c0 [ 1199.207470][T26121] audit_seccomp+0x48/0x100 [ 1199.207499][T26121] ? __seccomp_filter+0x68c/0x10d0 [ 1199.207560][T26121] __seccomp_filter+0x69d/0x10d0 [ 1199.207585][T26121] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1199.207615][T26121] ? vfs_write+0x75e/0x8d0 [ 1199.207725][T26121] __secure_computing+0x82/0x150 [ 1199.207748][T26121] syscall_trace_enter+0xcf/0x1e0 [ 1199.207776][T26121] do_syscall_64+0xaa/0x1a0 [ 1199.207801][T26121] ? clear_bhb_loop+0x25/0x80 [ 1199.207860][T26121] ? clear_bhb_loop+0x25/0x80 [ 1199.207883][T26121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1199.207902][T26121] RIP: 0033:0x7fa0de4de969 [ 1199.207919][T26121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1199.207940][T26121] RSP: 002b:00007fa0dcb47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000083 [ 1199.208001][T26121] RAX: ffffffffffffffda RBX: 00007fa0de705fa0 RCX: 00007fa0de4de969 [ 1199.208016][T26121] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1199.208030][T26121] RBP: 00007fa0dcb47090 R08: 0000000000000000 R09: 0000000000000000 [ 1199.208043][T26121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1199.208057][T26121] R13: 0000000000000000 R14: 00007fa0de705fa0 R15: 00007ffc81778bd8 [ 1199.208176][T26121] [ 1199.344722][T15016] hid-generic 0000:0000:0000.0088: unknown main item tag 0x0 [ 1199.349354][T26111] loop9: p3 size 100663552 extends beyond EOD, [ 1199.350618][T15016] hid-generic 0000:0000:0000.0088: unknown main item tag 0x0 [ 1199.355219][T26111] truncated [ 1199.355576][T26111] loop9: p4 size 81920 extends beyond EOD, [ 1199.363716][T15016] hid-generic 0000:0000:0000.0088: unknown main item tag 0x0 [ 1199.374047][T26131] netlink: 256 bytes leftover after parsing attributes in process `syz.7.20090'. [ 1199.390587][T26111] truncated [ 1199.510463][T15016] hid-generic 0000:0000:0000.0088: unknown main item tag 0x0 [ 1199.517852][T15016] hid-generic 0000:0000:0000.0088: unknown main item tag 0x0 [ 1199.525405][T15016] hid-generic 0000:0000:0000.0088: unknown main item tag 0x0 [ 1199.535245][T15016] hid-generic 0000:0000:0000.0088: unknown main item tag 0x0 [ 1199.543879][T15016] hid-generic 0000:0000:0000.0088: unknown main item tag 0x0 [ 1199.551892][T15016] hid-generic 0000:0000:0000.0088: unknown main item tag 0x0 [ 1199.561910][T15016] hid-generic 0000:0000:0000.0088: unknown main item tag 0x0 [ 1199.570639][T15016] hid-generic 0000:0000:0000.0088: unknown main item tag 0x0 [ 1199.578042][T15016] hid-generic 0000:0000:0000.0088: unknown main item tag 0x0 [ 1199.585468][T15016] hid-generic 0000:0000:0000.0088: unknown main item tag 0x0 [ 1199.603726][T15016] hid-generic 0000:0000:0000.0088: unknown main item tag 0x0 [ 1199.611169][T15016] hid-generic 0000:0000:0000.0088: unknown main item tag 0x0 [ 1199.621577][T15016] hid-generic 0000:0000:0000.0088: unknown main item tag 0x0 [ 1199.630532][T15016] hid-generic 0000:0000:0000.0088: unknown main item tag 0x0 [ 1199.636637][T26137] lo speed is unknown, defaulting to 1000 [ 1199.637909][T15016] hid-generic 0000:0000:0000.0088: unknown main item tag 0x0 [ 1199.653387][T15016] hid-generic 0000:0000:0000.0088: unknown main item tag 0x0 [ 1199.662119][T15016] hid-generic 0000:0000:0000.0088: unknown main item tag 0x0 [ 1199.669748][T15016] hid-generic 0000:0000:0000.0088: unknown main item tag 0x0 [ 1199.677159][T15016] hid-generic 0000:0000:0000.0088: unknown main item tag 0x0 [ 1199.686808][T15016] hid-generic 0000:0000:0000.0088: unknown main item tag 0x0 [ 1199.695332][T15016] hid-generic 0000:0000:0000.0088: unknown main item tag 0x0 [ 1199.702729][T15016] hid-generic 0000:0000:0000.0088: unknown main item tag 0x0 [ 1199.712612][T15016] hid-generic 0000:0000:0000.0088: unknown main item tag 0x0 [ 1199.721244][T15016] hid-generic 0000:0000:0000.0088: unknown main item tag 0x0 [ 1199.728783][T15016] hid-generic 0000:0000:0000.0088: unknown main item tag 0x0 [ 1199.855780][T15016] hid-generic 0000:0000:0000.0088: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1199.985605][T26154] 9pnet_fd: Insufficient options for proto=fd [ 1200.054778][T26140] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26140 comm=syz.9.20093 [ 1200.067880][T26140] netlink: 36 bytes leftover after parsing attributes in process `syz.9.20093'. [ 1200.317771][T26173] binfmt_misc: register: failed to install interpreter file ./file2 [ 1200.360462][T26180] loop1: detected capacity change from 0 to 128 [ 1200.369125][T26180] /dev/loop1: Can't open blockdev [ 1200.373407][T26182] 9pnet_fd: Insufficient options for proto=fd [ 1200.485048][T26192] tipc: Enabling of bearer rejected, already enabled [ 1200.654778][T26194] loop7: detected capacity change from 0 to 512 [ 1200.673605][T26194] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1200.674365][T26189] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26189 comm=syz.1.20111 [ 1200.693013][T26194] ext4 filesystem being mounted at /531/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1200.698899][T26189] netlink: 36 bytes leftover after parsing attributes in process `syz.1.20111'. [ 1200.720707][T26204] netlink: 100 bytes leftover after parsing attributes in process `syz.0.20115'. [ 1200.787017][T19042] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1200.964893][T26220] tipc: Enabling of bearer rejected, already enabled [ 1200.995529][T26224] IPv6: NLM_F_CREATE should be specified when creating new route [ 1201.005055][T26223] loop1: detected capacity change from 0 to 512 [ 1201.022896][T26223] EXT4-fs (loop1): 1 orphan inode deleted [ 1201.031048][T26223] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1201.046682][T16496] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:52: Failed to release dquot type 1 [ 1201.046813][T26223] ext4 filesystem being mounted at /325/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1201.085776][T21577] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1201.272876][ T29] kauditd_printk_skb: 170 callbacks suppressed [ 1201.272889][ T29] audit: type=1326 audit(2000000125.870:57669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26229 comm="syz.1.20127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb4906e969 code=0x7ffc0000 [ 1201.308400][ T29] audit: type=1326 audit(2000000125.870:57670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26229 comm="syz.1.20127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffb4906d2d0 code=0x7ffc0000 [ 1201.335421][T26237] loop9: detected capacity change from 0 to 8192 [ 1201.338406][ T7311] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 1201.343538][ T29] audit: type=1326 audit(2000000125.870:57671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26229 comm="syz.1.20127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb4906e969 code=0x7ffc0000 [ 1201.353929][T26230] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26230 comm=syz.1.20127 [ 1201.354453][ T7311] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 1201.389922][ T29] audit: type=1326 audit(2000000125.950:57672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26229 comm="syz.1.20127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ffb4906e969 code=0x7ffc0000 [ 1201.394190][ T7311] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 1201.401581][ T29] audit: type=1326 audit(2000000125.950:57673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26229 comm="syz.1.20127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb4906e969 code=0x7ffc0000 [ 1201.401609][ T29] audit: type=1326 audit(2000000125.950:57674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26229 comm="syz.1.20127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb4906e969 code=0x7ffc0000 [ 1201.401668][ T29] audit: type=1326 audit(2000000125.950:57675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26229 comm="syz.1.20127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffb4906e969 code=0x7ffc0000 [ 1201.401695][ T29] audit: type=1326 audit(2000000125.950:57676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26229 comm="syz.1.20127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb4906e969 code=0x7ffc0000 [ 1201.401721][ T29] audit: type=1326 audit(2000000125.950:57677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26229 comm="syz.1.20127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb4906e969 code=0x7ffc0000 [ 1201.401752][ T29] audit: type=1326 audit(2000000125.950:57678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26229 comm="syz.1.20127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffb4906e969 code=0x7ffc0000 [ 1201.404277][T26230] netlink: 36 bytes leftover after parsing attributes in process `syz.1.20127'. [ 1201.462431][ T7311] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 1201.462485][ T7311] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 1201.462509][ T7311] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 1201.462532][ T7311] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 1201.462555][ T7311] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 1201.462583][ T7311] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 1201.462600][ T7311] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 1201.462623][ T7311] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 1201.462670][ T7311] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 1201.462693][ T7311] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 1201.462814][ T7311] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 1201.462836][ T7311] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 1201.462858][ T7311] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 1201.462881][ T7311] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 1201.462902][ T7311] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 1201.462998][ T7311] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 1201.463020][ T7311] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 1201.463077][ T7311] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 1201.463140][ T7311] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 1201.463159][ T7311] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 1201.463230][ T7311] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 1201.463253][ T7311] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 1201.463282][ T7311] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 1201.463305][ T7311] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 1201.463329][ T7311] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 1201.463861][T26243] netlink: 256 bytes leftover after parsing attributes in process `syz.2.20132'. [ 1201.471984][ T7311] hid-generic 0000:0000:0000.0089: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1201.597679][T26237] loop9: p1 p2 p3 p4 [ 1201.855576][T26237] loop9: p1 start 1074790144 is beyond EOD, truncated [ 1201.863844][T26237] loop9: p3 size 100663552 extends beyond EOD, truncated [ 1201.873208][T26237] loop9: p4 size 81920 extends beyond EOD, truncated [ 1201.932315][T26243] lo speed is unknown, defaulting to 1000 [ 1202.005052][T26252] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1202.020574][T26254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1202.046707][T26254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1202.092014][T26259] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20138'. [ 1202.123409][T26259] bridge_slave_1: left allmulticast mode [ 1202.132121][T26259] bridge_slave_1: left promiscuous mode [ 1202.137872][T26259] bridge0: port 2(bridge_slave_1) entered disabled state [ 1202.166734][T26262] netlink: 8 bytes leftover after parsing attributes in process `syz.9.20140'. [ 1202.177512][T26259] bridge_slave_0: left promiscuous mode [ 1202.183237][T26259] bridge0: port 1(bridge_slave_0) entered disabled state [ 1202.813546][T26284] loop1: detected capacity change from 0 to 8192 [ 1202.894242][T26284] loop1: p1 p2 p3 p4 [ 1202.898406][T26284] loop1: p1 start 1074790144 is beyond EOD, truncated [ 1202.906529][T26284] loop1: p3 size 100663552 extends beyond EOD, truncated [ 1202.915746][T26282] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26282 comm=syz.0.20147 [ 1202.934399][T26284] loop1: p4 size 81920 extends beyond EOD, truncated [ 1202.948697][T26282] netlink: 36 bytes leftover after parsing attributes in process `syz.0.20147'. [ 1203.061376][T26298] siw: device registration error -23 [ 1203.079073][T26296] ref_ctr increment failed for inode: 0x6ea offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88812d901b80 [ 1203.095273][T26295] uprobe: syz.1.20153:26295 failed to unregister, leaking uprobe [ 1203.209368][T26310] FAULT_INJECTION: forcing a failure. [ 1203.209368][T26310] name failslab, interval 1, probability 0, space 0, times 0 [ 1203.228026][T26310] CPU: 1 UID: 0 PID: 26310 Comm: syz.2.20158 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(voluntary) [ 1203.228061][T26310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1203.228078][T26310] Call Trace: [ 1203.228142][T26310] [ 1203.228151][T26310] __dump_stack+0x1d/0x30 [ 1203.228178][T26310] dump_stack_lvl+0xe8/0x140 [ 1203.228203][T26310] dump_stack+0x15/0x1b [ 1203.228224][T26310] should_fail_ex+0x265/0x280 [ 1203.228326][T26310] should_failslab+0x8c/0xb0 [ 1203.228371][T26310] kmem_cache_alloc_node_noprof+0x57/0x320 [ 1203.228481][T26310] ? __alloc_skb+0x101/0x320 [ 1203.228514][T26310] __alloc_skb+0x101/0x320 [ 1203.228606][T26310] netlink_alloc_large_skb+0xba/0xf0 [ 1203.228639][T26310] netlink_sendmsg+0x3cf/0x6b0 [ 1203.228727][T26310] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1203.228820][T26310] __sock_sendmsg+0x142/0x180 [ 1203.228846][T26310] ____sys_sendmsg+0x31e/0x4e0 [ 1203.228884][T26310] ___sys_sendmsg+0x17b/0x1d0 [ 1203.228919][T26310] __x64_sys_sendmsg+0xd4/0x160 [ 1203.228947][T26310] x64_sys_call+0x2999/0x2fb0 [ 1203.228974][T26310] do_syscall_64+0xd0/0x1a0 [ 1203.228996][T26310] ? clear_bhb_loop+0x25/0x80 [ 1203.229023][T26310] ? clear_bhb_loop+0x25/0x80 [ 1203.229050][T26310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1203.229077][T26310] RIP: 0033:0x7fa0de4de969 [ 1203.229117][T26310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1203.229168][T26310] RSP: 002b:00007fa0dcb47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1203.229192][T26310] RAX: ffffffffffffffda RBX: 00007fa0de705fa0 RCX: 00007fa0de4de969 [ 1203.229208][T26310] RDX: 0000000020040814 RSI: 0000200000000840 RDI: 0000000000000006 [ 1203.229261][T26310] RBP: 00007fa0dcb47090 R08: 0000000000000000 R09: 0000000000000000 [ 1203.229275][T26310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1203.229287][T26310] R13: 0000000000000000 R14: 00007fa0de705fa0 R15: 00007ffc81778bd8 [ 1203.229311][T26310] [ 1203.244570][T26314] 9pnet_fd: Insufficient options for proto=fd [ 1203.507147][ T3469] hid-generic 0000:0000:0000.008A: unknown main item tag 0x0 [ 1203.517978][ T3469] hid-generic 0000:0000:0000.008A: unknown main item tag 0x0 [ 1203.522532][T26321] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26321 comm=syz.9.20162 [ 1203.525434][ T3469] hid-generic 0000:0000:0000.008A: unknown main item tag 0x0 [ 1203.546262][T26321] netlink: 36 bytes leftover after parsing attributes in process `syz.9.20162'. [ 1203.552822][T26325] netlink: 256 bytes leftover after parsing attributes in process `syz.0.20165'. [ 1203.603485][ T3469] hid-generic 0000:0000:0000.008A: unknown main item tag 0x0 [ 1203.610921][ T3469] hid-generic 0000:0000:0000.008A: unknown main item tag 0x0 [ 1203.618317][ T3469] hid-generic 0000:0000:0000.008A: unknown main item tag 0x0 [ 1203.626349][ T3469] hid-generic 0000:0000:0000.008A: unknown main item tag 0x0 [ 1203.638131][ T3469] hid-generic 0000:0000:0000.008A: unknown main item tag 0x0 [ 1203.645551][ T3469] hid-generic 0000:0000:0000.008A: unknown main item tag 0x0 [ 1203.653493][ T3469] hid-generic 0000:0000:0000.008A: unknown main item tag 0x0 [ 1203.665247][ T3469] hid-generic 0000:0000:0000.008A: unknown main item tag 0x0 [ 1203.672688][ T3469] hid-generic 0000:0000:0000.008A: unknown main item tag 0x0 [ 1203.680793][ T3469] hid-generic 0000:0000:0000.008A: unknown main item tag 0x0 [ 1203.691950][ T3469] hid-generic 0000:0000:0000.008A: unknown main item tag 0x0 [ 1203.704177][ T3469] hid-generic 0000:0000:0000.008A: unknown main item tag 0x0 [ 1203.712193][ T3469] hid-generic 0000:0000:0000.008A: unknown main item tag 0x0 [ 1203.719585][ T3469] hid-generic 0000:0000:0000.008A: unknown main item tag 0x0 [ 1203.726977][ T3469] hid-generic 0000:0000:0000.008A: unknown main item tag 0x0 [ 1203.739518][ T3469] hid-generic 0000:0000:0000.008A: unknown main item tag 0x0 [ 1203.746948][ T3469] hid-generic 0000:0000:0000.008A: unknown main item tag 0x0 [ 1203.754358][ T3469] hid-generic 0000:0000:0000.008A: unknown main item tag 0x0 [ 1203.765465][ T3469] hid-generic 0000:0000:0000.008A: unknown main item tag 0x0 [ 1203.773894][ T3469] hid-generic 0000:0000:0000.008A: unknown main item tag 0x0 [ 1203.781284][ T3469] hid-generic 0000:0000:0000.008A: unknown main item tag 0x0 [ 1203.792314][ T3469] hid-generic 0000:0000:0000.008A: unknown main item tag 0x0 [ 1203.800823][ T3469] hid-generic 0000:0000:0000.008A: unknown main item tag 0x0 [ 1203.808231][ T3469] hid-generic 0000:0000:0000.008A: unknown main item tag 0x0 [ 1203.815704][ T3469] hid-generic 0000:0000:0000.008A: unknown main item tag 0x0 [ 1203.827073][ T3469] hid-generic 0000:0000:0000.008A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1203.838310][T26325] lo speed is unknown, defaulting to 1000 [ 1204.054531][T26353] FAULT_INJECTION: forcing a failure. [ 1204.054531][T26353] name failslab, interval 1, probability 0, space 0, times 0 [ 1204.067912][T26353] CPU: 0 UID: 0 PID: 26353 Comm: syz.7.20176 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(voluntary) [ 1204.067942][T26353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1204.067956][T26353] Call Trace: [ 1204.067963][T26353] [ 1204.067970][T26353] __dump_stack+0x1d/0x30 [ 1204.068028][T26353] dump_stack_lvl+0xe8/0x140 [ 1204.068054][T26353] dump_stack+0x15/0x1b [ 1204.068072][T26353] should_fail_ex+0x265/0x280 [ 1204.068231][T26353] should_failslab+0x8c/0xb0 [ 1204.068274][T26353] __kmalloc_noprof+0xa5/0x3e0 [ 1204.068295][T26353] ? security_sb_alloc+0x48/0x110 [ 1204.068426][T26353] security_sb_alloc+0x48/0x110 [ 1204.068467][T26353] alloc_super+0x105/0x570 [ 1204.068565][T26353] sget_fc+0x24e/0x6e0 [ 1204.068589][T26353] ? __pfx_set_anon_super_fc+0x10/0x10 [ 1204.068617][T26353] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1204.068685][T26353] get_tree_nodev+0x2a/0x100 [ 1204.068710][T26353] mqueue_get_tree+0x63/0x90 [ 1204.068800][T26353] vfs_get_tree+0x54/0x1d0 [ 1204.068844][T26353] fc_mount+0x18/0x70 [ 1204.068860][T26353] mq_init_ns+0x249/0x2f0 [ 1204.068898][T26353] copy_ipcs+0x214/0x3b0 [ 1204.068957][T26353] create_new_namespaces+0x12a/0x410 [ 1204.068990][T26353] unshare_nsproxy_namespaces+0xe8/0x120 [ 1204.069031][T26353] ksys_unshare+0x3d0/0x6d0 [ 1204.069074][T26353] ? ksys_write+0x16e/0x1a0 [ 1204.069188][T26353] __x64_sys_unshare+0x1f/0x30 [ 1204.069225][T26353] x64_sys_call+0x2d4b/0x2fb0 [ 1204.069252][T26353] do_syscall_64+0xd0/0x1a0 [ 1204.069294][T26353] ? clear_bhb_loop+0x25/0x80 [ 1204.069315][T26353] ? clear_bhb_loop+0x25/0x80 [ 1204.069336][T26353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1204.069389][T26353] RIP: 0033:0x7fb127f1e969 [ 1204.069406][T26353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1204.069474][T26353] RSP: 002b:00007fb126587038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1204.069504][T26353] RAX: ffffffffffffffda RBX: 00007fb128145fa0 RCX: 00007fb127f1e969 [ 1204.069517][T26353] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002c040000 [ 1204.069531][T26353] RBP: 00007fb126587090 R08: 0000000000000000 R09: 0000000000000000 [ 1204.069544][T26353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1204.069557][T26353] R13: 0000000000000000 R14: 00007fb128145fa0 R15: 00007ffe50c57828 [ 1204.069578][T26353] [ 1204.460908][T26358] netlink: 36 bytes leftover after parsing attributes in process `syz.0.20177'. [ 1204.484492][T26360] loop7: detected capacity change from 0 to 512 [ 1204.507533][T26360] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1204.513770][ T3390] page_pool_release_retry() stalled pool shutdown: id 356, 51 inflight 120 sec [ 1204.531895][T26360] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.20178: bad orphan inode 13 [ 1204.584546][T26360] ext4_test_bit(bit=12, block=18) = 1 [ 1204.590077][T26360] is_bad_inode(inode)=0 [ 1204.594328][T26360] NEXT_ORPHAN(inode)=2130706432 [ 1204.602916][T26360] max_ino=32 [ 1204.604780][T26361] lo speed is unknown, defaulting to 1000 [ 1204.606117][T26360] i_nlink=1 [ 1204.648415][T26360] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1204.716063][T19042] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1204.747627][T26370] tipc: Enabling of bearer rejected, already enabled [ 1204.842858][T15016] hid-generic 0000:0000:0000.008B: unknown main item tag 0x0 [ 1204.851606][T15016] hid-generic 0000:0000:0000.008B: unknown main item tag 0x0 [ 1204.859137][T15016] hid-generic 0000:0000:0000.008B: unknown main item tag 0x0 [ 1204.878485][T26379] netlink: 256 bytes leftover after parsing attributes in process `syz.0.20186'. [ 1204.906981][T15016] hid-generic 0000:0000:0000.008B: unknown main item tag 0x0 [ 1204.915144][T15016] hid-generic 0000:0000:0000.008B: unknown main item tag 0x0 [ 1204.923179][T15016] hid-generic 0000:0000:0000.008B: unknown main item tag 0x0 [ 1204.933335][T15016] hid-generic 0000:0000:0000.008B: unknown main item tag 0x0 [ 1204.941473][T15016] hid-generic 0000:0000:0000.008B: unknown main item tag 0x0 [ 1204.949561][T15016] hid-generic 0000:0000:0000.008B: unknown main item tag 0x0 [ 1204.957019][T15016] hid-generic 0000:0000:0000.008B: unknown main item tag 0x0 [ 1204.966774][T15016] hid-generic 0000:0000:0000.008B: unknown main item tag 0x0 [ 1204.974827][T15016] hid-generic 0000:0000:0000.008B: unknown main item tag 0x0 [ 1204.982867][T15016] hid-generic 0000:0000:0000.008B: unknown main item tag 0x0 [ 1205.003053][T15016] hid-generic 0000:0000:0000.008B: unknown main item tag 0x0 [ 1205.011271][T15016] hid-generic 0000:0000:0000.008B: unknown main item tag 0x0 [ 1205.021262][T15016] hid-generic 0000:0000:0000.008B: unknown main item tag 0x0 [ 1205.022946][T26380] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26380 comm=syz.7.20183 [ 1205.029479][T15016] hid-generic 0000:0000:0000.008B: unknown main item tag 0x0 [ 1205.029507][T15016] hid-generic 0000:0000:0000.008B: unknown main item tag 0x0 [ 1205.029531][T15016] hid-generic 0000:0000:0000.008B: unknown main item tag 0x0 [ 1205.029556][T15016] hid-generic 0000:0000:0000.008B: unknown main item tag 0x0 [ 1205.029580][T15016] hid-generic 0000:0000:0000.008B: unknown main item tag 0x0 [ 1205.029651][T15016] hid-generic 0000:0000:0000.008B: unknown main item tag 0x0 [ 1205.029673][T15016] hid-generic 0000:0000:0000.008B: unknown main item tag 0x0 [ 1205.029695][T15016] hid-generic 0000:0000:0000.008B: unknown main item tag 0x0 [ 1205.029716][T15016] hid-generic 0000:0000:0000.008B: unknown main item tag 0x0 [ 1205.029738][T15016] hid-generic 0000:0000:0000.008B: unknown main item tag 0x0 [ 1205.029798][T15016] hid-generic 0000:0000:0000.008B: unknown main item tag 0x0 [ 1205.029817][T15016] hid-generic 0000:0000:0000.008B: unknown main item tag 0x0 [ 1205.069513][T26382] netlink: 44 bytes leftover after parsing attributes in process `syz.1.20187'. [ 1205.140930][T26380] netlink: 36 bytes leftover after parsing attributes in process `syz.7.20183'. [ 1205.186387][T26389] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20188'. [ 1205.196952][T26379] lo speed is unknown, defaulting to 1000 [ 1205.232132][T15016] hid-generic 0000:0000:0000.008B: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1205.453387][T26405] SELinux: Context unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 is not valid (left unmapped). [ 1205.615293][T26414] loop7: detected capacity change from 0 to 8192 [ 1205.624459][T26419] ================================================================== [ 1205.632562][T26419] BUG: KCSAN: data-race in mas_state_walk / mas_wmb_replace [ 1205.639870][T26419] [ 1205.642215][T26419] write to 0xffff888103211b00 of 8 bytes by task 26417 on cpu 0: [ 1205.649941][T26419] mas_wmb_replace+0x20e/0x14a0 [ 1205.654813][T26419] mas_wr_store_entry+0x17ae/0x2b60 [ 1205.660020][T26419] mas_store_prealloc+0x74d/0x9e0 [ 1205.665055][T26419] vma_iter_store_new+0x1c5/0x200 [ 1205.670120][T26419] vma_complete+0x125/0x570 [ 1205.674638][T26419] __split_vma+0x594/0x610 [ 1205.679074][T26419] vma_modify+0x1a4/0x210 [ 1205.683428][T26419] vma_modify_flags+0x101/0x130 [ 1205.688310][T26419] mprotect_fixup+0x2cc/0x570 [ 1205.692999][T26419] do_mprotect_pkey+0x6d6/0x980 [ 1205.697844][T26419] __x64_sys_mprotect+0x48/0x60 [ 1205.702713][T26419] x64_sys_call+0x2794/0x2fb0 [ 1205.707405][T26419] do_syscall_64+0xd0/0x1a0 [ 1205.711916][T26419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1205.717802][T26419] [ 1205.720125][T26419] read to 0xffff888103211b00 of 8 bytes by task 26419 on cpu 1: [ 1205.727753][T26419] mas_state_walk+0x485/0x650 [ 1205.732427][T26419] mas_walk+0x30/0x120 [ 1205.736493][T26419] lock_vma_under_rcu+0xa2/0x2f0 [ 1205.741446][T26419] do_user_addr_fault+0x233/0x1090 [ 1205.746565][T26419] exc_page_fault+0x54/0xc0 [ 1205.751070][T26419] asm_exc_page_fault+0x26/0x30 [ 1205.755916][T26419] [ 1205.758236][T26419] value changed: 0xffff88812d9052c1 -> 0xffff888103211b00 [ 1205.765357][T26419] [ 1205.767679][T26419] Reported by Kernel Concurrency Sanitizer on: [ 1205.773830][T26419] CPU: 1 UID: 0 PID: 26419 Comm: syz.0.20199 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(voluntary) [ 1205.786424][T26419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1205.796475][T26419] ================================================================== [ 1205.844704][T26414] loop7: p1 p2 p3 p4 [ 1205.849564][T26414] loop7: p1 start 1074790144 is beyond EOD, truncated [ 1205.859105][T26414] loop7: p3 size 100663552 extends beyond EOD, truncated [ 1205.866735][T26414] loop7: p4 size 81920 extends beyond EOD, truncated [ 1214.021330][T16516] unregister_netdevice: waiting for lo to become free. Usage count = 2 [ 1214.030502][T16516] ref_tracker: lo@ffff88810a8b7550 has 1/1 users at [ 1214.030502][T16516] netdev_get_by_index+0x13e/0x1b0 [ 1214.030502][T16516] fib6_nh_init+0xeb/0x15a0 [ 1214.030502][T16516] rtm_new_nexthop+0x1db8/0x4510 [ 1214.030502][T16516] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 1214.030502][T16516] netlink_rcv_skb+0x120/0x220 [ 1214.030502][T16516] rtnetlink_rcv+0x1c/0x30 [ 1214.030502][T16516] netlink_unicast+0x59e/0x670 [ 1214.030502][T16516] netlink_sendmsg+0x58b/0x6b0 [ 1214.030502][T16516] __sock_sendmsg+0x142/0x180 [ 1214.030502][T16516] ____sys_sendmsg+0x31e/0x4e0 [ 1214.030502][T16516] ___sys_sendmsg+0x17b/0x1d0 [ 1214.030502][T16516] __x64_sys_sendmsg+0xd4/0x160 [ 1214.030502][T16516] x64_sys_call+0x2999/0x2fb0 [ 1214.030502][T16516] do_syscall_64+0xd0/0x1a0 [ 1214.030502][T16516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1214.030502][T16516]