last executing test programs: 1m9.005620808s ago: executing program 3 (id=74): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/current\x00') write$cgroup_subtree(r1, 0x0, 0x4c) 1m8.974008609s ago: executing program 3 (id=76): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000003300), r1) sendmsg$NFC_CMD_ENABLE_SE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000033c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fcdbdf25110000000800150001000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x20000044}, 0x20000010) 1m8.592083405s ago: executing program 3 (id=79): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0xf}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x400c840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xffff, 0xffff}, {0x5, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m8.554577087s ago: executing program 3 (id=81): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x9b, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYRES8=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r3, 0x0, 0x9}, 0x18) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'gretap0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0x10, 0x8, 0x1, 0xfffffff9, {{0x7, 0x4, 0x2, 0x10, 0x1c, 0x67, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010100, @multicast1, {[@timestamp={0x44, 0x8, 0xba, 0x0, 0x9, [0x1]}]}}}}}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="400000001000ffff2dbd7000fbdbdf2500000000a54933e9e32f003444e0760919c0b24ecf97da46732c5fdb34a80c883d95a7", @ANYRES32=0x0, @ANYBLOB="2100000004030000200012800b0001006772657461700000100002800400120006000e0000000000"], 0x40}, 0x1, 0x0, 0x0, 0x8c851}, 0x40040) r6 = socket(0x10, 0x3, 0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fc07ffff00000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$ITER_CREATE(0x21, 0x0, 0x0) socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x9c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {0xc, 0xffff}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@TCA_STAB={0x70, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0xd, 0x8, 0x5, 0x1, 0x7, 0x8000}}, {0x4}}, {{0x1c, 0x1, {0xfa, 0x7, 0x4, 0x188bbbf0, 0x2, 0xd3, 0x1003ff, 0x3}}, {0xa, 0x2, [0x5, 0x6, 0xfff8]}}, {{0x1c, 0x1, {0x2, 0x10, 0xfff8, 0xcc80, 0x0, 0x7, 0x6, 0x2}}, {0x8, 0x2, [0x10, 0x800]}}]}, @TCA_RATE={0x6}]}, 0x9c}}, 0x20008010) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000440)="1da2956c09dc90bf966ef24f6dd720288e68b747f8410b296df7d3d4ec20a95d507b1fac9a0cdfff50c133c1d3d34223a02f728ea53c4af2dacc1e8b68456a2da6270529efeb950470c6722910e8f855a7e53e77b938121a5e91162de7e2ea86a700176f9b0309a15d09d6c557bac5fbf332246189741a8037191a0ee4b290760d30962787498cdc58b8", 0x8a}], 0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="9c0000000000000000000000070000000717dae000000200000000ac1e00010a010101e0000001008208feebd92314d886170000000200114216e8feab755de9edf8e0c3c218774454a4410000000000000004e0000001000033430a01010000000027e000000100000003ffffffff0000003a0a010100000000090a010100000000060000000000000009ac1e010100000004000000000000000000000000001c000000000000000000000008000000", @ANYRES32=r4, @ANYBLOB="0a010102ac1414aa000000001400000000000000000000000100000005000000000000001c000000000000000000000008000000", @ANYRES32=r8, @ANYBLOB="7f000001e00000010000000800"/28, @ANYRES32=r9, @ANYBLOB="e0000002ffffffff00000000"], 0x118}, 0x4080) syz_io_uring_setup(0x3f8e, &(0x7f0000000340)={0x0, 0x1568, 0x10000, 0x2, 0x3e8}, &(0x7f0000000140)=0x0, &(0x7f00000000c0)=0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) syz_io_uring_submit(r10, r11, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x10000000000002a8, 0x8, 0x1, {0x2}}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r12 = socket$pppl2tp(0x18, 0x1, 0x1) r13 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r12, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r13, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r14 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r14, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r12, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r12, 0x80487436, &(0x7f0000000540)="43210098") syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x53b, &(0x7f0000000b80)="$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") 1m7.256773164s ago: executing program 3 (id=99): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000000)='ceph\x00', 0x0, &(0x7f0000000080)="010000000037a788a11d1f000000000000006923c63a4541062101b60a2156566de77062086575a59ea9cb", 0x2b, r3) fcntl$lock(r1, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x7}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10, 0x3}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x12, 0x10}) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000100b000085000000ca00000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x4000, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x3200890, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) 1m6.840744811s ago: executing program 1 (id=105): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffff7a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000300)={0x11, 0x63dcbf62d8600606, r3, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x14) bind$packet(r2, &(0x7f0000000040)={0x11, 0x4, r3}, 0x14) syz_emit_ethernet(0x15, &(0x7f0000000080)=ANY=[@ANYBLOB="ff0300"], 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r4}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 1m6.840323492s ago: executing program 1 (id=106): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000380)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r2, &(0x7f00000003c0)="10", 0x1, 0x80, &(0x7f0000000140)={0x11, 0xf7, r3, 0x1, 0x0, 0x6, @local}, 0x14) 1m6.834598012s ago: executing program 1 (id=108): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_bp={0x0, 0x1}, 0x419, 0x40000000, 0x0, 0x8, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0xb) mmap(&(0x7f0000188000/0x3000)=nil, 0x3000, 0x3, 0x8031, 0xffffffffffffffff, 0xd6dac000) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r4 = msgget$private(0x0, 0x0) msgsnd(r4, &(0x7f00000002c0)=ANY=[@ANYRES16, @ANYRES64=r0, @ANYRES32=r1, @ANYRES8=r0, @ANYRES8=r4, @ANYRESOCT=r2, @ANYRESHEX=0x0, @ANYRES32=r3], 0x2000, 0x0) msgrcv(0x0, &(0x7f00000015c0)={0x0, ""/4096}, 0x1008, 0x1, 0x2000) msgrcv(r4, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) msgctl$IPC_SET(r4, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0x0, 0x1, 0x8, 0x7f, 0x3}) ioprio_set$pid(0x2, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) r6 = eventfd(0x7) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000f80)=@mangle={'mangle\x00', 0x2, 0x6, 0x5a8, 0x318, 0x408, 0x408, 0x408, 0x318, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @HL={0x28}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@ipv6header={{0x28}, {0x0, 0x1c, 0x1}}, @common=@hl={{0x28}, {0x1, 0x1}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0xffffffffffffffff, 0x20}, 0xfffffffc}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x8, 0x0}, [0xffffffff, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffff00], 'dummy0\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0x118, 0x48000000}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1ff, 0x8, 0x4, 0x0, 0x0, "52146ee9ae44b62f269737ed481b837e8196a5702a25a4409e992b2c65fd4ce47d5510261c8694c511bcdcbca881691621e9e9f5a9cc6d7b009686f0fdb6fdc2"}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x4b}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x608) r8 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x6, &(0x7f0000001480)={0x0, @in6={{0xa, 0x4e23, 0x7f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}}, 0x84) io_submit(r5, 0x2, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x42, r6, 0x0, 0x0, 0x34}, &(0x7f00000000c0)={0x0, 0x0, 0x8000000, 0x7, 0x0, r6, 0x0, 0x0, 0x7, 0x0, 0x1, r6}]) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) syncfs(r7) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x54, r10, 0x917, 0xa7, 0x1000000, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3f}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @broadcast}}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x54}}, 0x0) r11 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) r12 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0xa401, 0x0) pidfd_getfd(r12, r11, 0x0) 1m6.634447411s ago: executing program 3 (id=110): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r0}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', 0xffffffffffffffff, 0x0, 0xf}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x400c840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xffff, 0xffff}, {0x5, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m6.633130741s ago: executing program 32 (id=110): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r0}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', 0xffffffffffffffff, 0x0, 0xf}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x400c840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xffff, 0xffff}, {0x5, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m6.499288297s ago: executing program 1 (id=116): r0 = syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="757466383d312c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c756e695f786c6174653d302c73686f72746e616d653d77696e39352c000f3556feecb6412e00c80bdee16891f8bf67c9f2380e4ccafc9da9def41b05c1dfb2cfa24e43aedf5536d3bce06ddda97c586bc37fab5366b1ab6fbde3785fdd0fc4e7df753a0e2658aa5e88e1d38366c7908a7b2b678ee4b4bfc7aafa2101c157745926241af5ac30189eced78c1611b972d03bfef046f4adcada230ef0ac02ede79fb7d92a8354670c01cb80361c1fde2cef3204a182323c318e10ef11cb24c435d589b17a396377800f00af7fcb5394000000000000000000000000000000b77852afdd71c74bb5b7c5711237cc59195e4aeb5878987cefd666ef6b56a81553b8c7ffdcf6658d8a70ad52a23a68b6d0e5ea"], 0x1, 0x21b, &(0x7f0000000300)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000d300000000000000000000000000501a9cf20000006bbed91610b2362c9a1835bd495b3f2ce3dcf590c64c5ca9035402ee16f0a79c65b1ae490a5f841b191b76b26754e98cdc618b7add1979eb2f90101bbe95facedca9892117d0b6977539a7e37b195708ab8c7a40858277e967fab130b5fb27d39775ba2d11f5b20c7c1265418c2baeb92ebdbbb7e779c0b5096a763ce5004ff5f888489942f06d465168afff0f9f92e6ca4d06143375f185a1fb3ca18d73f68e1c0868662a888609ea4123ef9f9e350a2dd1a85266b3"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="184a4f7788275b1a24277f251f2e3538f7fda2b1570000000000109600ffffff17120000bd590c94ed0a72160cd8748d52c99d4532dbae9601ea30f5a29593d32ad8c9e19462de4395c4013cf7465ce50d8d84fcc66e620ff408146e5e8c8fc90abaff38fe080065e123c2ec6ddba619b36d97a63e5cf9f65a6c2ac447d70c70fd", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085100000030000001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) statx(0xffffffffffffffff, 0x0, 0x6000, 0x4, 0x0) r3 = msgget$private(0x0, 0x100) msgsnd(r3, &(0x7f0000002900)=ANY=[@ANYBLOB="03"], 0xfd1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000580000/0x4000)=nil) r8 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) connect$inet6(r8, 0x0, 0x0) msgctl$IPC_SET(r3, 0x1, &(0x7f0000002880)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x7}, 0x0, 0x0, 0x1, 0x1414, 0x10001, 0x4e, 0xffffffffffffffca, 0x8, 0x8580, 0x3}) msgsnd(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="0100000000"], 0xcc, 0x0) msgctl$IPC_RMID(r3, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 1m5.350294147s ago: executing program 1 (id=134): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48004}, 0x8080) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r4 = gettid() bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r5, 0x400, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20048054) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0500000004310200"/20, @ANYRES32, @ANYBLOB="0000000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRES32=r2, @ANYBLOB="8e945eb49f90ec481848f5eb1d8b83b68cd50617da3e4e88fbf1930cc5ebefb5c3ae3646e6ac7b5d68879bb0994530e52f1adb8bf52ac4942bdd13c3b461668a561cad0c7cda39f10d695d85258e165f8210e2640ffd046efa00d4556b3cd8837a13ea938f947d006cb6ee622d8fe393aff9264814523d0bb9dab21a9dbe6b", @ANYRES64, @ANYRESDEC=r7], 0x48) mq_open(&(0x7f0000000ac0)='eth0\x00\xdd\xad\xff=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9%\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xcfL\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe9XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xa2@\xeb\x18\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4\x80\x00\x00\x00a\xdf\xb5\xd9\xe4\x01\xea|.\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9J\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O\x9e\xef\x9b\x97\xcb\xc6\x89\xba\x8e\xf2\xfb\xd5\a\xcb\xf6\xf7{\xec\xf0@\xc2\xb2\xbcAQx\xa4\x12\xf8\x9cji\"\xf7\x1a\xbd\xac\xde\xf4\x9b\xd7#\xab\\q\xd6\xdf#>}\x97\xd0U\xe4\x9e+|\xb1MT\xa0\x1bf\v9\xcdx\xab\x83\x87\xd3q3\xbeL\xd2\x1f6\x1ffL\x9eM\x0f?\'\xc3YB0\x80!\xe9Y\xf1:\xeeX\xf7G\x85K\xbb\xbdijaA\x00&\x0e\xb3\x99\xbc9\xee\x8f\aVy!d^\r\xd1\x9b\xd5\x06\xbc$\xc9[\x8e[', 0x1, 0x50, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) r8 = io_uring_setup(0x2efe, &(0x7f0000000700)={0x0, 0xe8e5, 0x1000, 0x1, 0x2d6}) r9 = io_uring_setup(0x7625, &(0x7f0000000380)={0x0, 0x653b, 0x0, 0x1, 0xd4, 0x0, r8}) io_setup(0x2, &(0x7f0000000100)=0x0) io_destroy(r10) io_uring_register$IORING_REGISTER_FILES(r9, 0x1e, &(0x7f0000000000)=[r8], 0x1) 1m5.127808816s ago: executing program 1 (id=139): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@deltaction={0x2c, 0x31, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x5) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) r2 = syz_usbip_server_init(0x4) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) sendto$inet6(r4, &(0x7f0000000400)="aa", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x3f66400, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) shutdown(r4, 0x1) socket(0x10, 0x803, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000d00)=""/183) r5 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8000000, 0x7fffffe, 0x2d0, 0x110, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0xff, 0x0, 0x0, 0xffffff], [0x0, 0x0, 0x4c62d6309aaa1bde, 0xff000000], 'ip6tnl0\x00', 'nicvf0\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0x40}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0x7, 0x5f, 0x9, 'syz0\x00', 'syz0\x00', {0x10000}}}}, {{@ipv6={@mcast2, @mcast1, [], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) sendmsg$DEVLINK_CMD_SB_POOL_SET(r5, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001540)={0x0, 0xd4}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x7, [@decl_tag={0x10, 0x0, 0x0, 0x11, 0x3, 0x5}, @struct={0x4, 0x5, 0x0, 0x4, 0x1, 0x48, [{0xa, 0x3}, {0x10, 0x0, 0xffff}, {0x6, 0x5, 0x8}, {0x8, 0x3, 0x8}, {0x0, 0x5, 0x4}]}]}, {0x0, [0x30, 0xef, 0x0, 0x61, 0x2e]}}, &(0x7f00000005c0)=""/38, 0x77, 0x26, 0x1, 0x10001}, 0x28) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb00fd18000000000000000c0000000c000000020000000000000000004000000000000000"], 0x0, 0x26}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) r9 = syz_open_dev$usbfs(&(0x7f00000001c0), 0xffffffffffffff30, 0x20000) ioctl$USBDEVFS_DISCSIGNAL(r9, 0x8010550e, &(0x7f0000000240)={0x45d4, &(0x7f0000000c80)="7bb202aeaea6b5fded1654690b6252f999f04370f3df73b8c5e258274f41633121bb0f1761271cca6ad21d0ab3aa880c0ddff934d41575486033258168062f653b329da4bc36ff"}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r8, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r10, 0x4) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f00000006c0)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @alu={0x4, 0x0, 0xa, 0x5, 0x0, 0x6, 0xffffffffffffffff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}], &(0x7f0000000740)='syzkaller\x00', 0x5, 0x7, &(0x7f0000000780)=""/7, 0x41000, 0x2e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000800)={0x4, 0xa, 0x3ff, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000840)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x1}, 0x94) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000940)={{0x1, 0x1, 0x18, r2, {0xfffffffc}}, './file0\x00'}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a40)={{0x1, 0xffffffffffffffff}, &(0x7f00000009c0), &(0x7f0000000a00)='%pi6 \x00'}, 0x20) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000a80)={{0x1, 0x1, 0x18, r3, {0x401}}, './file0\x00'}) r16 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000ac0)={0x0, 0x7, 0x10}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x3f}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000440)='syzkaller\x00', 0xa0a, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', r1, @fallback=0x1d, r6, 0x8, &(0x7f0000000640)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0x5, 0xd6e6}, 0x10, r10, r11, 0x6, &(0x7f0000000b00)=[r12, r2, r13, r14, r15, r16, 0xffffffffffffffff], &(0x7f0000000b40)=[{0x2, 0x3, 0x3, 0x4}, {0x1, 0x4, 0xfffffffc, 0x8}, {0x5, 0x3, 0x5, 0x8}, {0x0, 0x1, 0x2, 0xc}, {0x3, 0x8, 0x6, 0x1}, {0x3, 0x5, 0x7, 0x7}], 0x10, 0x7ff}, 0x94) 1m5.118510897s ago: executing program 33 (id=139): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@deltaction={0x2c, 0x31, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x5) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) r2 = syz_usbip_server_init(0x4) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) sendto$inet6(r4, &(0x7f0000000400)="aa", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x3f66400, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) shutdown(r4, 0x1) socket(0x10, 0x803, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000d00)=""/183) r5 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8000000, 0x7fffffe, 0x2d0, 0x110, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0xff, 0x0, 0x0, 0xffffff], [0x0, 0x0, 0x4c62d6309aaa1bde, 0xff000000], 'ip6tnl0\x00', 'nicvf0\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0x40}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0x7, 0x5f, 0x9, 'syz0\x00', 'syz0\x00', {0x10000}}}}, {{@ipv6={@mcast2, @mcast1, [], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) sendmsg$DEVLINK_CMD_SB_POOL_SET(r5, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001540)={0x0, 0xd4}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x7, [@decl_tag={0x10, 0x0, 0x0, 0x11, 0x3, 0x5}, @struct={0x4, 0x5, 0x0, 0x4, 0x1, 0x48, [{0xa, 0x3}, {0x10, 0x0, 0xffff}, {0x6, 0x5, 0x8}, {0x8, 0x3, 0x8}, {0x0, 0x5, 0x4}]}]}, {0x0, [0x30, 0xef, 0x0, 0x61, 0x2e]}}, &(0x7f00000005c0)=""/38, 0x77, 0x26, 0x1, 0x10001}, 0x28) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb00fd18000000000000000c0000000c000000020000000000000000004000000000000000"], 0x0, 0x26}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) r9 = syz_open_dev$usbfs(&(0x7f00000001c0), 0xffffffffffffff30, 0x20000) ioctl$USBDEVFS_DISCSIGNAL(r9, 0x8010550e, &(0x7f0000000240)={0x45d4, &(0x7f0000000c80)="7bb202aeaea6b5fded1654690b6252f999f04370f3df73b8c5e258274f41633121bb0f1761271cca6ad21d0ab3aa880c0ddff934d41575486033258168062f653b329da4bc36ff"}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r8, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r10, 0x4) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f00000006c0)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @alu={0x4, 0x0, 0xa, 0x5, 0x0, 0x6, 0xffffffffffffffff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}], &(0x7f0000000740)='syzkaller\x00', 0x5, 0x7, &(0x7f0000000780)=""/7, 0x41000, 0x2e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000800)={0x4, 0xa, 0x3ff, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000840)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x1}, 0x94) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000940)={{0x1, 0x1, 0x18, r2, {0xfffffffc}}, './file0\x00'}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a40)={{0x1, 0xffffffffffffffff}, &(0x7f00000009c0), &(0x7f0000000a00)='%pi6 \x00'}, 0x20) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000a80)={{0x1, 0x1, 0x18, r3, {0x401}}, './file0\x00'}) r16 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000ac0)={0x0, 0x7, 0x10}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x3f}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000440)='syzkaller\x00', 0xa0a, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', r1, @fallback=0x1d, r6, 0x8, &(0x7f0000000640)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0x5, 0xd6e6}, 0x10, r10, r11, 0x6, &(0x7f0000000b00)=[r12, r2, r13, r14, r15, r16, 0xffffffffffffffff], &(0x7f0000000b40)=[{0x2, 0x3, 0x3, 0x4}, {0x1, 0x4, 0xfffffffc, 0x8}, {0x5, 0x3, 0x5, 0x8}, {0x0, 0x1, 0x2, 0xc}, {0x3, 0x8, 0x6, 0x1}, {0x3, 0x5, 0x7, 0x7}], 0x10, 0x7ff}, 0x94) 36.446013885s ago: executing program 2 (id=843): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0xffffffffffffffa0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x33fabe53b73c3a5a, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x40000000000000}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x3, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000000140)="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"/297, 0x3accf8d5) vmsplice(r6, &(0x7f0000000440)=[{&(0x7f00000000c0)='7', 0x1}], 0x1, 0x100000000000000) close(r5) ptrace$getregs(0xc, r4, 0x800006, &(0x7f0000000400)=""/54) 36.338862969s ago: executing program 2 (id=847): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) r2 = syz_io_uring_setup(0x38a9, &(0x7f0000000300)={0x0, 0xffffffff, 0x10100, 0x0, 0xfffffffe}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100f15e0000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='netlink_extack\x00', r5}, 0x10) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000280)={0xfffffffc}, 0x9) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x14, 0x12, 0xa01, 0xffff, 0x0, {0x80}}, 0x14}}, 0x10) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r1}) io_uring_enter(r2, 0x44fd, 0x3, 0x1, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000040)={[0xfffffffffffbfefd]}, 0x8) signalfd(r2, &(0x7f0000000180)={[0x8]}, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000040900010073797a31000000000900020073792005e5a27a32000000001c000480180001800d00010073796e70726f78790000000000000280140000001100010000000000000000000100000a"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r7 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r7, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b4003a00", 0x2a}], 0x1}, 0x0) 34.075407557s ago: executing program 2 (id=873): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0xfffffff7fffffff9) r0 = socket$inet(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x238, 0x238, 0x238, 0x98, 0x98, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) 34.01454089s ago: executing program 2 (id=875): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000640)='LX[X\x00.]%Jk\xe8\xd4M\xd7\xf9m\xa7%\xe5)J81`.\x7f7\xa6\'\x1f4\x06_0\xf3\x05\xc8\xcc\xf8\r:\r*w\x8d\xbd\x02\xd3F\x83\x82u3\xc7\x1bp\xa1=\xdb\x9e8H\a\xdc(\xb9\x84\f%\xb8\xd8\xd9\xa2`2\xc6V\xda\x14@\x12-\x94e\xca\xb8\xf8\x0e\xf4\xb2\x87J3\x9eucSYT\x81\xb2t\x13*\x8c\x8d\xdf\x17\xcc\xa7nO\xbb\x05\x95;\xcd\x10\x80\xfdx$\xc6CLk.\xe4Nin\xdaXH(\x97\xd1\x03\xe6\xec\x1d)\x98\xca\x83hy\x11\a\xda\xac\xfb{\xa6\xdd\x7f\xe2\xf5\xc4p=\x14v\x91\x92Hhd42\xbb\x00\x00\x00') socket$kcm(0x10, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000001cc0)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="af5d3f971e5ffc1d2dc0834da3fbd12dccb72db7e6448fbc5cbec5835c430e8acc180a5d13f7b02ec12b78197c3e9c04018262efd75917e1f0b6f6ca420de858f1dae88924261d018cd70e6c3107a703863892ba2917f740f906fe89332aca8844d172e3964ffb66b078f7958af167fa35e6e94770fcaf9894b04ef5041e195547ba9324efbb2b3ae740caf22cea25c1aa0b9c318ac2045c4b1803e85fa519783f068eadd8e6537af985e6a58f2565cf442c70f92525c0508883f71108a064f894969165c327d58910bd7a6f6d644ae42460286e0bd49bdfa36689a50f8139270260119b510af283535888a619dd87143ed132534dc207bf84b9fbcb7bcf0aa8d80cecf163698aea067f1dcecd060d09b6306d7fb7fc0739928c07a8950d9c6da8d5645a0207401b265c63f20c6f7c6088c29cd269f2591e7f5785eae1a8d03ec82b944c3e9e444dceac5bb83a94f829f7977ae8aaa914db4f55168cfae0c91dc8fe6f9d18aaaf3274d70fc0b24a205903de3c5cf1f4a394838d1dd8ca1b3d186da5a5d71baef6a2a4e1289f67a955064cb44a687d1cce0503901477103bc2249a8b94290c92b507705c9a2018e3432e600255ddcfa23584e2d7275fe9e3ee5cc4cf6a007738e94a73affbcf7ff72f999e3f59608566eb1e7d81dcc88368429356a00dee6e5ff18f6811a3f2ee658d1b3cf733efd5b3b872a1603abe9f24dc9d3b7cf1504383211d826aaceddd9f0101c0c3906692ea6789f676daeaccc6306ae3b22e4627bfe4af031b262fb89f303ee0e55a6abba24582e41fea15c7159dc930cc109453b8fdcfd7eb5f4403608cd572fc5cda546adde9a8faccd67eddb5a786362f9848a6c6429cd3a2ba88cb0e95d4f5b555e1a7660cf1395b6b03c1d5ec720e3c4f53a22365bffba6991666203e9acf947c313390e6589bab6aac4f0247e1353d6f8f9a1e5add12fd457fb83f495d2d46bd4103d2af0e6ee5ce4ae36c8700d3e5eb2dcb08e5fcda6cb15151dd2442ad17dbfc27d07dfac2a4ffee984d76543263491cb1a0d35e487408b3a92aec9ff2d197b172bb3da86bfa039707ddcc21cba40bd5292db2f88806c9e304f320caab76177604d4aaa0797cb48e429896985128538e6874784771e6484e17aa54ca0c203a1ac39f88158cc136b1f1c7339ef180ab75ae2599da6dc503f34f29dc9a63205e575a788188d2b6da130d0964e15eedc043df55e368c6c89adc8ce76cd8f4b5e69450e059cea37b38c72438b66b3950b85d22c38d69552c67db80215eae0ee1a642adc0a2bc44e68842e7a4e86a2f1cd31a76805f93b453e5ffa578f9de5c1ee819a3766daff39ef72648d50747cccb5f67f13647861d2e97186b3c70663c2fd7dfd1608b731ab237cc8e694ac9e785328af2c9755f22620ba9439f9a2b9f9be165eab6a46372c0844475cdc578331bdd2a677a2b99438c12e6db363dcf76a874ad0bad108a20e7f0add261b8f035abee4f5f4e485a9b49fbacbddc37d5f1b2aeba7986f2fa243969b191aa00f5d8fb8e9a0c530799b97faf9b3e0c032ad1e0565e2e21c7f9152b6528d0ed65588cb364e27878faec34c09479150fc92871c580abab694b5943b094600cf6cb1f073adda679ffe375f5d333d7f862199cc5a30b5ba2a4a8ac536af37c7949512abfa2345f3f7c978d1b88e9e8cebc17e4c709713df7602959608ad1c3b54dff2f0ef4668ee0e6124052ad27c335deaafdfd22ac07cefd2881e1883258ed57ae7ea38c827902361f8719b3c99eedcc041a5e63b6661bd922100b8d0f5bab8b81d0690e2a7c834493b660b83f3d83bf2af3bff05ce1fc16889a7f11d7f552623611b462d640b5f1aaeaf7d138418bf6a3650711a81520dd490afe9a3794fa343069393ace5f5b4ce53a6e2cec12db7d4af3c76fac015549fc7393bd17b7790b2dcecfddb67f8ce01a4f00df0f6a1bf1b711cfa42968b623187468e94ed712aba71b51c553e91f24b0bc408bffac0a61c1d7404155a146011570362b85249f2b010a1d7119ba803b7f1572575e42a655e4b44b1efa8fd7c1056944f59cf7f1339d76d2874c5192dac9ef21fa665eaa2225f3e5f589b66e39b4b6bb8a744bfbec49e34db57fcfcb5b667dad4964b27a4b06bd6049ce3039a4f2646da1f5b043d6373337317d2de67a6cd663f18db4d4a46addee5127cef2f1f4865558df87138b06f7be1f584d18449ca5c9172a4232c2c972408c42a7a04164c49d2e9ec6abd6bf8bea3a9c9bde953c6c6c0a437b33955fd0041aa0b815ffb057faf37162dfa1f67d0ea59a147b81e33fffa6a3f2edb7daa477438bc22d9d6b3a37f08ce1cbd4e1edbcbdf488b7fe7db3be63960cb3498098ceff7fcd70121ed5f6a93c90560b5799d2cfdb61f54d9bcfefe6c7c430a356d3eb73d047dc47359440d87f2e2f0bad7168af007208d2ad3a2ad86fb106bb5b0f3b5332f8bade340ca0b65a735575412c2ec39b02b651aea98aef626dae15880f87591022737308bae8a1c5ddfccc76c56095a90dadd1320eed578ac46d5abafe3ca86f748d10d4cc6035b44301d3d478d254df07b4053246337c1b1465bd8803196b26274b40c57e2efb701799e1416cfec30545dec0c87e7866cd8b93b0f01defa1a0b77400a548f97c65ee06b565c8de2f9623fda8b610103930f5210a94b66e6b86962a041c6350d69cf65523c88f074d8340b4d788620b703217d86f39e9fe65d2146600097c4ef5f89140e4b2b9d39c5edb1a554c8d02e2bb180ea0fe1e097fd031aaf1c02f8c069e40cf5e7225b0a2f25d28f697367350429b1fe71c7d159118b7962047162479af815caed6acd58f3c521c6b9a7498a06265d4164c816e8364e103cbc2e5d510130198b020a580a013915ef2887b1246e46b32e181c2e45a2580cfb23b7603894e7cf70bd08d8589f9024f5600f5c7c6945f6526c7b96e5b0b4e4168bceed0a8c81700afa0d5b9993af182b2bd73c793aeeb639f9ea2b6ccf33fead12535206d171061cbe3284f6cce8732e1d60939873039937192531906fd8915f12f0b69efc14380280153d5c7b99fdac7aae57a7a19ceb91e96081b49f52482199b2590aa36deed97fb24239a00b1aaa26c768691702b269fb4b7d4735574dbcaad468073459bb9051e0dc3a3934cb38e30c0d530f98bf7aa03e9683b641ffa9330ce2700320e6f01d5d93a091ad0b614d4057abb8563cadd46a4ac555cad643b40901ed430b9702bb01f504ae4592f9e9ab1cc9cd444a5ee830b1851e8efd99487c95391751477e052e971e5cd2d537ded654e723b5537531a0ce1b881b4e08463a1ac213ae9d4a653f57d095dc1a0f01247dd3215772c89be272fcabcae648b6ca6148d71aab7d965ff375fdaa0101cdf128cab31846b1cc920d0bee15c9806ae373feeca320d67e965a8f90db28f4737638884032701082b1bbefcee05dfa045d9e0eb92b3b0fa8b95cc218ed4e44b97138c5d35ca8edeb5eac5c35275b250eb66f2ec8077e18b6893e66b97531d91dbbd80b16867a64ebb8d79493abd50cff1819771264eafc0390a37ec7c18f782f53c3e59180a7da9ead43e0d1d80d1bf9022fa724cc5487d971a410b307702b1c84273d9ed3f5a6e49ba9e207b8f4af0ce27b86adca4a3171434ae0bae10e670cafa19962d94fc935e677a8a9c644d9a9311defef398030e00f09b1d0b9e207bf8fb410f870e002128c178e1eb618d62d5e757f134ae274c2e3fc8435b1aa1ec067eecf8f9a38c389c4a5a5ce0a9534b93e29cdb27298f3baa4faacac031b399fc75fed34d2f59d42157c0b3474e1b4c35070c519b04d6a1dee5b5f8ed71b79d130d6c8fd6f6524f9c4162bf6179a60980b881a46e979572060457944b8457885924ed222613e874df8299e4f5ac444c9d44ac41f5e88fa8a1905432e81584fab56cfcb040df6c46c955542d11ff3193a886e6753705a278cd0d6f3fbfc7233d3517b46b9e7265fc356b8d977f0b41aff849b6b975a644787c0d5e316d2f1e7bb0a357b1f5d44ea7017c6f122ba8a4173ff1fb4ca49d95d16d9870945b5278219f0ecc6362be754ab2ac45f8ca70da610c16d072c8f83ab040780b5d3a1b002814a1832b36d99daa584790b03335ae28b55a10610d7084de210d2f278a332740b1e155d7305e7caa488b082c7fa1b5163aa89738bc22d6acc99e611e75e73f2d94133a21c9c88d95c90eaf71a652fc2443279add3a8dd0b84ed4a13c607195851c0d64b329d9b45f93d7c339f0e38b05c09812b755347bd2d9877ba69685f47cb025c8b068f6f1bbc35f8c4338c8b5cad395578f63f0daf7db9576e302f64ac9a735e41c40c6e4586393d1c1b571180ea4270434e37ffecd8f1cd724ea9c9d1c6d78fa1e201bf4ff06f55698eebdff0ffd48157e00a59488b13869ec2b222b99537e4b1356224680a6aca68e152c1108449a801929aa3c0c64f4b7756fcd21a2a37ff0bdb12266846bdf9987ec850bce4fcc0b60d0daf0b1de06523ec119a67923cff03ef60904e2469c98cb8bd8ceba528fe04970346c7c9ae3a913cb9f1cae127cb71e47bc44fe6d42804d8003491415eb046ed0f014bbd592510b8b473e03a330209381c6c66c03a83181e6b3bd2868b9e98bdcb8155eae3da2846aa37d877abe6c60e7ae089d2a9a3ac3f5b1d22984bc7764b53f98d0a079577ab4ef66c8d740252e85b63f77393d54d75ca800cb8228da52b4d639eb5cba271d460cfa7132924a2a48ccf3dd502800ccd12ee93a601abaf007b0c496905a273fad73b8b47cf9f9565e6ceb5ddd06667beb5db5d4203af48319f99b148d15ec655638694720f8061f8b8fa67178f18b3681b17d19ec59396664f59be391c91006b60a00bc72a77e01351e81f12e4e197ee76530e56b1e1b94db8cdb717bb631f31e03f96ec81ff34207e57e1f28dfdc7483a50028c4e2ee8016826d8577799fbb68802b5db699173a486d9b6d03654284403a70f45db4922d0406a4e77a32d0bbb50df36e0abd911aea59635deab66a21251fbab73012f62882bd5ad23c8bb8b0aa34df663cbede402c42d462de50eafeccb114a9f0721d5fbc556f8e4cda79b449f12d1cd9e6dc032c6835ccc220f31801d212ba0a45499f5ec49ecd64cbcf9752c5aa9a6029ca23e7f86c88f51d9e6008633d8b4ad3885d473864c6f354e9687135275d0a04563549fd51fea75fd7a1d66e460e6e242dea9e895d368d501675d31ecdea92e6785a8259f4a2d8e861fec4b51afe0588257fa7caa7322a983b45a113ff8364b63172b7210c811d2245461f300c3e0949381dec44f2e213e0554c41a547a4a8b5a09fa37d06d86411008c40744f7b2ac2f9e714391e7a7456a4049de6b493c34ef2893708e9eb8412fe5b9384c845feeb07014e57d5fd4193ca35c141cdcc33e7313ee5c6bcc714bcd938b3f449f451412dae3141feaaf42f5b76450bb4b7da10069f2582c172377d5c6068071a96d6c272b8bb41c7e40a64a45dbc7e598d7877a5314d6762c8679f8ec54924ef2e56d78d7f627fc90d014d9752506e2b15cc6f020e1487b09e04472c45107100aa86e4570a0b82e8adb8cf7c1eaed0e078a0b84f76b69267ad5f8e1de8a3bd582e044cd77f0a46ef85fd00280f727c6a96f7fede83ec92278539911326a357e71fbe58394a6b52359a9609879c7e89772d371068c3ac93b56bd49e16d7fdbebe33fee11c05943f6098a17417b7974131c122a9c42f06952b4dc98ed48c69cecc1fb1dfe3cd15127964a2", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) r0 = socket(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f00000002c0)=@proc={0x10, 0x0, 0x25dfdffc}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000880)=@newtaction={0x12c, 0x32, 0x4, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x118, 0x1, [@m_sample={0x114, 0x1, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x3, 0x20000000, 0x0, 0x8}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x1ff}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x200, 0xffffffffffffffff, 0x7ff, 0xfffffc00}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x1, 0x6, 0x3, 0xa}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x4, 0x68c, 0x7, 0x1, 0x10001}}]}, {0x75, 0x6, "1694b5426fb245e72fc5a918e0bcd1a04704d50200246c0de8b8c04ab1eac88d58a5699aa0170787aba1cd93aa975cc0d71f2888f8e404cfb9e514151dd2889b9b9b7a8bc6e1f18fd6c737ec5be344c60f197983dac5b17c6f2a0f4ecca5e6d58c8781f1a366cc9040d5d527dc70ad1900"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x8000805}, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x129041, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, &(0x7f0000000280)) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) fstat(r3, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x28007c2, &(0x7f0000000680)={[{@delalloc}, {@resuid={'resuid', 0x3d, r5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid={'resgid', 0x3d, r6}}, {@acl}, {@dax_always}]}, 0x0, 0x483, &(0x7f0000001040)="$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") ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {0x0, r6}}, './file0\x00'}) openat$cgroup_ro(r7, &(0x7f0000000380)='cgroup.kill\x00', 0x275a, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001280)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1200000005100000", @ANYRES32, @ANYBLOB="d6405042a064c03a520deb57e8f0563226d6b4c5dd677732a84d0e41147273a8c74d282d7a64219283919948013a882684903b0991eec080cb7fb11dd369b5b581b6fb4b2f2e82fcfd34342d6cf9", @ANYRES32, @ANYBLOB, @ANYRES64], 0x20) openat$sndseq(0xffffffffffffff9c, 0x0, 0x181000) r8 = perf_event_open(&(0x7f0000001040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x10000, 0x0, 0x2, 0x7ffffffd, 0xfffe, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xe000000000000000, 0xffffffffffffffff, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000004c0)={0x9, &(0x7f0000000440)=[{0x913, 0x6, 0x7}, {0xccfb, 0xfd, 0x7, 0x7}, {0x8, 0x10, 0x7, 0x71c96b85}, {0x3, 0x16, 0x2, 0x9}, {0x8, 0x7f, 0x8, 0xf9}, {0xf171, 0x9, 0x5, 0x7}, {0x2, 0x0, 0xc, 0x8}, {0x4, 0x2, 0xa, 0xa60f}, {0xfffa, 0x2, 0xfe, 0x9}]}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x110, r8, 0x10000) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r9, &(0x7f0000000280)='tasks\x00', 0x2, 0x0) syz_clone(0x4000, &(0x7f0000001000), 0x0, 0x0, 0x0, 0x0) 33.929735374s ago: executing program 2 (id=877): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1, 0x0, 0x400004}, 0x18) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000240), &(0x7f00000003c0)='./file0\x00', &(0x7f0000001400), 0x0, &(0x7f0000000140)) 33.625791327s ago: executing program 2 (id=881): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000080)={0x22, 0x11, 0xd, 0xa, 0x0, 0x4, 0x0, 0xb1, 0xffffffffffffffff}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="660a00000000000061114c0000000000850000001500000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1, 0x0, 0x400004}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x6, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb600000000000000008d0000007500000095"], 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000240), &(0x7f00000003c0)='./file0\x00', &(0x7f0000001400), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d307830303030303030303030303030594bb75eaa"]) 33.625169757s ago: executing program 34 (id=881): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000080)={0x22, 0x11, 0xd, 0xa, 0x0, 0x4, 0x0, 0xb1, 0xffffffffffffffff}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="660a00000000000061114c0000000000850000001500000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1, 0x0, 0x400004}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x6, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb600000000000000008d0000007500000095"], 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000240), &(0x7f00000003c0)='./file0\x00', &(0x7f0000001400), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d307830303030303030303030303030594bb75eaa"]) 12.562391374s ago: executing program 0 (id=1223): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000200), &(0x7f0000000280)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kfree\x00', r3}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000000206010100000000000000000000000005000100070000000900020073797a30000000001400078008001240fffffffe080013400000080015000300686173683a69702c706f72742c6e6574000000000500050002000000050004"], 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0x8) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x100000000000000}, 0x18) chdir(&(0x7f0000000000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYRESHEX=r6], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) 12.548129144s ago: executing program 0 (id=1225): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0xc0, 0x4d, 0x7fff0000}]}) socket$phonet_pipe(0x23, 0x5, 0x2) r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000001000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r2}, 0x10) connect$vsock_stream(r0, &(0x7f0000000080), 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000ffffff80e500020000000000c500fcff000000007f00feffd100000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff6f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r3}, 0x18) sendmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)="1b", 0x1}], 0x1}}], 0x1, 0x0) creat(&(0x7f0000000580)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) 12.472166188s ago: executing program 0 (id=1226): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001b1401002abdd444d446df250800010000000000090002"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) r1 = socket$caif_stream(0x25, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0xa3b, 0x80, 0x3, 0x1af}, &(0x7f00000001c0), &(0x7f00000002c0)) io_uring_enter(r3, 0x47f8, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x2325, 0x462f, 0x71, &(0x7f0000000040)={[0x1]}, 0x8) sendmmsg$inet(r1, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x1000000}], 0x2, 0x0) cachestat(r0, &(0x7f0000000000)={0x800000d4b7, 0x8}, &(0x7f0000000080), 0x0) 12.391781121s ago: executing program 0 (id=1228): r0 = syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000080)={[{@grpquota}, {@nomblk_io_submit}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c4000000190001002dbd700000000000fe880000000000000000000000000001fe8000000000000000000000000000aa00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000070000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000000000000000a001000050000000000000041d52c93bb0bb515dd8e8c52dd27ad42c6379d471580b89c2a7071e172265d3f1db47211eca5cba487362e9bf99db199ba379585ece7866fca3e182dd167bd27b057ee7db3bd5b468d03bfd2976657e97eb060b31fc0978bf49e551a59751bcb07377e1ec4020a74000000000000000000"], 0xc4}}, 0x0) socket$inet6(0xa, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r2, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x1c9441, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) (fail_nth: 1) r4 = creat(&(0x7f0000000140)='./bus\x00', 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigtimedwait(&(0x7f00000000c0)={[0xffffffffffff8518]}, 0x0, 0x0, 0x8) write$cgroup_int(r4, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) quotactl_fd$Q_QUOTAON(r3, 0x80000601, 0x0, &(0x7f0000000400)='./file0\x00') ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0x2, 0x1, 0x8000000000000001, 0x7}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) 11.74685125s ago: executing program 0 (id=1235): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@fwd={0x2}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x5f, 0x4f]}}, &(0x7f0000001540)=""/4096, 0x40, 0x1000, 0xa}, 0x28) 11.743479669s ago: executing program 0 (id=1240): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000006c0)={0x0, 0xfffffffffffffd08, &(0x7f0000000680)={&(0x7f0000000480)=ANY=[@ANYBLOB="700000000009010400000000000000000a00000008000540000000160900010073797a30000000003c0002000c00028005000100000000002c000180140003000000000000000000000000000800000014000400200100010000000000000000000000020c000480050001"], 0x70}}, 0x4008000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) socket$netlink(0x10, 0x3, 0xf) r1 = socket$netlink(0x10, 0x3, 0xf) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0x77bc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$netlink(r1, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20300}}}}}}]}, 0x48}}, 0x4040004) 11.74145438s ago: executing program 35 (id=1240): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000006c0)={0x0, 0xfffffffffffffd08, &(0x7f0000000680)={&(0x7f0000000480)=ANY=[@ANYBLOB="700000000009010400000000000000000a00000008000540000000160900010073797a30000000003c0002000c00028005000100000000002c000180140003000000000000000000000000000800000014000400200100010000000000000000000000020c000480050001"], 0x70}}, 0x4008000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) socket$netlink(0x10, 0x3, 0xf) r1 = socket$netlink(0x10, 0x3, 0xf) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0x77bc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$netlink(r1, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20300}}}}}}]}, 0x48}}, 0x4040004) 6.597588003s ago: executing program 5 (id=1336): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r0, @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) setgroups(0x0, 0x0) semget$private(0x0, 0x5, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x248, &(0x7f0000000400)={[{@dax_always}, {@jqfmt_vfsold}, {@data_err_abort}, {@usrquota}, {@dax_never}]}, 0xfd, 0x4a0, &(0x7f0000000e00)="$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") r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x2d, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000340)='attr/sockcreate\x00') ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000340)={r3}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x1000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f00000002c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) sendto$inet(r5, 0x0, 0x0, 0x12, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000100)=""/24, 0xfffffffffffffd5b, 0xc9100120, 0x0, 0xfffffffffffffd25) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b90402000000008000000000150010001400259070f409000d2000000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee05e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5e08001b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6cce50dd6e4edef3d939acd92954b43370e970100"/216, 0xd8}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r2, 0x0, 0x6}, 0x18) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x511a01, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000049f789c050f00000010000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) 4.401801039s ago: executing program 4 (id=1368): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000540001610900000050005a0007000000", @ANYRES32=r1, @ANYBLOB="20000100", @ANYRES32=r1, @ANYBLOB="000002000000000000000000000000000000000186dd"], 0x38}}, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) r4 = dup2(r3, r3) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x2, 0x0, r3, 0x8, '\x00', 0x0, r4, 0x1, 0x1, 0x1}, 0x50) (async) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) (async, rerun: 32) ioctl$BLKTRACESETUP(r4, 0x1276, 0x0) (async, rerun: 32) ioctl$MON_IOCX_GET(r4, 0x40189206, &(0x7f00000000c0)={&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000180)=""/39, 0x27}) (async, rerun: 64) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (rerun: 64) 4.401580639s ago: executing program 4 (id=1369): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="18010300000020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000020b7030000070000008500000006000000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000080)={0x0, 0x1}, 0x8}, 0x94) 4.37336639s ago: executing program 4 (id=1370): r0 = socket(0x28, 0x5, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000d80)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x600b42, 0x0) syz_io_uring_setup(0x6b88, 0x0, &(0x7f0000000500)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000004040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x77, 0x29c780, 0x23456}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYRES32=r3, @ANYRES32=r3, @ANYBLOB="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"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = dup(r5) fsetxattr$security_selinux(r6, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x1}, 0x10) listen(r0, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000280)={0x0, 0x0, 0x20, 0x9, 0x6}, &(0x7f00000002c0)=0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r7, 0x0, 0x24040010) r8 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffffffffffe50) uname(0x0) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, 0x0) r9 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40088a01, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10) openat$vcsu(0xffffffffffffff9c, 0x0, 0x100, 0x0) 4.37163886s ago: executing program 4 (id=1371): mlock2(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x2}}, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000000c0)='./file0\x00', 0x204888, &(0x7f0000000380)=ANY=[], 0x1, 0x33f, &(0x7f0000003800)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="080000000200"], 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r2}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r2}, 0x10) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$cont(0x9, r3, 0x7, 0xffffffffffffffff) (async) ptrace$cont(0x9, r3, 0x7, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0xfffffffffffffdf9, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r5}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r5}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket(0x10, 0x3, 0x9) connect$netlink(r6, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) (async) connect$netlink(r6, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="1400"], 0x28}}, 0x0) 4.198459688s ago: executing program 4 (id=1372): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) 3.942374839s ago: executing program 4 (id=1375): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2e, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000400000028"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000240)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x24, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000001040000000000007f00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000d4156c53e03478473633305eb78cc107de6521636cfd40be26c750754ee1", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000800000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000186a0000060000000000000007000000119b00000400000018220000", @ANYRES32=r1, @ANYBLOB="00000000000000001856000001000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r5}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18) mq_open(0x0, 0x6e93ebbbcc088cf2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0xec}) 3.942027139s ago: executing program 36 (id=1375): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2e, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000400000028"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000240)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x24, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000001040000000000007f00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000d4156c53e03478473633305eb78cc107de6521636cfd40be26c750754ee1", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000800000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000186a0000060000000000000007000000119b00000400000018220000", @ANYRES32=r1, @ANYBLOB="00000000000000001856000001000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r5}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18) mq_open(0x0, 0x6e93ebbbcc088cf2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0xec}) 3.710391099s ago: executing program 5 (id=1378): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 3.665426651s ago: executing program 5 (id=1379): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe00}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x1a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x100, 0x6000}) io_uring_enter(0xffffffffffffffff, 0x1b9e, 0x3cb3, 0x6a, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x4}, 0x18) openat$rfkill(0xffffffffffffff9c, 0x0, 0x6100, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd2d, 0x1, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x300}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x3000000, 0x40000000}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8000, 0x5, 0x0, 0xfffffffc, 0x5, 0x9}, {0x0, 0x8000000}, {0x0, 0x0, 0x800000, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5, 0x20}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x470a, 0x0, 0x8000000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x0, 0xfff}, {0x8000000, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x20000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffc}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x60569add}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0xfffffffd, 0xa}, {}, {0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x2}, {}, {0x80}, {0x80}, {0x0, 0x0, 0x0, 0x5, 0x5}, {0xfffffffc}, {0x8, 0x0, 0x8}, {0x0, 0x2, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x8, 0x0, 0x3}, {0x0, 0x9}, {0x0, 0xffffffff, 0x10}, {0x0, 0x0, 0x0, 0x8510}, {0xfffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x2000, 0x0, 0x0, 0x8000000}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x7, 0xfffffffe, 0x0, 0x9}, {0x0, 0xfffffffc, 0x200}, {0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {0x800004, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x800}, {0xdb3, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xdfffffff}, {}, {0x3, 0xfffffffe}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, {0x0, 0xb}, {0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0xfffffffe, 0x2000005}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x9797, 0x0, 0xec33, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, {0xb, 0x0, 0x0, 0x0, 0x0, 0xfe1}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0xfffffffc}, {}, {0x0, 0xfffffffd}, {0x6}, {0xfff}, {}, {0x0, 0x8, 0x0, 0x0, 0xfffffffe}, {0x4, 0x2, 0x2000000, 0x2, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0xe9d, 0x58a}, {0x2}, {0x2, 0x9, 0x20000000}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0xfffffffe, 0xe600, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x10000, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x963, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x164}, {}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x6, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x2d, 0x0, 0x10000}, {0x0, 0x0, 0x8000}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800, 0x4}, {0x0, 0x3}, {0xffffffff, 0x0, 0x0, 0x0, 0xd}], [{}, {}, {0x0, 0x1}, {0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {0x5}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x5}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {}, {}, {}, {}, {0x5, 0x1}, {}, {}, {}, {0x2, 0x1}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {0x2, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) mlockall(0x2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x1d, 0x2, 0x6) (async) r6 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000100)={0x1d, r7, 0x2, {0x1, 0x0, 0x2}}, 0x18) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0xd1) (async) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0xd1) sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x28}}, 0x44001) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r6) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x51, 0x1, 0x0, 0x0, 0x0, 0x7, 0x98142, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x4190, 0xaea}, 0x4105, 0x1, 0x6, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40000000000a9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2225, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) 2.995459761s ago: executing program 5 (id=1384): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 2.892909515s ago: executing program 5 (id=1386): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001000)=0x7) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES64=r0, @ANYRESHEX=r0, @ANYRES32=r0, @ANYRES64=0x0, @ANYRESDEC=r0], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r1, &(0x7f0000000180), 0x0}, 0x20) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = gettid() mkdir(&(0x7f00000003c0)='./file0\x00', 0x12c) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='configfs\x00', 0x0, 0x0) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000080), 0x18) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100), 0x4000) utimensat(r4, 0x0, &(0x7f0000000180), 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r3, 0x6, &(0x7f0000000400)=""/132) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = add_key$keyring(&(0x7f0000000540), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) waitid(0x0, r7, 0x0, 0x1000008, 0x0) 2.862312976s ago: executing program 5 (id=1387): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000840)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x1000, 0x5, 0x3, 0x1, 0x9}, 0x9, 0x1, 0x1, 0x6, 0x41, 0x11, 0x12, 0x6, 0x4, 0xfffffff8, {0xe61a, 0x8000, 0x10006, 0x1, 0x6, 0xbf5}}}}]}, 0x78}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d0000008500000023000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='ext4_mballoc_alloc\x00', r2}, 0x18) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x430, 0x0, 0x2b8, 0xb0000010, 0x2, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x10000000, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x0, 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) syz_emit_ethernet(0x5e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000286dd600a843500140601fe80000000000000000000000000bbfe80000000000e0000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a08000009078000013128e9bd1bcfa9a44cc18c7c11b454d80600000"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200"], 0x0}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x40000c1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000035c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0) msgget$private(0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r7, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) shutdown(r7, 0x1) splice(r7, 0x0, r6, 0x0, 0x2, 0x0) r8 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bond0\x00'}) 2.08328021s ago: executing program 6 (id=1396): openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xb) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYRES16], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) removexattr(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x20780, 0x40, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000008c0)='rxrpc_call_reset\x00', r2, 0x0, 0x1}, 0x18) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000840)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x1}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x200000, 0x3}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x2, 0x1}, 0x10) sendmsg$tipc(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000090}, 0x95) r5 = dup3(r3, r4, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xcb3dace554d77547, 0xb, &(0x7f0000000280)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x75, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000180001000000000000000000020000000000000900000000060015000200000014001680100008800c00018006000180"], 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}}, 0x4000000) socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x0, 0x80, 0x4, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x66, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}, @rand_addr=0x64010100, {[@ra={0x94, 0x4, 0x1}]}}}}}) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.788696363s ago: executing program 6 (id=1398): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000005e002200850000006d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32=r1], 0x48) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000800)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="1500000000000000000001000000100002800c00018008000100030000000c00018008000100", @ANYRES32=r3], 0x30}}, 0x0) 1.741374975s ago: executing program 6 (id=1400): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, &(0x7f0000001540)=""/4096, 0x0, 0x1000, 0xa}, 0x28) 1.666355668s ago: executing program 6 (id=1402): r0 = socket(0x2, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x2688, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x18}}, 0x4020) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x51}}, &(0x7f0000000480)='GPL\x00'}, 0x80) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_CREATE2(r1, 0x0, 0x8) 1.609756101s ago: executing program 6 (id=1404): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001000)=0x7) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES64=r0, @ANYRESHEX=r0, @ANYRES32=r0, @ANYRES64=0x0, @ANYRESDEC=r0], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r1, &(0x7f0000000180), 0x0}, 0x20) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = gettid() mkdir(&(0x7f00000003c0)='./file0\x00', 0x12c) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='configfs\x00', 0x0, 0x0) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000080), 0x18) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100), 0x4000) utimensat(r4, 0x0, &(0x7f0000000180), 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r3, 0x6, &(0x7f0000000400)=""/132) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = add_key$keyring(&(0x7f0000000540), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) waitid(0x0, r7, 0x0, 0x1000008, 0x0) 1.578640551s ago: executing program 6 (id=1406): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000160033060000000000000080ff0100000000000000000000000000017f00000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000004d232000000fc02000000000000000000230000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000500000000000000ffffffffffffffff0000000000000000050000000000000004000000020000000000000006000000020000000a00049819000000000000000c0015005c073500010000"], 0xfc}}, 0x0) 1.578098871s ago: executing program 9 (id=1407): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="18010300000020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000020b703000007000000850000000600"/63], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000080)={0x0, 0x1}, 0x8}, 0x94) 1.564976942s ago: executing program 9 (id=1408): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$eJzs3U9oHGUbAPBnZrNN/+T70g++Dz6lh6JChdJN0j9aPbVXsVDoQfCiYbMNJZtsySbahIDpvYg9iEov9aYHj4oHD+LFo1cvimeh2KDQ9KArm51N03S3bmI2W7O/H0z2fWdm93nfmX3e7AwzTAB962j9TxrxVERcTCKGNywbiGzh0cZ6qytLxfsrS8UkarVLvySRRMS9laVic/0kez0UEcsR8f+I+CYfcTxd/8h9zUJ1YXFqvFwuzWb1kbnpqyPVhcUTV6bHJ0uTpZlTL7505uzpM2MnxzY2935tYy2/tb7e+PHmuze+e+X2zU8/O7JcfH88iXMxlC3b2I+d1Ngm+Ti3af7pbgTroaTXDWBbclme11PpfzEcuSzrW6ltHBwGd6V5QBfVBiNq6zYUgT6QSHroU83fAfXj3+a0m78/7pxvHIDU466uLBXfiWb8gca5idi/dmxy8NfkoSOT+vHm4d1sKHvS8vWIGB0YePT7n2Tfv+0b3YkG0lVfn2/sqEf3f7o+/kSL8Weoee70b2qOf6vZ+LfaIn6uzfh3scMYv7/+00dt418fjKdbxk/W4yct4qcR8WaH8W+99uXZdstqH0cci9bxm5LHnx8euXylXBpt/G0Z46tjR15u3/+Ig23iN87Z7l9ryMb+78valHbY/y++/fyZ5cfEf/7Zx+//Vtv/QES812H8/9z75NV2y+5cT+7WfwVsdf8nkY/bHcZ/4dzRH7Kis4YAAAAAAAAAALCD0rVr2ZK0sF5O00KhcQ/vf+NgWq5U545frszPTDSueTsc+bR5pdVwo57U62PZ9bjN+slN9VO5LGDuwFq9UKyUJ3rcdwAAAAAAAAAAAAAAAAAAAHhSHNp0//9vubX7/zc/rhrYq9o/8hvY6+Q/9K+H8z/pWTuA3ef/P/StmvyH/iX/oX/Jf+hf8h/6l/yH/iX/oX/JfwAAAAAAAAAAAAAAAAAAAAAAAAAA6IqLFy7Up9r9laVivT4xsDA/VXnrxESpOlWYni8WipXZq4XJSmWyXCoUK9N/9XlJpXJ1NGbmr43MlapzI9WFxTemK/MzzWeKlvJd7xEAAAAAAAAAAAAAAAAAAAD88wytTUlaiMg36mlaKET8KyIOJ5FcvlIujUbEvyPi+1x+sF4f63WjAQAAAAAAAAAAAAAAAAAAYI+pLixOjZfLpdnuFQayUF0M0XlhYCsrR8Tyzjaj/olbflc+24A93nR7o5B7Mr6HT36hh4MSAAAAAAAAAAAAAAAAAAD0qQc3/Xb6jj+62yAAAAAAAAAAAAAAAAAAAADoS+nPSUTUp2PDzw1tXrovWc2tvUbE27cufXBtfG5udqw+/+76/LkPs/kne9F+oFPNPE0jop7HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAPVhcWp8XK5NLvNwmAH6/S6jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADb8WcAAAD//y4WzlE=") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x160) fcntl$setlease(r0, 0x400, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 1.424940418s ago: executing program 9 (id=1409): syslog(0x4, &(0x7f0000000000)=""/200, 0xc8) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r6 = socket$vsock_stream(0x28, 0x1, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffff00208500000070000000850000002a00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r7}, 0x10) bind$vsock_stream(r6, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) listen(r6, 0xa) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r9}, 0x18) close_range(r5, r8, 0x0) 638.132683ms ago: executing program 9 (id=1413): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) 546.560056ms ago: executing program 9 (id=1415): r0 = socket(0x2, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x2688, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x18}}, 0x4020) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x51}}, &(0x7f0000000480)='GPL\x00'}, 0x80) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_CREATE2(r1, 0x0, 0x8) 507.588759ms ago: executing program 9 (id=1418): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xa, {"a2e39b214fc752f91b2909094bf70e0dd038e7ff7fc6e5539b324d078b089b3b0838681a0890e0878f0e1ac6e7049b3d6d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b343b0d076c0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0d9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c30900004288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef7becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda930b000000cbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe505003d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6ae4effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d71eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d471c8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949d9a92587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15aa82000000000000a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000", 0x1000}}, 0x1006) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20000080) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x800, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb43, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bind$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x10, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0xffffffffffffffe7) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xb1, 0xbd, 0x2f, 0x8, 0x47d, 0x5003, 0x2f8c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa0, 0x58, 0xb7}}]}}]}}, 0x0) pipe2$9p(&(0x7f0000000000), 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r4 = openat$incfs(0xffffffffffffff9c, 0x0, 0x1a10c3, 0x9c37611dc13d0d83) fchown(0xffffffffffffffff, 0xffffffffffffffff, 0xee01) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000001040)=""/222) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001140)=@updpolicy={0xc4, 0x13, 0xcb23c9c9931e99e9, 0x1, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9}, {0x0, 0x0, 0xc}, 0x0, 0x0, 0x0, 0x1, 0x3}, [@lastused={0xc, 0xf, 0x7}]}, 0xc4}}, 0x4000) 308.568327ms ago: executing program 8 (id=1423): socket$nl_netfilter(0x10, 0x3, 0xc) clock_gettime(0x1, &(0x7f0000000000)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x20, &(0x7f0000000340)={&(0x7f0000000180)=""/98, 0x62, 0x0, &(0x7f0000000280)=""/55, 0x37}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) close_range(r1, 0xffffffffffffffff, 0x0) 281.258438ms ago: executing program 7 (id=1424): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) syz_emit_ethernet(0x7e, &(0x7f00000002c0)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4b906", 0x48, 0x3a, 0x1, @private1, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x4000, 0x33, 0x0, @loopback, @empty, [@srh={0x33, 0x2, 0x4, 0x1, 0x6, 0x70, 0xff, [@local]}]}}}}}}}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r2, 0x0, 0x8f1}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x10c000) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0xe0, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f0000000080)) 264.944559ms ago: executing program 8 (id=1425): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, 0x0) 213.162661ms ago: executing program 8 (id=1426): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@fwd={0x2}]}, {0x0, [0x5f, 0x4f]}}, &(0x7f0000001540)=""/4096, 0x28, 0x1000, 0xa}, 0x28) 212.726291ms ago: executing program 8 (id=1427): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="18010300000020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000020b703000007000000850000000600"/63], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000080)={0x0, 0x1}, 0x8}, 0x94) 194.078822ms ago: executing program 8 (id=1428): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000100000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r3}, 0x10) write(0xffffffffffffffff, &(0x7f0000000000)="fa", 0xfffffdef) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r4 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xadz\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) socket$inet6(0xa, 0x2, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r9, 0x0, 0x10000001}, 0x18) syz_open_dev$tty20(0xc, 0x4, 0x0) 145.762644ms ago: executing program 7 (id=1429): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0xe0, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f0000000080)) 144.144754ms ago: executing program 8 (id=1430): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48004}, 0x8080) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r4 = gettid() bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r5, 0x400, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20048054) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0500000004310200"/20, @ANYRES32, @ANYBLOB="0000000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRES32=r2, @ANYBLOB="8e945eb49f90ec481848f5eb1d8b83b68cd50617da3e4e88fbf1930cc5ebefb5c3ae3646e6ac7b5d68879bb0994530e52f1adb8bf52ac4942bdd13c3b461668a561cad0c7cda39f10d695d85258e165f8210e2640ffd046efa00d4556b3cd8837a13ea938f947d006cb6ee622d8fe393aff9264814523d0bb9dab21a9dbe6b", @ANYRES64, @ANYRESDEC=r7], 0x48) mq_open(&(0x7f0000000ac0)='eth0\x00\xdd\xad\xff=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9%\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xcfL\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe9XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xa2@\xeb\x18\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4\x80\x00\x00\x00a\xdf\xb5\xd9\xe4\x01\xea|.\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9J\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O\x9e\xef\x9b\x97\xcb\xc6\x89\xba\x8e\xf2\xfb\xd5\a\xcb\xf6\xf7{\xec\xf0@\xc2\xb2\xbcAQx\xa4\x12\xf8\x9cji\"\xf7\x1a\xbd\xac\xde\xf4\x9b\xd7#\xab\\q\xd6\xdf#>}\x97\xd0U\xe4\x9e+|\xb1MT\xa0\x1bf\v9\xcdx\xab\x83\x87\xd3q3\xbeL\xd2\x1f6\x1ffL\x9eM\x0f?\'\xc3YB0\x80!\xe9Y\xf1:\xeeX\xf7G\x85K\xbb\xbdijaA\x00&\x0e\xb3\x99\xbc9\xee\x8f\aVy!d^\r\xd1\x9b\xd5\x06\xbc$\xc9[\x8e[', 0x1, 0x50, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) r8 = io_uring_setup(0x2efe, &(0x7f0000000700)={0x0, 0xe8e5, 0x1000, 0x1, 0x2d6}) r9 = io_uring_setup(0x7625, &(0x7f0000000380)={0x0, 0x653b, 0x0, 0x1, 0xd4, 0x0, r8}) io_setup(0x2, &(0x7f0000000100)=0x0) io_destroy(r10) io_uring_register$IORING_REGISTER_FILES(r9, 0x1e, &(0x7f0000000000)=[r8], 0x1) 62.388398ms ago: executing program 7 (id=1431): io_uring_setup(0x7268, &(0x7f0000000380)={0x0, 0xf54e, 0x40, 0x83, 0x6}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xa, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b70800000092179ec340e2001bce40a7b5277303057b8af8ff00000000bfa2000000000000070219c16f179f01102c0000f8ffffffb703000008000000b704000000000000850000001600000095958d02e7ff23a577d17208320f8a7dcdeee470076e9ddec946392ddaf76d27e9e340433605c33e088d4a8f2bfabf921fb01c7a945dca38827e6cfbd07209edc2d435c40f4fd931efb71e523d369f5eb1a58a0d78f248a8c78fe0690612b3ca7fb045923daeb626f67e9939ecee66ff21f91cab3593e28eee2b52249447c1f6200e14"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38) write$binfmt_script(r5, &(0x7f0000000500)={'#! ', './file0'}, 0xb) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) close_range(r3, r5, 0x0) 59.299098ms ago: executing program 7 (id=1432): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f0000000100)={0x4, &(0x7f00000000c0)=[{0x0, 0x8, 0x5, 0xc}, {0x9, 0xa0, 0x1, 0x3}, {0x9, 0x4, 0x9, 0x8}, {0xffff, 0xfc, 0x7f, 0x8}]}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x4010, r2, 0x2cb93000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x4b8, 0xffffffff, 0x260, 0x260, 0xe8, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000402c000000030a010200000000f7ffffff010000000900010073797a30000000000900030073797a310000000058000000060a010400000000000000000100000008000b4000000000300004802c000180090001007866726d000000001c0002800500030001000000080001400000001108000240000000050900010073797a3000000000140001000100010000000000000000000000000a"], 0xcc}}, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5414, &(0x7f0000000000)) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) 14.73331ms ago: executing program 7 (id=1433): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r0, 0x0, 0x13, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c0", 0x0, 0x86, 0x0, 0x31, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6cf546366e36eb77dd0aaa2dbe567d168904cf0e7bce1771889c98ffc0abf", 0x0}, 0x50) 0s ago: executing program 7 (id=1434): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r3}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={&(0x7f0000000a80)="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", &(0x7f00000001c0)=""/63, &(0x7f0000000340)="0325e12e11c976aeefe450e9990a487fced790009d2beab85a0a0b7ed7ec50cc57663916355b553f71bf630521889df23cfeadfa3d0bda9e6ea0d49fa959a263a279c9103e6a8466c26dd449377a1a37b2dbf1b791637ab9517170dea320fd932f15b76da673b618729cac7406189a1275beda9599a4a29fe3a4a6cb07340c80558c6064d783eda3dcb86a20fadae3b84a6762278ad1b34071c5352407ee38a755005f4c8ca087da79", &(0x7f0000000280)="f697d0144415150d0661eab3643e23ae4e2c6669a7bea7632e1c7fb3618ae052674cbf6e2fd8237b491342e3e270903e1ea07bb84f6a6dda15159b8c", 0x3, r2}, 0x38) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f0000000500)=""/155}, 0x20) r5 = socket$inet6(0xa, 0xd, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r5, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1200", @ANYRES8=r5], 0x108}}], 0x2, 0xc040) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r9, &(0x7f0000000140)=ANY=[@ANYBLOB='+cpe '], 0x5) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) kernel console output (not intermixed with test programs): /0x200 [ 70.765356][ T6170] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 70.765380][ T6170] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 70.765474][ T6170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.765495][ T6170] RIP: 0033:0x7fe4cb53e15c [ 70.765531][ T6170] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 70.765606][ T6170] RSP: 002b:00007fe4c9fa7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 70.765624][ T6170] RAX: ffffffffffffffda RBX: 00007fe4cb795fa0 RCX: 00007fe4cb53e15c [ 70.765638][ T6170] RDX: 000000000000000f RSI: 00007fe4c9fa70a0 RDI: 0000000000000004 [ 70.765651][ T6170] RBP: 00007fe4c9fa7090 R08: 0000000000000000 R09: 0000000000000000 [ 70.765664][ T6170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.765677][ T6170] R13: 00007fe4cb796038 R14: 00007fe4cb795fa0 R15: 00007fff662846c8 [ 70.765692][ T6170] [ 71.028422][ T6049] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 71.068018][ T6180] loop6: detected capacity change from 0 to 1024 [ 71.083363][ T6049] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 71.091392][ T6179] FAULT_INJECTION: forcing a failure. [ 71.091392][ T6179] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 71.104473][ T6179] CPU: 1 UID: 0 PID: 6179 Comm: syz.0.918 Not tainted syzkaller #0 PREEMPT(voluntary) [ 71.104574][ T6179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 71.104584][ T6179] Call Trace: [ 71.104590][ T6179] [ 71.104596][ T6179] __dump_stack+0x1d/0x30 [ 71.104624][ T6179] dump_stack_lvl+0xe8/0x140 [ 71.104642][ T6179] dump_stack+0x15/0x1b [ 71.104695][ T6179] should_fail_ex+0x265/0x280 [ 71.104715][ T6179] should_fail+0xb/0x20 [ 71.104732][ T6179] should_fail_usercopy+0x1a/0x20 [ 71.104753][ T6179] _copy_from_user+0x1c/0xb0 [ 71.104823][ T6179] sctp_setsockopt+0x154/0xe30 [ 71.104844][ T6179] sock_common_setsockopt+0x69/0x80 [ 71.104865][ T6179] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 71.104919][ T6179] __sys_setsockopt+0x184/0x200 [ 71.104949][ T6179] __x64_sys_setsockopt+0x64/0x80 [ 71.104978][ T6179] x64_sys_call+0x20ec/0x3000 [ 71.105026][ T6179] do_syscall_64+0xd2/0x200 [ 71.105042][ T6179] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 71.105183][ T6179] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 71.105265][ T6179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.105284][ T6179] RIP: 0033:0x7fe4cb53f749 [ 71.105314][ T6179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.105330][ T6179] RSP: 002b:00007fe4c9fa7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 71.105352][ T6179] RAX: ffffffffffffffda RBX: 00007fe4cb795fa0 RCX: 00007fe4cb53f749 [ 71.105363][ T6179] RDX: 000000000000000d RSI: 0000000000000084 RDI: 0000000000000003 [ 71.105374][ T6179] RBP: 00007fe4c9fa7090 R08: 0000000000000008 R09: 0000000000000000 [ 71.105385][ T6179] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.105396][ T6179] R13: 00007fe4cb796038 R14: 00007fe4cb795fa0 R15: 00007fff662846c8 [ 71.105412][ T6179] [ 71.110390][ T6049] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 71.151203][ T6183] loop4: detected capacity change from 0 to 256 [ 71.353348][ T6049] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 71.374446][ T6180] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.552906][ T6049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.617641][ T6049] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.638873][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.645985][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.672471][ T3968] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.682156][ T6209] netlink: 7 bytes leftover after parsing attributes in process `syz.5.926'. [ 71.683398][ T6002] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.698049][ T6002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.732031][ T6209] tipc: Enabling of bearer rejected, failed to enable media [ 71.743300][ T6049] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.753708][ T6049] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.852576][ T6221] FAULT_INJECTION: forcing a failure. [ 71.852576][ T6221] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 71.865893][ T6221] CPU: 1 UID: 0 PID: 6221 Comm: syz.6.929 Not tainted syzkaller #0 PREEMPT(voluntary) [ 71.865920][ T6221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 71.865931][ T6221] Call Trace: [ 71.865946][ T6221] [ 71.865954][ T6221] __dump_stack+0x1d/0x30 [ 71.865975][ T6221] dump_stack_lvl+0xe8/0x140 [ 71.865995][ T6221] dump_stack+0x15/0x1b [ 71.866012][ T6221] should_fail_ex+0x265/0x280 [ 71.866032][ T6221] should_fail+0xb/0x20 [ 71.866086][ T6221] should_fail_usercopy+0x1a/0x20 [ 71.866102][ T6221] _copy_from_user+0x1c/0xb0 [ 71.866122][ T6221] ___sys_recvmsg+0xaa/0x370 [ 71.866139][ T6221] ? _parse_integer+0x27/0x40 [ 71.866173][ T6221] do_recvmmsg+0x1ef/0x540 [ 71.866195][ T6221] ? fput+0x8f/0xc0 [ 71.866213][ T6221] __x64_sys_recvmmsg+0xe5/0x170 [ 71.866269][ T6221] x64_sys_call+0x27aa/0x3000 [ 71.866290][ T6221] do_syscall_64+0xd2/0x200 [ 71.866311][ T6221] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 71.866334][ T6221] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 71.866489][ T6221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.866523][ T6221] RIP: 0033:0x7fc492d1f749 [ 71.866537][ T6221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.866553][ T6221] RSP: 002b:00007fc491766038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 71.866569][ T6221] RAX: ffffffffffffffda RBX: 00007fc492f76090 RCX: 00007fc492d1f749 [ 71.866580][ T6221] RDX: 0000000000000001 RSI: 0000200000002a40 RDI: 0000000000000005 [ 71.866590][ T6221] RBP: 00007fc491766090 R08: 0000000000000000 R09: 0000000000000000 [ 71.866603][ T6221] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000001 [ 71.866616][ T6221] R13: 00007fc492f76128 R14: 00007fc492f76090 R15: 00007ffdb041bbd8 [ 71.866645][ T6221] [ 71.904650][ T6222] loop5: detected capacity change from 0 to 512 [ 71.954938][ T6221] loop6: detected capacity change from 0 to 512 [ 72.143206][ T6049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.184759][ T6222] EXT4-fs (loop5): orphan cleanup on readonly fs [ 72.218432][ T6222] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.928: bad orphan inode 13 [ 72.254075][ T6222] ext4_test_bit(bit=12, block=18) = 1 [ 72.259573][ T6222] is_bad_inode(inode)=0 [ 72.263818][ T6222] NEXT_ORPHAN(inode)=2130706432 [ 72.268677][ T6222] max_ino=32 [ 72.272131][ T6222] i_nlink=1 [ 72.292906][ T6222] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 72.307626][ T6221] EXT4-fs (loop6): orphan cleanup on readonly fs [ 72.322526][ T6221] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.929: bad orphan inode 13 [ 72.333651][ T6221] ext4_test_bit(bit=12, block=18) = 1 [ 72.339139][ T6221] is_bad_inode(inode)=0 [ 72.343489][ T6221] NEXT_ORPHAN(inode)=2130706432 [ 72.348345][ T6221] max_ino=32 [ 72.351644][ T6221] i_nlink=1 [ 72.356420][ T6221] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 72.370351][ T6216] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 72.380090][ T6218] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 72.419718][ T6218] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 72.433024][ T29] kauditd_printk_skb: 263 callbacks suppressed [ 72.433040][ T29] audit: type=1326 audit(1764613209.142:13253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6214 comm="syz.5.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f254e1bf749 code=0x7ffc0000 [ 72.462696][ T29] audit: type=1326 audit(1764613209.142:13254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6214 comm="syz.5.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f254e1bf749 code=0x7ffc0000 [ 72.486546][ T29] audit: type=1326 audit(1764613209.142:13255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6214 comm="syz.5.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f254e1bf749 code=0x7ffc0000 [ 72.491356][ T6241] loop0: detected capacity change from 0 to 256 [ 72.524548][ T6241] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 72.524660][ T6216] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 72.551759][ T6240] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 72.560505][ T6240] FAT-fs (loop0): Filesystem has been set read-only [ 72.566508][ T29] audit: type=1326 audit(1764613209.222:13256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6214 comm="syz.5.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f254e1bf749 code=0x7ffc0000 [ 72.590792][ T29] audit: type=1326 audit(1764613209.222:13257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6214 comm="syz.5.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f254e1bf749 code=0x7ffc0000 [ 72.614272][ T29] audit: type=1326 audit(1764613209.222:13258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6214 comm="syz.5.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f254e1bf749 code=0x7ffc0000 [ 72.665123][ T3968] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.665401][ T3875] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.683360][ T6049] veth0_vlan: entered promiscuous mode [ 72.690712][ T6049] veth1_vlan: entered promiscuous mode [ 72.713669][ T6250] loop6: detected capacity change from 0 to 512 [ 72.723927][ T6049] veth0_macvtap: entered promiscuous mode [ 72.730626][ T6250] EXT4-fs: dax option not supported [ 72.740806][ T6049] veth1_macvtap: entered promiscuous mode [ 72.749834][ T29] audit: type=1400 audit(1764613209.452:13259): avc: denied { create } for pid=6249 comm="syz.6.931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 72.775171][ T6049] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.794938][ T6049] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.802298][ T29] audit: type=1400 audit(1764613209.502:13260): avc: denied { ioctl } for pid=6249 comm="syz.6.931" path="socket:[15915]" dev="sockfs" ino=15915 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 72.831370][ T1742] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.845960][ T1742] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.854424][ T6257] loop0: detected capacity change from 0 to 1024 [ 72.854928][ T1742] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.875766][ T1742] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.893618][ T29] audit: type=1400 audit(1764613209.602:13261): avc: denied { mounton } for pid=6049 comm="syz-executor" path="/root/syzkaller.ZKVIjE/syz-tmp" dev="sda1" ino=2051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 72.894115][ T6257] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.927221][ T6261] netlink: 172 bytes leftover after parsing attributes in process `syz.6.931'. [ 72.942833][ T6248] kernel profiling enabled (shift: 17) [ 72.979779][ T29] audit: type=1400 audit(1764613209.632:13262): avc: denied { mount } for pid=6049 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 72.988937][ T6248] bridge0: entered promiscuous mode [ 73.007986][ T6248] macsec1: entered promiscuous mode [ 73.008958][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.013693][ T6248] bridge0: port 1(macsec1) entered blocking state [ 73.028890][ T6248] bridge0: port 1(macsec1) entered disabled state [ 73.035487][ T6266] loop5: detected capacity change from 0 to 764 [ 73.042390][ T6248] macsec1: entered allmulticast mode [ 73.047710][ T6248] bridge0: entered allmulticast mode [ 73.054296][ T6248] macsec1: left allmulticast mode [ 73.059394][ T6248] bridge0: left allmulticast mode [ 73.064675][ T6266] rock: directory entry would overflow storage [ 73.070923][ T6266] rock: sig=0x5245, size=8, remaining=5 [ 73.077846][ T6248] bridge0: left promiscuous mode [ 73.098272][ T6268] syzkaller1: entered promiscuous mode [ 73.103869][ T6268] syzkaller1: entered allmulticast mode [ 73.126535][ T6271] netlink: 7 bytes leftover after parsing attributes in process `syz.7.938'. [ 73.138913][ T6266] lo speed is unknown, defaulting to 1000 [ 73.139022][ T6271] tipc: Enabling of bearer rejected, failed to enable media [ 73.162641][ T6272] tipc: Enabling of bearer rejected, failed to enable media [ 73.185498][ T6275] loop7: detected capacity change from 0 to 1024 [ 73.203644][ T6275] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.239106][ T6285] FAULT_INJECTION: forcing a failure. [ 73.239106][ T6285] name failslab, interval 1, probability 0, space 0, times 0 [ 73.251959][ T6285] CPU: 1 UID: 0 PID: 6285 Comm: syz.0.943 Not tainted syzkaller #0 PREEMPT(voluntary) [ 73.251988][ T6285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 73.252031][ T6285] Call Trace: [ 73.252037][ T6285] [ 73.252044][ T6285] __dump_stack+0x1d/0x30 [ 73.252066][ T6285] dump_stack_lvl+0xe8/0x140 [ 73.252083][ T6285] dump_stack+0x15/0x1b [ 73.252161][ T6285] should_fail_ex+0x265/0x280 [ 73.252180][ T6285] should_failslab+0x8c/0xb0 [ 73.252205][ T6285] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 73.252307][ T6285] ? __alloc_skb+0x101/0x320 [ 73.252374][ T6285] __alloc_skb+0x101/0x320 [ 73.252399][ T6285] netlink_alloc_large_skb+0xbf/0xf0 [ 73.252432][ T6285] netlink_sendmsg+0x3cf/0x6b0 [ 73.252452][ T6285] ? __pfx_netlink_sendmsg+0x10/0x10 [ 73.252505][ T6285] __sock_sendmsg+0x145/0x180 [ 73.252526][ T6285] ____sys_sendmsg+0x31e/0x4e0 [ 73.252544][ T6285] ___sys_sendmsg+0x17b/0x1d0 [ 73.252569][ T6285] __x64_sys_sendmsg+0xd4/0x160 [ 73.252587][ T6285] x64_sys_call+0x191e/0x3000 [ 73.252650][ T6285] do_syscall_64+0xd2/0x200 [ 73.252670][ T6285] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 73.252692][ T6285] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 73.252799][ T6285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.252816][ T6285] RIP: 0033:0x7fe4cb53f749 [ 73.252831][ T6285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.252848][ T6285] RSP: 002b:00007fe4c9fa7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 73.252867][ T6285] RAX: ffffffffffffffda RBX: 00007fe4cb795fa0 RCX: 00007fe4cb53f749 [ 73.252908][ T6285] RDX: 0000000024000840 RSI: 0000200000009b40 RDI: 0000000000000006 [ 73.252920][ T6285] RBP: 00007fe4c9fa7090 R08: 0000000000000000 R09: 0000000000000000 [ 73.252933][ T6285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.252943][ T6285] R13: 00007fe4cb796038 R14: 00007fe4cb795fa0 R15: 00007fff662846c8 [ 73.252987][ T6285] [ 73.479737][ T6049] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.516883][ T6293] FAULT_INJECTION: forcing a failure. [ 73.516883][ T6293] name failslab, interval 1, probability 0, space 0, times 0 [ 73.529585][ T6293] CPU: 1 UID: 0 PID: 6293 Comm: syz.7.945 Not tainted syzkaller #0 PREEMPT(voluntary) [ 73.529615][ T6293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 73.529624][ T6293] Call Trace: [ 73.529630][ T6293] [ 73.529636][ T6293] __dump_stack+0x1d/0x30 [ 73.529732][ T6293] dump_stack_lvl+0xe8/0x140 [ 73.529770][ T6293] dump_stack+0x15/0x1b [ 73.529825][ T6293] should_fail_ex+0x265/0x280 [ 73.529844][ T6293] should_failslab+0x8c/0xb0 [ 73.529905][ T6293] __kmalloc_node_noprof+0xaa/0x580 [ 73.529933][ T6293] ? qdisc_alloc+0x65/0x440 [ 73.529962][ T6293] qdisc_alloc+0x65/0x440 [ 73.530060][ T6293] ? drr_change_class+0x227/0x7e0 [ 73.530080][ T6293] qdisc_create_dflt+0x7f/0x2d0 [ 73.530109][ T6293] drr_change_class+0x2a1/0x7e0 [ 73.530132][ T6293] tc_ctl_tclass+0x6ed/0xc70 [ 73.530206][ T6293] ? ns_capable+0x7d/0xb0 [ 73.530226][ T6293] ? __pfx_tc_ctl_tclass+0x10/0x10 [ 73.530284][ T6293] rtnetlink_rcv_msg+0x65a/0x6d0 [ 73.530309][ T6293] netlink_rcv_skb+0x123/0x220 [ 73.530350][ T6293] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 73.530440][ T6293] rtnetlink_rcv+0x1c/0x30 [ 73.530457][ T6293] netlink_unicast+0x5c0/0x690 [ 73.530506][ T6293] netlink_sendmsg+0x58b/0x6b0 [ 73.530527][ T6293] ? __pfx_netlink_sendmsg+0x10/0x10 [ 73.530547][ T6293] __sock_sendmsg+0x145/0x180 [ 73.530571][ T6293] ____sys_sendmsg+0x31e/0x4e0 [ 73.530592][ T6293] ___sys_sendmsg+0x17b/0x1d0 [ 73.530664][ T6293] __x64_sys_sendmsg+0xd4/0x160 [ 73.530682][ T6293] x64_sys_call+0x191e/0x3000 [ 73.530699][ T6293] do_syscall_64+0xd2/0x200 [ 73.530716][ T6293] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 73.530775][ T6293] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 73.530803][ T6293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.530822][ T6293] RIP: 0033:0x7f59bc7df749 [ 73.530836][ T6293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.530853][ T6293] RSP: 002b:00007f59bb247038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 73.530902][ T6293] RAX: ffffffffffffffda RBX: 00007f59bca35fa0 RCX: 00007f59bc7df749 [ 73.530915][ T6293] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 73.530927][ T6293] RBP: 00007f59bb247090 R08: 0000000000000000 R09: 0000000000000000 [ 73.530938][ T6293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.530950][ T6293] R13: 00007f59bca36038 R14: 00007f59bca35fa0 R15: 00007ffee2669b88 [ 73.530966][ T6293] [ 73.783482][ T6295] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 73.792100][ T6297] loop0: detected capacity change from 0 to 1024 [ 73.800692][ T6297] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 73.813180][ T1093] IPVS: starting estimator thread 0... [ 73.866491][ T6308] loop4: detected capacity change from 0 to 512 [ 73.937216][ T6308] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.960275][ T6308] ext4 filesystem being mounted at /184/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.971589][ T6308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.981550][ T6300] IPVS: using max 2736 ests per chain, 136800 per kthread [ 74.013615][ T6325] FAULT_INJECTION: forcing a failure. [ 74.013615][ T6325] name failslab, interval 1, probability 0, space 0, times 0 [ 74.026278][ T6325] CPU: 0 UID: 0 PID: 6325 Comm: syz.7.958 Not tainted syzkaller #0 PREEMPT(voluntary) [ 74.026375][ T6325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 74.026387][ T6325] Call Trace: [ 74.026395][ T6325] [ 74.026403][ T6325] __dump_stack+0x1d/0x30 [ 74.026425][ T6325] dump_stack_lvl+0xe8/0x140 [ 74.026443][ T6325] dump_stack+0x15/0x1b [ 74.026486][ T6325] should_fail_ex+0x265/0x280 [ 74.026503][ T6325] should_failslab+0x8c/0xb0 [ 74.026543][ T6325] kmem_cache_alloc_noprof+0x50/0x480 [ 74.026571][ T6325] ? alloc_empty_file+0x76/0x200 [ 74.026598][ T6325] alloc_empty_file+0x76/0x200 [ 74.026643][ T6325] alloc_file_pseudo+0xc6/0x160 [ 74.026665][ T6325] __shmem_file_setup+0x1de/0x210 [ 74.026704][ T6325] shmem_file_setup+0x3b/0x50 [ 74.026719][ T6325] __se_sys_memfd_create+0x2c3/0x590 [ 74.026817][ T6325] __x64_sys_memfd_create+0x31/0x40 [ 74.026913][ T6325] x64_sys_call+0x2ac2/0x3000 [ 74.026932][ T6325] do_syscall_64+0xd2/0x200 [ 74.026954][ T6325] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 74.026979][ T6325] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 74.027048][ T6325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.027079][ T6325] RIP: 0033:0x7f59bc7df749 [ 74.027092][ T6325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.027110][ T6325] RSP: 002b:00007f59bb246e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 74.027131][ T6325] RAX: ffffffffffffffda RBX: 0000000000000610 RCX: 00007f59bc7df749 [ 74.027142][ T6325] RDX: 00007f59bb246ef0 RSI: 0000000000000000 RDI: 00007f59bc864960 [ 74.027152][ T6325] RBP: 0000200000000a40 R08: 00007f59bb246bb7 R09: 00007f59bb246e40 [ 74.027215][ T6325] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000040 [ 74.027284][ T6325] R13: 00007f59bb246ef0 R14: 00007f59bb246eb0 R15: 0000200000000100 [ 74.027300][ T6325] [ 74.462234][ T6339] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 74.462234][ T6339] program syz.5.962 not setting count and/or reply_len properly [ 74.481554][ T6340] wg1 speed is unknown, defaulting to 1000 [ 74.487477][ T6340] wg1 speed is unknown, defaulting to 1000 [ 74.495332][ T6340] wg1 speed is unknown, defaulting to 1000 [ 74.556072][ T6340] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 74.622205][ T6340] wg1 speed is unknown, defaulting to 1000 [ 74.628649][ T6340] wg1 speed is unknown, defaulting to 1000 [ 74.644678][ T6340] wg1 speed is unknown, defaulting to 1000 [ 74.659947][ T6340] wg1 speed is unknown, defaulting to 1000 [ 74.666232][ T6340] wg1 speed is unknown, defaulting to 1000 [ 74.786376][ T6357] netlink: 4 bytes leftover after parsing attributes in process `syz.0.968'. [ 74.847954][ T6352] loop5: detected capacity change from 0 to 32768 [ 74.893069][ T6352] loop5: p1 p2 p3 < > p4 < p5 p6 > [ 74.898458][ T6352] loop5: p1 start 460800 is beyond EOD, truncated [ 74.904986][ T6352] loop5: p2 size 83886080 extends beyond EOD, truncated [ 74.905126][ T6362] loop7: detected capacity change from 0 to 512 [ 74.913628][ T6352] loop5: p5 start 460800 is beyond EOD, truncated [ 74.924763][ T6352] loop5: p6 size 83886080 extends beyond EOD, truncated [ 74.942876][ T6362] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.955504][ T6362] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.966377][ T6362] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.010310][ T6369] netlink: 4 bytes leftover after parsing attributes in process `syz.7.972'. [ 75.019673][ T6369] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.027114][ T6369] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.035011][ T6369] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.042459][ T6369] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.083147][ T6374] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 75.098060][ T6376] RDS: rds_bind could not find a transport for fc00::, load rds_tcp or rds_rdma? [ 75.117427][ T6380] rdma_op ffff88811a4c9980 conn xmit_rdma 0000000000000000 [ 75.126623][ T6380] netlink: 4 bytes leftover after parsing attributes in process `syz.5.975'. [ 75.136263][ T6380] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 75.149907][ T6380] loop5: detected capacity change from 0 to 512 [ 75.163273][ T6380] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.176071][ T6380] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.194374][ T3875] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.670853][ T6393] Set syz1 is full, maxelem 65536 reached [ 75.743108][ T6400] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6400 comm=syz.6.983 [ 75.868809][ T6411] rdma_op ffff8881047aa180 conn xmit_rdma 0000000000000000 [ 75.878467][ T6411] netlink: 4 bytes leftover after parsing attributes in process `syz.6.987'. [ 75.890162][ T6411] loop6: detected capacity change from 0 to 512 [ 75.902276][ T6411] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.914830][ T6411] ext4 filesystem being mounted at /147/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.925688][ T6411] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.958220][ T6419] netlink: 12 bytes leftover after parsing attributes in process `syz.6.989'. [ 75.971485][ T6419] netlink: 8 bytes leftover after parsing attributes in process `syz.6.989'. [ 76.116047][ T6441] loop0: detected capacity change from 0 to 1024 [ 76.123670][ T6441] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 76.133734][ T6441] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 76.153764][ T6444] rdma_op ffff88810d8ced80 conn xmit_rdma 0000000000000000 [ 76.164566][ T6444] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1000'. [ 76.179796][ T6444] loop4: detected capacity change from 0 to 512 [ 76.188409][ T6441] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 76.198813][ T6441] EXT4-fs (loop0): orphan cleanup on readonly fs [ 76.206264][ T6441] EXT4-fs error (device loop0): ext4_read_inode_bitmap:167: comm syz.0.999: Inode bitmap for bg 0 marked uninitialized [ 76.221115][ T6441] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 76.241574][ T6441] EXT4-fs (loop0): ext4_remount: Checksum for group 0 failed (32298!=35945) [ 76.385698][ T6444] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.463508][ T6444] ext4 filesystem being mounted at /190/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.474899][ T6444] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.537818][ T6446] Set syz1 is full, maxelem 65536 reached [ 76.544419][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.576398][ T6455] FAULT_INJECTION: forcing a failure. [ 76.576398][ T6455] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 76.589570][ T6455] CPU: 0 UID: 0 PID: 6455 Comm: syz.0.1001 Not tainted syzkaller #0 PREEMPT(voluntary) [ 76.589594][ T6455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 76.589606][ T6455] Call Trace: [ 76.589613][ T6455] [ 76.589686][ T6455] __dump_stack+0x1d/0x30 [ 76.589705][ T6455] dump_stack_lvl+0xe8/0x140 [ 76.589737][ T6455] dump_stack+0x15/0x1b [ 76.589754][ T6455] should_fail_ex+0x265/0x280 [ 76.589774][ T6455] should_fail+0xb/0x20 [ 76.589790][ T6455] should_fail_usercopy+0x1a/0x20 [ 76.589811][ T6455] _copy_from_user+0x1c/0xb0 [ 76.589844][ T6455] __sys_bpf+0x183/0x7c0 [ 76.589865][ T6455] __x64_sys_bpf+0x41/0x50 [ 76.589888][ T6455] x64_sys_call+0x2aee/0x3000 [ 76.589984][ T6455] do_syscall_64+0xd2/0x200 [ 76.590001][ T6455] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 76.590065][ T6455] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 76.590116][ T6455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.590133][ T6455] RIP: 0033:0x7fe4cb53f749 [ 76.590146][ T6455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.590160][ T6455] RSP: 002b:00007fe4c9fa7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 76.590197][ T6455] RAX: ffffffffffffffda RBX: 00007fe4cb795fa0 RCX: 00007fe4cb53f749 [ 76.590274][ T6455] RDX: 0000000000000094 RSI: 0000200000000740 RDI: 0000000000000005 [ 76.590285][ T6455] RBP: 00007fe4c9fa7090 R08: 0000000000000000 R09: 0000000000000000 [ 76.590298][ T6455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.590311][ T6455] R13: 00007fe4cb796038 R14: 00007fe4cb795fa0 R15: 00007fff662846c8 [ 76.590425][ T6455] [ 76.784475][ T6460] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 76.810132][ T6461] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1004'. [ 76.827511][ T6463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.836117][ T6463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.861723][ T6468] SELinux: failed to load policy [ 77.000179][ T6483] loop5: detected capacity change from 0 to 2048 [ 77.013105][ T6483] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.086271][ T3875] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.164972][ T6498] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 77.187955][ T6500] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6500 comm=syz.5.1019 [ 77.398926][ T6512] loop4: detected capacity change from 0 to 2048 [ 77.428981][ T6512] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.452549][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.472511][ T29] kauditd_printk_skb: 245 callbacks suppressed [ 77.472541][ T29] audit: type=1326 audit(1764613214.182:13508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6516 comm="syz.4.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a9747f749 code=0x7ffc0000 [ 77.502387][ T29] audit: type=1326 audit(1764613214.182:13509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6516 comm="syz.4.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a9747f749 code=0x7ffc0000 [ 77.529587][ T29] audit: type=1326 audit(1764613214.182:13510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6516 comm="syz.4.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a9747f749 code=0x7ffc0000 [ 77.553188][ T29] audit: type=1326 audit(1764613214.182:13511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6516 comm="syz.4.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a9747f749 code=0x7ffc0000 [ 77.576765][ T29] audit: type=1326 audit(1764613214.182:13512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6516 comm="syz.4.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a9747f749 code=0x7ffc0000 [ 77.600302][ T29] audit: type=1326 audit(1764613214.182:13513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6516 comm="syz.4.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f0a9747f749 code=0x7ffc0000 [ 77.623776][ T29] audit: type=1326 audit(1764613214.182:13514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6516 comm="syz.4.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a9747f749 code=0x7ffc0000 [ 77.647321][ T29] audit: type=1326 audit(1764613214.182:13515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6516 comm="syz.4.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0a9747f749 code=0x7ffc0000 [ 77.670891][ T29] audit: type=1326 audit(1764613214.182:13516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6516 comm="syz.4.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a9747f749 code=0x7ffc0000 [ 77.694360][ T29] audit: type=1326 audit(1764613214.182:13517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6516 comm="syz.4.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f0a9747f749 code=0x7ffc0000 [ 77.697277][ T6521] loop5: detected capacity change from 0 to 128 [ 77.731834][ T6521] FAT-fs (loop5): Directory bread(block 162) failed [ 77.738702][ T6521] FAT-fs (loop5): Directory bread(block 163) failed [ 77.745370][ T6521] FAT-fs (loop5): Directory bread(block 164) failed [ 77.752219][ T6521] FAT-fs (loop5): Directory bread(block 165) failed [ 77.758887][ T6521] FAT-fs (loop5): Directory bread(block 166) failed [ 77.765598][ T6521] FAT-fs (loop5): Directory bread(block 167) failed [ 77.772212][ T6521] FAT-fs (loop5): Directory bread(block 168) failed [ 77.778802][ T6521] FAT-fs (loop5): Directory bread(block 169) failed [ 77.793840][ T6521] FAT-fs (loop5): Directory bread(block 162) failed [ 77.800830][ T6521] FAT-fs (loop5): Directory bread(block 163) failed [ 77.808269][ T6521] syz.5.1026: attempt to access beyond end of device [ 77.808269][ T6521] loop5: rw=3, sector=226, nr_sectors = 6 limit=128 [ 77.830286][ T6521] syz.5.1026: attempt to access beyond end of device [ 77.830286][ T6521] loop5: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 77.867785][ T6523] lo speed is unknown, defaulting to 1000 [ 77.874839][ T6523] wg1 speed is unknown, defaulting to 1000 [ 77.882779][ T6525] netlink: 'syz.5.1028': attribute type 21 has an invalid length. [ 78.013677][ T6543] lo speed is unknown, defaulting to 1000 [ 78.033492][ T6544] loop4: detected capacity change from 0 to 1024 [ 78.037204][ T6551] FAULT_INJECTION: forcing a failure. [ 78.037204][ T6551] name failslab, interval 1, probability 0, space 0, times 0 [ 78.040174][ T6544] ext4: Unknown parameter 'nombcach' [ 78.052575][ T6551] CPU: 0 UID: 0 PID: 6551 Comm: syz.5.1036 Not tainted syzkaller #0 PREEMPT(voluntary) [ 78.052604][ T6551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 78.052615][ T6551] Call Trace: [ 78.052621][ T6551] [ 78.052628][ T6551] __dump_stack+0x1d/0x30 [ 78.052649][ T6551] dump_stack_lvl+0xe8/0x140 [ 78.052679][ T6551] dump_stack+0x15/0x1b [ 78.052697][ T6551] should_fail_ex+0x265/0x280 [ 78.052739][ T6551] should_failslab+0x8c/0xb0 [ 78.052765][ T6551] kmem_cache_alloc_noprof+0x50/0x480 [ 78.052791][ T6551] ? security_file_alloc+0x32/0x100 [ 78.052831][ T6551] security_file_alloc+0x32/0x100 [ 78.052855][ T6551] init_file+0x5c/0x1d0 [ 78.052873][ T6551] alloc_empty_file+0x8b/0x200 [ 78.052905][ T6551] alloc_file_pseudo+0xc6/0x160 [ 78.052998][ T6551] sock_alloc_file+0x9c/0x1e0 [ 78.053022][ T6551] __sys_socket+0x116/0x180 [ 78.053047][ T6551] __x64_sys_socket+0x3f/0x50 [ 78.053070][ T6551] x64_sys_call+0x1147/0x3000 [ 78.053123][ T6551] do_syscall_64+0xd2/0x200 [ 78.053142][ T6551] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 78.053186][ T6551] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 78.053215][ T6551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.053235][ T6551] RIP: 0033:0x7f254e1bf749 [ 78.053251][ T6551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.053311][ T6551] RSP: 002b:00007f254cc06038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 78.053331][ T6551] RAX: ffffffffffffffda RBX: 00007f254e416090 RCX: 00007f254e1bf749 [ 78.053344][ T6551] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000000a [ 78.053356][ T6551] RBP: 00007f254cc06090 R08: 0000000000000000 R09: 0000000000000000 [ 78.053368][ T6551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 78.053381][ T6551] R13: 00007f254e416128 R14: 00007f254e416090 R15: 00007fff48cc2ee8 [ 78.053417][ T6551] [ 78.073056][ T6543] wg1 speed is unknown, defaulting to 1000 [ 78.261422][ T6553] FAULT_INJECTION: forcing a failure. [ 78.261422][ T6553] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.274526][ T6553] CPU: 0 UID: 0 PID: 6553 Comm: syz.0.1039 Not tainted syzkaller #0 PREEMPT(voluntary) [ 78.274556][ T6553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 78.274569][ T6553] Call Trace: [ 78.274576][ T6553] [ 78.274585][ T6553] __dump_stack+0x1d/0x30 [ 78.274607][ T6553] dump_stack_lvl+0xe8/0x140 [ 78.274687][ T6553] dump_stack+0x15/0x1b [ 78.274707][ T6553] should_fail_ex+0x265/0x280 [ 78.274729][ T6553] should_fail+0xb/0x20 [ 78.274747][ T6553] should_fail_usercopy+0x1a/0x20 [ 78.274768][ T6553] _copy_from_user+0x1c/0xb0 [ 78.274841][ T6553] __copy_msghdr+0x244/0x300 [ 78.274861][ T6553] ___sys_sendmsg+0x109/0x1d0 [ 78.274892][ T6553] __x64_sys_sendmsg+0xd4/0x160 [ 78.274916][ T6553] x64_sys_call+0x191e/0x3000 [ 78.275008][ T6553] do_syscall_64+0xd2/0x200 [ 78.275030][ T6553] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 78.275062][ T6553] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 78.275170][ T6553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.275190][ T6553] RIP: 0033:0x7fe4cb53f749 [ 78.275239][ T6553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.275257][ T6553] RSP: 002b:00007fe4c9fa7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 78.275277][ T6553] RAX: ffffffffffffffda RBX: 00007fe4cb795fa0 RCX: 00007fe4cb53f749 [ 78.275290][ T6553] RDX: 0000000000000000 RSI: 0000200000004440 RDI: 0000000000000007 [ 78.275350][ T6553] RBP: 00007fe4c9fa7090 R08: 0000000000000000 R09: 0000000000000000 [ 78.275360][ T6553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.275371][ T6553] R13: 00007fe4cb796038 R14: 00007fe4cb795fa0 R15: 00007fff662846c8 [ 78.275388][ T6553] [ 78.314575][ T6535] __nla_validate_parse: 4 callbacks suppressed [ 78.314590][ T6535] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1032'. [ 78.485236][ T6544] rdma_op ffff88810360c180 conn xmit_rdma 0000000000000000 [ 78.495442][ T6558] IPv6: Can't replace route, no match found [ 78.515308][ T6561] IPv6: Can't replace route, no match found [ 78.531308][ T6561] FAULT_INJECTION: forcing a failure. [ 78.531308][ T6561] name failslab, interval 1, probability 0, space 0, times 0 [ 78.543960][ T6561] CPU: 1 UID: 0 PID: 6561 Comm: syz.0.1041 Not tainted syzkaller #0 PREEMPT(voluntary) [ 78.544048][ T6561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 78.544060][ T6561] Call Trace: [ 78.544066][ T6561] [ 78.544072][ T6561] __dump_stack+0x1d/0x30 [ 78.544162][ T6561] dump_stack_lvl+0xe8/0x140 [ 78.544182][ T6561] dump_stack+0x15/0x1b [ 78.544264][ T6561] should_fail_ex+0x265/0x280 [ 78.544284][ T6561] should_failslab+0x8c/0xb0 [ 78.544310][ T6561] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 78.544365][ T6561] ? __alloc_skb+0x101/0x320 [ 78.544394][ T6561] __alloc_skb+0x101/0x320 [ 78.544487][ T6561] netlink_ack+0xfd/0x500 [ 78.544512][ T6561] netlink_rcv_skb+0x192/0x220 [ 78.544534][ T6561] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 78.544631][ T6561] rtnetlink_rcv+0x1c/0x30 [ 78.544647][ T6561] netlink_unicast+0x5c0/0x690 [ 78.544702][ T6561] netlink_sendmsg+0x58b/0x6b0 [ 78.544774][ T6561] ? __pfx_netlink_sendmsg+0x10/0x10 [ 78.544843][ T6561] __sock_sendmsg+0x145/0x180 [ 78.544862][ T6561] ____sys_sendmsg+0x31e/0x4e0 [ 78.544878][ T6561] ___sys_sendmsg+0x17b/0x1d0 [ 78.544901][ T6561] __x64_sys_sendmsg+0xd4/0x160 [ 78.544921][ T6561] x64_sys_call+0x191e/0x3000 [ 78.544937][ T6561] do_syscall_64+0xd2/0x200 [ 78.544954][ T6561] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 78.544974][ T6561] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 78.545072][ T6561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.545088][ T6561] RIP: 0033:0x7fe4cb53f749 [ 78.545101][ T6561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.545215][ T6561] RSP: 002b:00007fe4c9fa7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 78.545231][ T6561] RAX: ffffffffffffffda RBX: 00007fe4cb795fa0 RCX: 00007fe4cb53f749 [ 78.545241][ T6561] RDX: 0000000020048812 RSI: 00002000000004c0 RDI: 0000000000000005 [ 78.545294][ T6561] RBP: 00007fe4c9fa7090 R08: 0000000000000000 R09: 0000000000000000 [ 78.545305][ T6561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.545348][ T6561] R13: 00007fe4cb796038 R14: 00007fe4cb795fa0 R15: 00007fff662846c8 [ 78.545362][ T6561] [ 78.545599][ T6556] loop6: detected capacity change from 0 to 32768 [ 78.652367][ T6574] netlink: 'syz.6.1040': attribute type 298 has an invalid length. [ 78.733357][ T6573] loop7: detected capacity change from 0 to 2048 [ 78.821655][ T6556] loop6: p1 p2 p3 < p5 p6 > [ 78.849998][ T6573] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 78.865582][ T6556] loop6: p2 size 16775168 extends beyond EOD, truncated [ 78.883873][ T6556] loop6: p5 start 4294970168 is beyond EOD, truncated [ 79.024432][ T6587] loop7: detected capacity change from 0 to 8192 [ 79.032391][ T6589] FAULT_INJECTION: forcing a failure. [ 79.032391][ T6589] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.045479][ T6589] CPU: 0 UID: 0 PID: 6589 Comm: syz.6.1050 Not tainted syzkaller #0 PREEMPT(voluntary) [ 79.045539][ T6589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 79.045547][ T6589] Call Trace: [ 79.045552][ T6589] [ 79.045557][ T6589] __dump_stack+0x1d/0x30 [ 79.045641][ T6589] dump_stack_lvl+0xe8/0x140 [ 79.045652][ T6589] dump_stack+0x15/0x1b [ 79.045661][ T6589] should_fail_ex+0x265/0x280 [ 79.045672][ T6589] should_fail+0xb/0x20 [ 79.045681][ T6589] should_fail_usercopy+0x1a/0x20 [ 79.045713][ T6589] copy_fpstate_to_sigframe+0x628/0x7d0 [ 79.045749][ T6589] ? copy_fpstate_to_sigframe+0xe6/0x7d0 [ 79.045847][ T6589] ? x86_task_fpu+0x36/0x60 [ 79.045861][ T6589] get_sigframe+0x34d/0x490 [ 79.045872][ T6589] ? get_signal+0xdc7/0xf70 [ 79.045899][ T6589] x64_setup_rt_frame+0xa8/0x580 [ 79.046030][ T6589] arch_do_signal_or_restart+0x23e/0x440 [ 79.046043][ T6589] exit_to_user_mode_loop+0x77/0x110 [ 79.046058][ T6589] do_syscall_64+0x1d6/0x200 [ 79.046070][ T6589] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 79.046084][ T6589] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 79.046131][ T6589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.046143][ T6589] RIP: 0033:0x7fc492d1f747 [ 79.046220][ T6589] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 79.046230][ T6589] RSP: 002b:00007fc491787038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 79.046247][ T6589] RAX: 000000000000002e RBX: 00007fc492f75fa0 RCX: 00007fc492d1f749 [ 79.046255][ T6589] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000005 [ 79.046261][ T6589] RBP: 00007fc491787090 R08: 0000000000000000 R09: 0000000000000000 [ 79.046268][ T6589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.046276][ T6589] R13: 00007fc492f76038 R14: 00007fc492f75fa0 R15: 00007ffdb041bbd8 [ 79.046294][ T6589] [ 79.390584][ T6595] netlink: 7 bytes leftover after parsing attributes in process `syz.7.1052'. [ 79.423196][ T6595] tipc: Enabling of bearer rejected, failed to enable media [ 79.507200][ T6599] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.1054'. [ 79.704634][ T6610] rdma_op ffff888124502d80 conn xmit_rdma 0000000000000000 [ 79.732370][ T6608] syzkaller0: entered promiscuous mode [ 79.737873][ T6608] syzkaller0: entered allmulticast mode [ 79.766037][ T6610] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1059'. [ 79.823708][ T6610] loop6: detected capacity change from 0 to 512 [ 79.888058][ T6610] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.904242][ T6610] ext4 filesystem being mounted at /162/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.916829][ T6610] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.174714][ T6657] netlink: 360 bytes leftover after parsing attributes in process `syz.0.1075'. [ 80.184313][ T6657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1075'. [ 80.193449][ T6657] bridge_slave_1: left allmulticast mode [ 80.199278][ T6657] bridge_slave_1: left promiscuous mode [ 80.205116][ T6657] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.346371][ T6658] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1075'. [ 80.773609][ T6664] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1076'. [ 80.912869][ T6666] rdma_op ffff88811cc5d580 conn xmit_rdma 0000000000000000 [ 80.922941][ T6666] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1077'. [ 80.937218][ T6666] loop5: detected capacity change from 0 to 512 [ 80.959023][ T6666] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.971851][ T6666] ext4 filesystem being mounted at /180/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.982905][ T6666] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.086279][ T6657] bridge_slave_0: left allmulticast mode [ 81.092006][ T6657] bridge_slave_0: left promiscuous mode [ 81.097798][ T6657] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.156465][ T6678] netlink: 'syz.5.1082': attribute type 2 has an invalid length. [ 81.202910][ T6664] bond1: option updelay: invalid value (18446744073495249920) [ 81.210405][ T6664] bond1: option updelay: allowed values 0 - 2147483647 [ 81.218648][ T6664] bond1 (unregistering): Released all slaves [ 81.384055][ T6693] loop4: detected capacity change from 0 to 8192 [ 81.434848][ T6693] netlink: 276 bytes leftover after parsing attributes in process `syz.4.1086'. [ 81.849076][ T6713] loop6: detected capacity change from 0 to 4096 [ 81.947337][ T6715] loop4: detected capacity change from 0 to 8192 [ 81.965178][ T6713] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.013224][ T6708] lo speed is unknown, defaulting to 1000 [ 82.053784][ T6708] wg1 speed is unknown, defaulting to 1000 [ 82.153548][ T6720] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13 sclass=netlink_route_socket pid=6720 comm=syz.4.1095 [ 82.370701][ T6728] FAULT_INJECTION: forcing a failure. [ 82.370701][ T6728] name failslab, interval 1, probability 0, space 0, times 0 [ 82.383396][ T6728] CPU: 1 UID: 0 PID: 6728 Comm: syz.5.1099 Not tainted syzkaller #0 PREEMPT(voluntary) [ 82.383478][ T6728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 82.383488][ T6728] Call Trace: [ 82.383493][ T6728] [ 82.383500][ T6728] __dump_stack+0x1d/0x30 [ 82.383518][ T6728] dump_stack_lvl+0xe8/0x140 [ 82.383534][ T6728] dump_stack+0x15/0x1b [ 82.383603][ T6728] should_fail_ex+0x265/0x280 [ 82.383619][ T6728] should_failslab+0x8c/0xb0 [ 82.383640][ T6728] __kmalloc_noprof+0xa5/0x570 [ 82.383667][ T6728] ? ip_options_get+0x52/0x350 [ 82.383686][ T6728] ip_options_get+0x52/0x350 [ 82.383703][ T6728] ? tcp_release_cb+0xf1/0x370 [ 82.383718][ T6728] do_ip_setsockopt+0x19d4/0x2240 [ 82.383747][ T6728] ip_setsockopt+0x58/0x110 [ 82.383804][ T6728] tcp_setsockopt+0x98/0xb0 [ 82.383820][ T6728] sock_common_setsockopt+0x69/0x80 [ 82.383840][ T6728] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 82.383909][ T6728] __sys_setsockopt+0x184/0x200 [ 82.383932][ T6728] __x64_sys_setsockopt+0x64/0x80 [ 82.383955][ T6728] x64_sys_call+0x20ec/0x3000 [ 82.383971][ T6728] do_syscall_64+0xd2/0x200 [ 82.384050][ T6728] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 82.384071][ T6728] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 82.384094][ T6728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.384154][ T6728] RIP: 0033:0x7f254e1bf749 [ 82.384225][ T6728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.384239][ T6728] RSP: 002b:00007f254cc27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 82.384255][ T6728] RAX: ffffffffffffffda RBX: 00007f254e415fa0 RCX: 00007f254e1bf749 [ 82.384265][ T6728] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000006 [ 82.384347][ T6728] RBP: 00007f254cc27090 R08: 0000000000000000 R09: 0000000000000000 [ 82.384357][ T6728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.384366][ T6728] R13: 00007f254e416038 R14: 00007f254e415fa0 R15: 00007fff48cc2ee8 [ 82.384382][ T6728] [ 82.591675][ T6731] tipc: Enabling of bearer rejected, failed to enable media [ 82.732836][ T29] kauditd_printk_skb: 345 callbacks suppressed [ 82.732851][ T29] audit: type=1326 audit(1764613219.442:13863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6740 comm="syz.5.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f254e1bf749 code=0x7ffc0000 [ 82.795266][ T6745] loop7: detected capacity change from 0 to 512 [ 82.816623][ T29] audit: type=1326 audit(1764613219.472:13864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6740 comm="syz.5.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f254e1bf749 code=0x7ffc0000 [ 82.816661][ T6745] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 82.850654][ T29] audit: type=1326 audit(1764613219.472:13865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6740 comm="syz.5.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f254e1bf749 code=0x7ffc0000 [ 82.874464][ T29] audit: type=1326 audit(1764613219.482:13866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6740 comm="syz.5.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f254e1bf749 code=0x7ffc0000 [ 82.881641][ T6745] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #16: comm syz.7.1106: invalid indirect mapped block 4294967295 (level 0) [ 82.897931][ T29] audit: type=1326 audit(1764613219.482:13867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6740 comm="syz.5.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f254e1bf749 code=0x7ffc0000 [ 82.934233][ T6745] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #16: comm syz.7.1106: invalid indirect mapped block 4294967295 (level 1) [ 82.935313][ T29] audit: type=1326 audit(1764613219.482:13868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6740 comm="syz.5.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f254e1bf749 code=0x7ffc0000 [ 82.968274][ T6745] EXT4-fs (loop7): 1 orphan inode deleted [ 82.972680][ T29] audit: type=1326 audit(1764613219.482:13869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6740 comm="syz.5.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f254e1bf749 code=0x7ffc0000 [ 82.978611][ T6745] EXT4-fs (loop7): 1 truncate cleaned up [ 83.002165][ T29] audit: type=1326 audit(1764613219.482:13870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6740 comm="syz.5.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f254e1bf749 code=0x7ffc0000 [ 83.031203][ T29] audit: type=1326 audit(1764613219.482:13871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6740 comm="syz.5.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f254e1bf749 code=0x7ffc0000 [ 83.043374][ T6745] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.054676][ T29] audit: type=1326 audit(1764613219.482:13872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6740 comm="syz.5.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f254e1bf749 code=0x7ffc0000 [ 83.220549][ T6713] syz.6.1093 (6713) used greatest stack depth: 7048 bytes left [ 83.233001][ T3968] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.264975][ T6755] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 83.304350][ T6757] rdma_op ffff88811cc5e180 conn xmit_rdma 0000000000000000 [ 83.325309][ T6757] loop6: detected capacity change from 0 to 512 [ 83.353546][ T6766] loop4: detected capacity change from 0 to 512 [ 83.364088][ T6757] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.377273][ T6757] ext4 filesystem being mounted at /171/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.388461][ T6757] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.388518][ T6766] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1115: bg 0: block 248: padding at end of block bitmap is not set [ 83.414895][ T6766] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.1115: Failed to acquire dquot type 1 [ 83.482396][ T6766] EXT4-fs (loop4): 1 truncate cleaned up [ 83.488435][ T6766] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.501507][ T6766] ext4 filesystem being mounted at /214/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.539200][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.617900][ T6781] lo speed is unknown, defaulting to 1000 [ 83.623917][ T6781] lo speed is unknown, defaulting to 1000 [ 83.629939][ T6781] lo speed is unknown, defaulting to 1000 [ 83.636782][ T6781] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 83.651059][ T6049] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.661326][ T6781] lo speed is unknown, defaulting to 1000 [ 83.668879][ T6781] lo speed is unknown, defaulting to 1000 [ 83.683043][ T6781] lo speed is unknown, defaulting to 1000 [ 83.689466][ T6781] lo speed is unknown, defaulting to 1000 [ 83.699678][ T6781] lo speed is unknown, defaulting to 1000 [ 83.808501][ T6796] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 83.886232][ T6805] loop0: detected capacity change from 0 to 128 [ 83.899678][ T6805] vfat: Unknown parameter 'ÿ' [ 84.334008][ T6810] loop5: detected capacity change from 0 to 8192 [ 84.488082][ T6818] FAULT_INJECTION: forcing a failure. [ 84.488082][ T6818] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 84.501232][ T6818] CPU: 0 UID: 0 PID: 6818 Comm: syz.5.1131 Not tainted syzkaller #0 PREEMPT(voluntary) [ 84.501362][ T6818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 84.501372][ T6818] Call Trace: [ 84.501379][ T6818] [ 84.501388][ T6818] __dump_stack+0x1d/0x30 [ 84.501411][ T6818] dump_stack_lvl+0xe8/0x140 [ 84.501432][ T6818] dump_stack+0x15/0x1b [ 84.501448][ T6818] should_fail_ex+0x265/0x280 [ 84.501468][ T6818] should_fail+0xb/0x20 [ 84.501489][ T6818] should_fail_usercopy+0x1a/0x20 [ 84.501517][ T6818] _copy_from_user+0x1c/0xb0 [ 84.501537][ T6818] ___sys_sendmsg+0xc1/0x1d0 [ 84.501630][ T6818] __x64_sys_sendmsg+0xd4/0x160 [ 84.501654][ T6818] x64_sys_call+0x191e/0x3000 [ 84.501671][ T6818] do_syscall_64+0xd2/0x200 [ 84.501691][ T6818] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 84.501736][ T6818] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 84.501764][ T6818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.501785][ T6818] RIP: 0033:0x7f254e1bf749 [ 84.501800][ T6818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.501861][ T6818] RSP: 002b:00007f254cc27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 84.501886][ T6818] RAX: ffffffffffffffda RBX: 00007f254e415fa0 RCX: 00007f254e1bf749 [ 84.501897][ T6818] RDX: 0000000000040000 RSI: 0000200000000100 RDI: 0000000000000003 [ 84.501909][ T6818] RBP: 00007f254cc27090 R08: 0000000000000000 R09: 0000000000000000 [ 84.501921][ T6818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.501934][ T6818] R13: 00007f254e416038 R14: 00007f254e415fa0 R15: 00007fff48cc2ee8 [ 84.501950][ T6818] [ 84.760778][ T6832] siw: device registration error -23 [ 84.773672][ T3376] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 84.781136][ T3376] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 84.788601][ T3376] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 84.792482][ T6832] 9p: Unknown access argument : -22 [ 84.796013][ T3376] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 84.796036][ T3376] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 84.816051][ T6836] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 84.816060][ T3376] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 84.833955][ T3376] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 84.841364][ T3376] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 84.848756][ T3376] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 84.856178][ T3376] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 84.870339][ T3376] hid-generic 0003:0004:0000.0003: hidraw0: USB HID v0.02 Device [syz0] on syz1 [ 84.881973][ T6834] rdma_op ffff88811d37f980 conn xmit_rdma 0000000000000000 [ 84.902882][ T6834] loop7: detected capacity change from 0 to 512 [ 84.922324][ T6842] lo speed is unknown, defaulting to 1000 [ 84.928537][ T6842] wg1 speed is unknown, defaulting to 1000 [ 84.934736][ T6842] lo speed is unknown, defaulting to 1000 [ 84.952654][ T6831] syzkaller0: tun_chr_ioctl cmd 35108 [ 84.990388][ T6834] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.003341][ T6834] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.014886][ T6834] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.101606][ T6860] loop0: detected capacity change from 0 to 128 [ 85.134336][ T6860] vfat: Unknown parameter 'ÿ' [ 85.180930][ T6863] loop5: detected capacity change from 0 to 128 [ 85.249521][ T6863] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 85.262552][ T6863] ext4 filesystem being mounted at /196/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 85.356398][ T6868] loop7: detected capacity change from 0 to 128 [ 85.416084][ T3875] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 85.492830][ T6870] FAULT_INJECTION: forcing a failure. [ 85.492830][ T6870] name failslab, interval 1, probability 0, space 0, times 0 [ 85.505652][ T6870] CPU: 1 UID: 0 PID: 6870 Comm: syz.6.1149 Not tainted syzkaller #0 PREEMPT(voluntary) [ 85.505679][ T6870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 85.505691][ T6870] Call Trace: [ 85.505697][ T6870] [ 85.505704][ T6870] __dump_stack+0x1d/0x30 [ 85.505722][ T6870] dump_stack_lvl+0xe8/0x140 [ 85.505763][ T6870] dump_stack+0x15/0x1b [ 85.505780][ T6870] should_fail_ex+0x265/0x280 [ 85.505800][ T6870] should_failslab+0x8c/0xb0 [ 85.505830][ T6870] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 85.505864][ T6870] ? dup_task_struct+0x70/0x6b0 [ 85.505944][ T6870] dup_task_struct+0x70/0x6b0 [ 85.505968][ T6870] ? _parse_integer+0x27/0x40 [ 85.506000][ T6870] copy_process+0x399/0x2000 [ 85.506021][ T6870] ? kstrtouint+0x76/0xc0 [ 85.506047][ T6870] ? kstrtouint_from_user+0x9f/0xf0 [ 85.506131][ T6870] ? __rcu_read_unlock+0x4f/0x70 [ 85.506156][ T6870] kernel_clone+0x16c/0x5c0 [ 85.506210][ T6870] ? vfs_write+0x7e8/0x960 [ 85.506231][ T6870] __x64_sys_clone+0xe6/0x120 [ 85.506308][ T6870] x64_sys_call+0x119c/0x3000 [ 85.506403][ T6870] do_syscall_64+0xd2/0x200 [ 85.506420][ T6870] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 85.506468][ T6870] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 85.506498][ T6870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.506587][ T6870] RIP: 0033:0x7fc492d1f749 [ 85.506625][ T6870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.506641][ T6870] RSP: 002b:00007fc491786fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 85.506657][ T6870] RAX: ffffffffffffffda RBX: 00007fc492f75fa0 RCX: 00007fc492d1f749 [ 85.506668][ T6870] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060028400 [ 85.506678][ T6870] RBP: 00007fc491787090 R08: 0000000000000000 R09: 0000000000000000 [ 85.506689][ T6870] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 85.506699][ T6870] R13: 00007fc492f76038 R14: 00007fc492f75fa0 R15: 00007ffdb041bbd8 [ 85.506750][ T6870] [ 85.740198][ T6874] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 85.747468][ T6874] IPv6: NLM_F_CREATE should be set when creating new route [ 85.754747][ T6874] IPv6: NLM_F_CREATE should be set when creating new route [ 85.762355][ T6874] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 85.793560][ T6878] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.804032][ T6878] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.804484][ T6877] loop4: detected capacity change from 0 to 8192 [ 85.867173][ T6878] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.877507][ T6878] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.930517][ T6894] __nla_validate_parse: 1 callbacks suppressed [ 85.930531][ T6894] netlink: 7 bytes leftover after parsing attributes in process `syz.6.1157'. [ 85.939023][ T6892] pim6reg: entered allmulticast mode [ 85.961946][ T6878] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.972291][ T6878] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.984322][ T6894] tipc: Enabling of bearer rejected, failed to enable media [ 86.014712][ T6900] pim6reg: left allmulticast mode [ 86.019470][ T6898] loop6: detected capacity change from 0 to 164 [ 86.033036][ T6878] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 86.043945][ T6878] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.135747][ T1742] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.144015][ T1742] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.159745][ T161] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.168039][ T161] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.168063][ T6906] loop7: detected capacity change from 0 to 8192 [ 86.189307][ T161] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.197515][ T161] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.206265][ T161] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.214508][ T161] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.240845][ T6910] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 86.255768][ T6912] loop7: detected capacity change from 0 to 512 [ 86.262583][ T6912] EXT4-fs: Ignoring removed i_version option [ 86.272232][ T6912] /dev/loop7: Can't open blockdev [ 86.343626][ T6924] veth0: entered promiscuous mode [ 86.349220][ T6924] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1170'. [ 86.379946][ T6926] loop7: detected capacity change from 0 to 512 [ 86.392739][ T6926] EXT4-fs warning (device loop7): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 86.408842][ T6926] EXT4-fs (loop7): mount failed [ 86.483876][ T6934] tipc: New replicast peer: 255.255.255.255 [ 86.490014][ T6934] tipc: Enabled bearer , priority 10 [ 86.507821][ T6934] lo speed is unknown, defaulting to 1000 [ 86.515033][ T6934] wg1 speed is unknown, defaulting to 1000 [ 86.522662][ T6934] lo speed is unknown, defaulting to 1000 [ 86.524893][ T6936] syz_tun: entered allmulticast mode [ 86.535992][ T6936] syz_tun: left allmulticast mode [ 86.577173][ T6942] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 86.638199][ T6948] syzkaller0: entered promiscuous mode [ 86.643746][ T6948] syzkaller0: entered allmulticast mode [ 86.678279][ T6954] syzkaller0: entered promiscuous mode [ 86.684405][ T6954] syzkaller0: entered allmulticast mode [ 86.713786][ T6957] netlink: 'syz.6.1183': attribute type 13 has an invalid length. [ 86.739723][ T6959] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1184'. [ 86.760798][ T6957] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.768059][ T6957] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.811748][ T6966] netlink: 92 bytes leftover after parsing attributes in process `syz.7.1186'. [ 86.821460][ T6966] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1186'. [ 86.832563][ T6969] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1183'. [ 86.857141][ T6957] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.867621][ T6957] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.956571][ T6969] bridge0: entered allmulticast mode [ 86.963576][ T6973] loop7: detected capacity change from 0 to 1024 [ 86.970466][ T3502] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.014325][ T6975] netlink: 'syz.0.1188': attribute type 10 has an invalid length. [ 87.024245][ T3502] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.033200][ T6980] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 87.053618][ T3502] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.065185][ T6983] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.075099][ T6983] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 87.089398][ T3502] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.123083][ T6983] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.132989][ T6983] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 87.175610][ T6995] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1195'. [ 87.213520][ T6983] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.223440][ T6983] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 87.252008][ T7002] netlink: 'syz.0.1197': attribute type 1 has an invalid length. [ 87.259828][ T7002] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1197'. [ 87.292632][ T6983] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.302532][ T6983] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 87.398434][ T31] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 87.406777][ T31] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 87.420927][ T3502] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 87.429236][ T3502] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 87.437513][ T3502] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 87.445952][ T3502] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 87.458836][ T7004] loop0: detected capacity change from 0 to 1024 [ 87.462167][ T3502] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 87.473523][ T3502] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 87.492371][ T7004] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.516535][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.611191][ T3387] tipc: Node number set to 473822307 [ 87.993142][ T29] kauditd_printk_skb: 384 callbacks suppressed [ 87.993155][ T29] audit: type=1326 audit(1764613224.702:14254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7018 comm="syz.4.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a9747f749 code=0x7ffc0000 [ 88.024654][ T7019] FAULT_INJECTION: forcing a failure. [ 88.024654][ T7019] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.037769][ T7019] CPU: 1 UID: 0 PID: 7019 Comm: syz.4.1202 Not tainted syzkaller #0 PREEMPT(voluntary) [ 88.037794][ T7019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 88.037804][ T7019] Call Trace: [ 88.037809][ T7019] [ 88.037816][ T7019] __dump_stack+0x1d/0x30 [ 88.037874][ T7019] dump_stack_lvl+0xe8/0x140 [ 88.037890][ T7019] dump_stack+0x15/0x1b [ 88.037903][ T7019] should_fail_ex+0x265/0x280 [ 88.037922][ T7019] should_fail+0xb/0x20 [ 88.038005][ T7019] should_fail_usercopy+0x1a/0x20 [ 88.038025][ T7019] strncpy_from_user+0x25/0x230 [ 88.038052][ T7019] strncpy_from_user_nofault+0x68/0xf0 [ 88.038090][ T7019] bpf_probe_read_compat_str+0xb4/0x130 [ 88.038113][ T7019] bpf_prog_573c5a647519ba93+0x3e/0x44 [ 88.038129][ T7019] bpf_trace_run4+0x117/0x1d0 [ 88.038155][ T7019] __traceiter_sched_switch+0x3f/0x60 [ 88.038234][ T7019] __schedule+0xa17/0xb30 [ 88.038302][ T7019] schedule+0x5f/0xd0 [ 88.038324][ T7019] exit_to_user_mode_loop+0x51/0x110 [ 88.038348][ T7019] do_syscall_64+0x1d6/0x200 [ 88.038409][ T7019] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 88.038438][ T7019] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 88.038469][ T7019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.038488][ T7019] RIP: 0033:0x7f0a9747e1ff [ 88.038502][ T7019] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 88.038519][ T7019] RSP: 002b:00007f0a95edf030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 88.038607][ T7019] RAX: 0000000000000001 RBX: 0000000000000006 RCX: 00007f0a9747e1ff [ 88.038669][ T7019] RDX: 0000000000000001 RSI: 00007f0a95edf090 RDI: 0000000000000006 [ 88.038728][ T7019] RBP: 00007f0a95edf090 R08: 0000000000000000 R09: 00007f0a95ededf7 [ 88.038741][ T7019] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 88.038752][ T7019] R13: 00007f0a976d6038 R14: 00007f0a976d5fa0 R15: 00007ffda852bac8 [ 88.038842][ T7019] [ 88.255794][ T29] audit: type=1326 audit(1764613224.732:14255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7018 comm="syz.4.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a9747f749 code=0x7ffc0000 [ 88.279372][ T29] audit: type=1326 audit(1764613224.732:14256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7018 comm="syz.4.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f0a9747f749 code=0x7ffc0000 [ 88.303446][ T29] audit: type=1326 audit(1764613224.732:14257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7018 comm="syz.4.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a9747f749 code=0x7ffc0000 [ 88.327012][ T29] audit: type=1326 audit(1764613224.732:14258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7018 comm="syz.4.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a9747f749 code=0x7ffc0000 [ 88.350658][ T29] audit: type=1326 audit(1764613224.732:14259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7018 comm="syz.4.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0a9747df90 code=0x7ffc0000 [ 88.374210][ T29] audit: type=1326 audit(1764613224.732:14260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7018 comm="syz.4.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0a9747e1ff code=0x7ffc0000 [ 88.397559][ T29] audit: type=1326 audit(1764613224.942:14261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7018 comm="syz.4.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f0a9747f749 code=0x7ffc0000 [ 88.421181][ T29] audit: type=1326 audit(1764613224.942:14262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7018 comm="syz.4.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f0a9747e15c code=0x7ffc0000 [ 88.444671][ T29] audit: type=1326 audit(1764613224.942:14263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7018 comm="syz.4.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0a9747e1ff code=0x7ffc0000 [ 88.536755][ T7031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1206'. [ 88.546365][ T7031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1206'. [ 88.665701][ T7041] rdma_op ffff88811cf29d80 conn xmit_rdma 0000000000000000 [ 88.677498][ T7041] loop0: detected capacity change from 0 to 512 [ 88.694067][ T7041] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.707003][ T7041] ext4 filesystem being mounted at /269/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.729396][ T7041] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.865651][ T7052] lo speed is unknown, defaulting to 1000 [ 88.928256][ T7055] loop4: detected capacity change from 0 to 1024 [ 88.941737][ T7052] wg1 speed is unknown, defaulting to 1000 [ 88.998491][ T7052] lo speed is unknown, defaulting to 1000 [ 89.368468][ T7055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.378063][ T7055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.426193][ T7062] loop6: detected capacity change from 0 to 1024 [ 89.461138][ T7062] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.532911][ T3968] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.675600][ T7072] loop6: detected capacity change from 0 to 8192 [ 89.819750][ T7087] loop0: detected capacity change from 0 to 4096 [ 89.831440][ T7087] EXT4-fs: Ignoring removed nomblk_io_submit option [ 89.840547][ T7087] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.858110][ T7087] FAULT_INJECTION: forcing a failure. [ 89.858110][ T7087] name failslab, interval 1, probability 0, space 0, times 0 [ 89.870968][ T7087] CPU: 0 UID: 0 PID: 7087 Comm: syz.0.1228 Not tainted syzkaller #0 PREEMPT(voluntary) [ 89.870997][ T7087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 89.871009][ T7087] Call Trace: [ 89.871016][ T7087] [ 89.871023][ T7087] __dump_stack+0x1d/0x30 [ 89.871045][ T7087] dump_stack_lvl+0xe8/0x140 [ 89.871074][ T7087] dump_stack+0x15/0x1b [ 89.871092][ T7087] should_fail_ex+0x265/0x280 [ 89.871113][ T7087] should_failslab+0x8c/0xb0 [ 89.871218][ T7087] kmem_cache_alloc_noprof+0x50/0x480 [ 89.871242][ T7087] ? audit_log_start+0x342/0x720 [ 89.871262][ T7087] audit_log_start+0x342/0x720 [ 89.871334][ T7087] ? kstrtouint+0x76/0xc0 [ 89.871364][ T7087] audit_seccomp+0x48/0x100 [ 89.871393][ T7087] ? __seccomp_filter+0x82d/0x1250 [ 89.871419][ T7087] __seccomp_filter+0x83e/0x1250 [ 89.871473][ T7087] ? __list_add_valid_or_report+0x38/0xe0 [ 89.871502][ T7087] ? _raw_spin_unlock+0x26/0x50 [ 89.871652][ T7087] __secure_computing+0x82/0x150 [ 89.871678][ T7087] syscall_trace_enter+0xcf/0x1e0 [ 89.871707][ T7087] do_syscall_64+0xac/0x200 [ 89.871754][ T7087] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 89.871775][ T7087] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 89.871870][ T7087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.871891][ T7087] RIP: 0033:0x7fe4cb53f749 [ 89.871907][ T7087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.871921][ T7087] RSP: 002b:00007fe4c9fa7038 EFLAGS: 00000246 ORIG_RAX: 000000000000013e [ 89.871937][ T7087] RAX: ffffffffffffffda RBX: 00007fe4cb795fa0 RCX: 00007fe4cb53f749 [ 89.872021][ T7087] RDX: 0000000000000000 RSI: 00000000ffffff9a RDI: 0000200000000240 [ 89.872034][ T7087] RBP: 00007fe4c9fa7090 R08: 0000000000000000 R09: 0000000000000000 [ 89.872047][ T7087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.872060][ T7087] R13: 00007fe4cb796038 R14: 00007fe4cb795fa0 R15: 00007fff662846c8 [ 89.872080][ T7087] [ 90.227223][ T7107] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 90.254398][ T3316] EXT4-fs error (device loop0): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 90.295470][ T3316] EXT4-fs error (device loop0): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 90.311959][ T7113] rdma_op ffff888124527d80 conn xmit_rdma 0000000000000000 [ 90.323120][ T7113] loop7: detected capacity change from 0 to 512 [ 90.344926][ T7113] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.366275][ T7113] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.377635][ T7113] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.387494][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.402155][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.433915][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.493892][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.564616][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.617605][ T7140] netlink: 'syz.6.1246': attribute type 5 has an invalid length. [ 90.640075][ T7140] loop6: detected capacity change from 0 to 1024 [ 90.646955][ T7140] EXT4-fs: inline encryption not supported [ 90.719871][ T12] bond0 (unregistering): Released all slaves [ 90.733610][ T12] bond1 (unregistering): Released all slaves [ 90.744935][ T7140] EXT4-fs (loop6): shut down requested (0) [ 90.759977][ T7127] lo speed is unknown, defaulting to 1000 [ 90.766304][ T7127] wg1 speed is unknown, defaulting to 1000 [ 90.772507][ T7127] lo speed is unknown, defaulting to 1000 [ 90.773664][ T7140] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=15 [ 90.787141][ T7140] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=15 [ 90.796617][ T7140] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=15 [ 90.807561][ T7140] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=15 [ 90.816986][ T7140] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=15 [ 90.828669][ T12] tipc: Left network mode [ 90.835991][ T12] hsr_slave_0: left promiscuous mode [ 90.842192][ T12] hsr_slave_1: left promiscuous mode [ 90.847941][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.855395][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.864273][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.871684][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.882359][ T12] veth1_vlan: left promiscuous mode [ 90.887634][ T12] veth0_vlan: left promiscuous mode [ 90.920975][ T7154] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 90.957781][ T12] team0 (unregistering): Port device team_slave_1 removed [ 90.969071][ T12] team0 (unregistering): Port device team_slave_0 removed [ 91.007648][ T7127] chnl_net:caif_netlink_parms(): no params data found [ 91.047929][ T7127] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.055030][ T7127] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.062739][ T7127] bridge_slave_0: entered allmulticast mode [ 91.069423][ T7127] bridge_slave_0: entered promiscuous mode [ 91.076558][ T7127] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.083638][ T7127] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.091340][ T7127] bridge_slave_1: entered allmulticast mode [ 91.092747][ T7156] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 91.098189][ T7127] bridge_slave_1: entered promiscuous mode [ 91.108775][ T7156] netlink: 'syz.6.1250': attribute type 1 has an invalid length. [ 91.136581][ T7127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.137023][ T7162] netlink: 'syz.7.1251': attribute type 10 has an invalid length. [ 91.153895][ T7162] team0: Device dummy0 is up. Set it down before adding it as a team port [ 91.163823][ T7127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.197161][ T7127] team0: Port device team_slave_0 added [ 91.207204][ T7127] team0: Port device team_slave_1 added [ 91.230491][ T7127] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.237706][ T7127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.264138][ T7127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.276011][ T7127] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.283003][ T7127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.310879][ T7127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.350084][ T7127] hsr_slave_0: entered promiscuous mode [ 91.356650][ T7127] hsr_slave_1: entered promiscuous mode [ 91.362642][ T7127] debugfs: 'hsr0' already exists in 'hsr' [ 91.368352][ T7127] Cannot create hsr debugfs directory [ 91.612220][ T12] IPVS: stop unused estimator thread 0... [ 91.700035][ T7127] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 91.709774][ T7127] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 91.719409][ T7127] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 91.729742][ T7127] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 91.815885][ T7127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.908015][ T7127] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.946719][ T7184] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 91.966349][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.973448][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.086174][ T3502] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.093333][ T3502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.119663][ T7191] wg1 speed is unknown, defaulting to 1000 [ 92.150789][ T7191] lo speed is unknown, defaulting to 1000 [ 92.190622][ T7203] loop4: detected capacity change from 0 to 1024 [ 92.221416][ T7196] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1262'. [ 92.253114][ T7127] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.307823][ T7215] rdma_op ffff88811a39cd80 conn xmit_rdma 0000000000000000 [ 92.349085][ T7215] loop6: detected capacity change from 0 to 512 [ 92.399499][ T7215] ext4 filesystem being mounted at /211/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.476846][ T7227] syzkaller0: entered promiscuous mode [ 92.482441][ T7227] syzkaller0: entered allmulticast mode [ 92.749015][ T7127] veth0_vlan: entered promiscuous mode [ 92.787377][ T7127] veth1_vlan: entered promiscuous mode [ 92.843824][ T7127] veth0_macvtap: entered promiscuous mode [ 92.857142][ T7127] veth1_macvtap: entered promiscuous mode [ 92.880774][ T7127] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.903052][ T7127] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.914194][ T3502] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.945254][ T3502] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.968801][ T3502] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.978343][ T3502] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.019145][ T7255] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 93.076179][ T7257] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 93.083866][ T7257] vhci_hcd: invalid port number 96 [ 93.089066][ T7257] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 93.162997][ T7258] wg1 speed is unknown, defaulting to 1000 [ 93.169537][ T7258] lo speed is unknown, defaulting to 1000 [ 93.320343][ T7261] team0: No ports can be present during mode change [ 93.427176][ T7269] netlink: 'syz.7.1281': attribute type 1 has an invalid length. [ 93.434967][ T7269] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1281'. [ 93.490429][ T7270] loop7: detected capacity change from 0 to 128 [ 93.536119][ T7270] FAT-fs (loop7): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 93.594393][ T7274] loop8: detected capacity change from 0 to 1024 [ 93.663187][ T7276] netlink: '+}[@': attribute type 1 has an invalid length. [ 93.670411][ T7276] netlink: 224 bytes leftover after parsing attributes in process `+}[@'. [ 93.679758][ T29] kauditd_printk_skb: 131 callbacks suppressed [ 93.679772][ T29] audit: type=1400 audit(1764613230.372:14393): avc: denied { getopt } for pid=7275 comm="syz.7.1283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 93.744659][ T7282] loop6: detected capacity change from 0 to 8192 [ 93.813508][ T29] audit: type=1400 audit(1764613230.502:14394): avc: denied { ioctl } for pid=7290 comm="syz.7.1287" path="socket:[21396]" dev="sockfs" ino=21396 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 93.845479][ T7297] netlink: 7 bytes leftover after parsing attributes in process `syz.6.1289'. [ 93.862599][ T7297] tipc: Enabling of bearer rejected, failed to enable media [ 93.905602][ T7303] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 93.944655][ T7299] loop5: detected capacity change from 0 to 8192 [ 94.005305][ T7319] loop6: detected capacity change from 0 to 1024 [ 94.036824][ T29] audit: type=1400 audit(1764613230.732:14395): avc: denied { mounton } for pid=7317 comm="syz.4.1306" path="/255/file0" dev="tmpfs" ino=1366 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 94.104003][ T3502] Bluetooth: hci0: Frame reassembly failed (-84) [ 94.111437][ T7332] loop4: detected capacity change from 0 to 128 [ 94.144863][ T29] audit: type=1400 audit(1764613230.802:14396): avc: denied { connect } for pid=7329 comm="syz.5.1300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 94.164540][ T29] audit: type=1400 audit(1764613230.802:14397): avc: denied { ioctl } for pid=7329 comm="syz.5.1300" path="socket:[21465]" dev="sockfs" ino=21465 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 94.189323][ T29] audit: type=1400 audit(1764613230.812:14398): avc: denied { setopt } for pid=7331 comm="syz.4.1301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 94.209350][ T29] audit: type=1400 audit(1764613230.832:14399): avc: denied { ioctl } for pid=7331 comm="syz.4.1301" path="net:[4026532393]" dev="nsfs" ino=4026532393 ioctlcmd=0xb708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 94.264677][ T7338] FAULT_INJECTION: forcing a failure. [ 94.264677][ T7338] name failslab, interval 1, probability 0, space 0, times 0 [ 94.277467][ T7338] CPU: 0 UID: 0 PID: 7338 Comm: syz.8.1303 Not tainted syzkaller #0 PREEMPT(voluntary) [ 94.277494][ T7338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 94.277507][ T7338] Call Trace: [ 94.277514][ T7338] [ 94.277523][ T7338] __dump_stack+0x1d/0x30 [ 94.277609][ T7338] dump_stack_lvl+0xe8/0x140 [ 94.277625][ T7338] dump_stack+0x15/0x1b [ 94.277715][ T7338] should_fail_ex+0x265/0x280 [ 94.277732][ T7338] should_failslab+0x8c/0xb0 [ 94.277785][ T7338] __kvmalloc_node_noprof+0x12e/0x670 [ 94.277814][ T7338] ? vmemdup_user+0x2b/0xd0 [ 94.277860][ T7338] ? __rcu_read_unlock+0x4f/0x70 [ 94.277886][ T7338] vmemdup_user+0x2b/0xd0 [ 94.277907][ T7338] map_lookup_elem+0x18f/0x460 [ 94.277927][ T7338] ? security_bpf+0x2b/0x90 [ 94.278010][ T7338] __sys_bpf+0x3b9/0x7c0 [ 94.278035][ T7338] __x64_sys_bpf+0x41/0x50 [ 94.278063][ T7338] x64_sys_call+0x2aee/0x3000 [ 94.278081][ T7338] do_syscall_64+0xd2/0x200 [ 94.278155][ T7338] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 94.278183][ T7338] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 94.278214][ T7338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.278309][ T7338] RIP: 0033:0x7f7137ecf749 [ 94.278322][ T7338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.278339][ T7338] RSP: 002b:00007f713692f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 94.278355][ T7338] RAX: ffffffffffffffda RBX: 00007f7138125fa0 RCX: 00007f7137ecf749 [ 94.278366][ T7338] RDX: 0000000000000020 RSI: 0000200000000180 RDI: 0000000000000001 [ 94.278380][ T7338] RBP: 00007f713692f090 R08: 0000000000000000 R09: 0000000000000000 [ 94.278390][ T7338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.278400][ T7338] R13: 00007f7138126038 R14: 00007f7138125fa0 R15: 00007fff7e0be2f8 [ 94.278425][ T7338] [ 94.322647][ T29] audit: type=1400 audit(1764613231.032:14400): avc: denied { write } for pid=7329 comm="syz.5.1300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 94.510829][ T29] audit: type=1326 audit(1764613231.102:14401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7340 comm="syz.8.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7137ecf749 code=0x7ffc0000 [ 94.534488][ T29] audit: type=1326 audit(1764613231.102:14402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7340 comm="syz.8.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f7137ecf749 code=0x7ffc0000 [ 94.562278][ T7358] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 94.592779][ T7360] loop5: detected capacity change from 0 to 512 [ 94.603794][ T7360] ------------[ cut here ]------------ [ 94.609283][ T7360] EA inode 11 i_nlink=2 [ 94.609554][ T7360] WARNING: CPU: 1 PID: 7360 at fs/ext4/xattr.c:1058 ext4_xattr_inode_update_ref+0x36a/0x380 [ 94.624004][ T7360] Modules linked in: [ 94.627909][ T7360] CPU: 1 UID: 0 PID: 7360 Comm: syz.5.1312 Not tainted syzkaller #0 PREEMPT(voluntary) [ 94.637746][ T7360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 94.647866][ T7360] RIP: 0010:ext4_xattr_inode_update_ref+0x36a/0x380 [ 94.654513][ T7360] Code: 90 49 8d 7e 40 e8 d6 f6 b8 ff 4d 8b 6e 40 4c 89 e7 e8 ea f1 b8 ff 41 8b 56 48 48 c7 c7 ff d7 55 86 4c 89 ee e8 a7 f2 67 ff 90 <0f> 0b 90 90 e9 ff fe ff ff e8 28 01 b6 03 0f 1f 84 00 00 00 00 00 [ 94.674172][ T7360] RSP: 0018:ffffc900017d75a0 EFLAGS: 00010246 [ 94.680289][ T7360] RAX: 75a1c018a4044500 RBX: ffff888119c581a8 RCX: 0000000000080000 [ 94.688314][ T7360] RDX: ffffc9000ee06000 RSI: 00000000000041ed RDI: 00000000000041ee [ 94.696315][ T7360] RBP: 0000000000000002 R08: 0001c900017d7427 R09: 0000000000000000 [ 94.704502][ T7360] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff888119c58158 [ 94.712510][ T7360] R13: 000000000000000b R14: ffff888119c58110 R15: 0000000000000001 [ 94.720484][ T7360] FS: 00007f254cc276c0(0000) GS:ffff8882aef10000(0000) knlGS:0000000000000000 [ 94.729502][ T7360] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 94.736109][ T7360] CR2: 0000001b2ed22ff8 CR3: 0000000124440000 CR4: 00000000003506f0 [ 94.744101][ T7360] Call Trace: [ 94.744300][ T7364] loop6: detected capacity change from 0 to 512 [ 94.747413][ T7360] [ 94.747426][ T7360] ext4_xattr_set_entry+0x77f/0x1020 [ 94.747465][ T7360] ext4_xattr_ibody_set+0x184/0x3c0 [ 94.767161][ T7360] ext4_expand_extra_isize_ea+0xcbb/0x11f0 [ 94.773007][ T7360] __ext4_expand_extra_isize+0x246/0x280 [ 94.773017][ T7364] ext4 filesystem being mounted at /224/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.789067][ T7360] __ext4_mark_inode_dirty+0x29d/0x3f0 [ 94.794537][ T7360] ext4_evict_inode+0x80e/0xd90 [ 94.799451][ T7360] ? __pfx_ext4_evict_inode+0x10/0x10 [ 94.804831][ T7360] evict+0x2e3/0x550 [ 94.808730][ T7360] ? __dquot_initialize+0x146/0x7c0 [ 94.813971][ T7360] iput+0x4ed/0x650 [ 94.817805][ T7360] ext4_process_orphan+0x1a9/0x1c0 [ 94.822917][ T7360] ext4_orphan_cleanup+0x6a8/0xa00 [ 94.828147][ T7360] ext4_fill_super+0x3483/0x3810 [ 94.833136][ T7360] ? snprintf+0x86/0xb0 [ 94.837280][ T7360] ? set_blocksize+0x1a8/0x310 [ 94.842137][ T7360] ? sb_set_blocksize+0xe3/0x100 [ 94.847150][ T7360] ? setup_bdev_super+0x30e/0x370 [ 94.852193][ T7360] ? __pfx_ext4_fill_super+0x10/0x10 [ 94.857515][ T7360] get_tree_bdev_flags+0x291/0x300 [ 94.862681][ T7360] ? __pfx_ext4_fill_super+0x10/0x10 [ 94.867978][ T7360] get_tree_bdev+0x1f/0x30 [ 94.872424][ T7360] ext4_get_tree+0x1c/0x30 [ 94.876827][ T7360] vfs_get_tree+0x57/0x1d0 [ 94.881316][ T7360] do_new_mount+0x24d/0x660 [ 94.885885][ T7360] path_mount+0x4a5/0xb70 [ 94.890210][ T7360] ? user_path_at+0x109/0x130 [ 94.895067][ T7360] __se_sys_mount+0x28c/0x2e0 [ 94.899738][ T7360] __x64_sys_mount+0x67/0x80 [ 94.904363][ T7360] x64_sys_call+0x2b51/0x3000 [ 94.909067][ T7360] do_syscall_64+0xd2/0x200 [ 94.913658][ T7360] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 94.919824][ T7360] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 94.925734][ T7360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.931719][ T7360] RIP: 0033:0x7f254e1c0eea [ 94.936129][ T7360] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.955843][ T7360] RSP: 002b:00007f254cc26e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 94.964280][ T7360] RAX: ffffffffffffffda RBX: 00007f254cc26ef0 RCX: 00007f254e1c0eea [ 94.972265][ T7360] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f254cc26eb0 [ 94.980575][ T7360] RBP: 0000200000000180 R08: 00007f254cc26ef0 R09: 0000000000800700 [ 94.988554][ T7360] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 94.996540][ T7360] R13: 00007f254cc26eb0 R14: 000000000000046f R15: 000000000000002c [ 95.004840][ T7360] [ 95.007861][ T7360] ---[ end trace 0000000000000000 ]--- [ 95.013645][ T7360] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #18: comm syz.5.1312: iget: bad extra_isize 90 (inode size 256) [ 95.027501][ T7360] EXT4-fs (loop5): Remounting filesystem read-only [ 95.050205][ T7360] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -30) [ 95.060372][ T7360] EXT4-fs (loop5): 1 orphan inode deleted [ 95.079534][ T7360] ªªªªªªÿÿ: renamed from vlan0 (while UP) [ 95.118383][ T7370] loop6: detected capacity change from 0 to 8192 [ 95.173974][ T7378] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 95.190001][ T7378] vhci_hcd: invalid port number 96 [ 95.195390][ T7378] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 95.250049][ T7393] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 95.289209][ T7399] loop5: detected capacity change from 0 to 2048 [ 95.304762][ T7403] FAULT_INJECTION: forcing a failure. [ 95.304762][ T7403] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 95.318020][ T7403] CPU: 0 UID: 0 PID: 7403 Comm: syz.6.1329 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 95.318049][ T7403] Tainted: [W]=WARN [ 95.318055][ T7403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 95.318067][ T7403] Call Trace: [ 95.318074][ T7403] [ 95.318087][ T7403] __dump_stack+0x1d/0x30 [ 95.318108][ T7403] dump_stack_lvl+0xe8/0x140 [ 95.318148][ T7403] dump_stack+0x15/0x1b [ 95.318162][ T7403] should_fail_ex+0x265/0x280 [ 95.318178][ T7403] should_fail+0xb/0x20 [ 95.318202][ T7403] should_fail_usercopy+0x1a/0x20 [ 95.318223][ T7403] _copy_from_user+0x1c/0xb0 [ 95.318279][ T7403] rds_rdma_extra_size+0xe2/0x270 [ 95.318368][ T7403] ? krealloc_node_align_noprof+0x154/0x340 [ 95.318395][ T7403] rds_rm_size+0x331/0x490 [ 95.318415][ T7403] rds_sendmsg+0x842/0x14a0 [ 95.318520][ T7403] ? __pfx_rds_sendmsg+0x10/0x10 [ 95.318540][ T7403] __sock_sendmsg+0x145/0x180 [ 95.318565][ T7403] ____sys_sendmsg+0x31e/0x4e0 [ 95.318585][ T7403] ___sys_sendmsg+0x17b/0x1d0 [ 95.318692][ T7403] __x64_sys_sendmsg+0xd4/0x160 [ 95.318715][ T7403] x64_sys_call+0x191e/0x3000 [ 95.318733][ T7403] do_syscall_64+0xd2/0x200 [ 95.318762][ T7403] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 95.318843][ T7403] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 95.318873][ T7403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.318955][ T7403] RIP: 0033:0x7fc492d1f749 [ 95.318970][ T7403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.318987][ T7403] RSP: 002b:00007fc491787038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 95.319028][ T7403] RAX: ffffffffffffffda RBX: 00007fc492f75fa0 RCX: 00007fc492d1f749 [ 95.319041][ T7403] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000006 [ 95.319052][ T7403] RBP: 00007fc491787090 R08: 0000000000000000 R09: 0000000000000000 [ 95.319084][ T7403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.319096][ T7403] R13: 00007fc492f76038 R14: 00007fc492f75fa0 R15: 00007ffdb041bbd8 [ 95.319114][ T7403] [ 95.535628][ T7399] loop5: p2 p3 p7 [ 95.575478][ T7416] pimreg: entered allmulticast mode [ 95.586075][ T7416] pimreg: left allmulticast mode [ 95.591477][ T7416] FAULT_INJECTION: forcing a failure. [ 95.591477][ T7416] name failslab, interval 1, probability 0, space 0, times 0 [ 95.604253][ T7416] CPU: 1 UID: 0 PID: 7416 Comm: Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 95.604285][ T7416] Tainted: [W]=WARN [ 95.604290][ T7416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 95.604371][ T7416] Call Trace: [ 95.604377][ T7416] [ 95.604385][ T7416] __dump_stack+0x1d/0x30 [ 95.604404][ T7416] dump_stack_lvl+0xe8/0x140 [ 95.604420][ T7416] dump_stack+0x15/0x1b [ 95.604433][ T7416] should_fail_ex+0x265/0x280 [ 95.604583][ T7416] should_failslab+0x8c/0xb0 [ 95.604605][ T7416] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 95.604628][ T7416] ? __alloc_skb+0x101/0x320 [ 95.604653][ T7416] __alloc_skb+0x101/0x320 [ 95.604737][ T7416] rtmsg_ifinfo_build_skb+0x5f/0x1b0 [ 95.604823][ T7416] ? dev_deactivate_many+0x1eb/0x730 [ 95.604855][ T7416] rtmsg_ifinfo+0x6d/0x110 [ 95.604875][ T7416] netif_close_many+0x14d/0x240 [ 95.604940][ T7416] ? should_failslab+0x8c/0xb0 [ 95.604962][ T7416] unregister_netdevice_many_notify+0x509/0x1690 [ 95.604984][ T7416] unregister_netdevice_queue+0x1f5/0x220 [ 95.605076][ T7416] vif_delete+0x370/0x430 [ 95.605098][ T7416] ip_mroute_setsockopt+0x89e/0x960 [ 95.605146][ T7416] do_ip_setsockopt+0xcea/0x2240 [ 95.605178][ T7416] ip_setsockopt+0x58/0x110 [ 95.605204][ T7416] raw_setsockopt+0xbd/0x150 [ 95.605249][ T7416] sock_common_setsockopt+0x69/0x80 [ 95.605271][ T7416] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 95.605333][ T7416] __sys_setsockopt+0x184/0x200 [ 95.605357][ T7416] __x64_sys_setsockopt+0x64/0x80 [ 95.605414][ T7416] x64_sys_call+0x20ec/0x3000 [ 95.605435][ T7416] do_syscall_64+0xd2/0x200 [ 95.605521][ T7416] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 95.605681][ T7416] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 95.605728][ T7416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.605745][ T7416] RIP: 0033:0x7fc492d1f749 [ 95.605760][ T7416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.605804][ T7416] RSP: 002b:00007fc491787038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 95.605823][ T7416] RAX: ffffffffffffffda RBX: 00007fc492f75fa0 RCX: 00007fc492d1f749 [ 95.605836][ T7416] RDX: 00000000000000cb RSI: 0000000000000000 RDI: 0000000000000003 [ 95.605897][ T7416] RBP: 00007fc491787090 R08: 0000000000000010 R09: 0000000000000000 [ 95.605909][ T7416] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000001 [ 95.605930][ T7416] R13: 00007fc492f76038 R14: 00007fc492f75fa0 R15: 00007ffdb041bbd8 [ 95.605949][ T7416] [ 95.863721][ T7412] loop8: detected capacity change from 0 to 8192 [ 95.865973][ T7420] loop5: detected capacity change from 0 to 512 [ 95.876825][ T7420] EXT4-fs: dax option not supported [ 95.886318][ T42] Bluetooth: hci1: Frame reassembly failed (-84) [ 95.943364][ T7427] netlink: 172 bytes leftover after parsing attributes in process `syz.5.1336'. [ 95.983781][ T7428] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 96.001036][ T7428] vhci_hcd: invalid port number 96 [ 96.006185][ T7428] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 96.035087][ T7433] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1339'. [ 96.067818][ T7435] syzkaller0: entered promiscuous mode [ 96.073524][ T7435] syzkaller0: entered allmulticast mode [ 96.121715][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 96.123826][ T5479] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 96.298416][ T7451] loop4: detected capacity change from 0 to 164 [ 96.305017][ T7451] iso9660: Unknown parameter '' [ 96.334274][ T7453] pimreg: entered allmulticast mode [ 96.390010][ T7453] loop4: detected capacity change from 0 to 512 [ 96.431724][ T7453] EXT4-fs mount: 14 callbacks suppressed [ 96.431762][ T7453] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.451993][ T7453] ext4 filesystem being mounted at /259/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.471296][ T7453] netlink: 12 bytes leftover after parsing attributes in process `'. [ 96.601504][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.621377][ T7457] netlink: 'syz.4.1350': attribute type 1 has an invalid length. [ 97.006232][ T7473] loop6: detected capacity change from 0 to 1024 [ 97.022294][ T7473] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.046783][ T7480] loop7: detected capacity change from 0 to 512 [ 97.053844][ T3968] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.062570][ T7480] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.075611][ T7480] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.086718][ T7480] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.161395][ T7487] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1361'. [ 97.839185][ T7512] loop4: detected capacity change from 0 to 512 [ 97.923443][ T7512] hub 9-0:1.0: USB hub found [ 97.928180][ T7512] hub 9-0:1.0: 8 ports detected [ 97.933351][ T7508] loop6: detected capacity change from 0 to 512 [ 97.936358][ T7516] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7516 comm=syz.4.1371 [ 97.952228][ T7508] EXT4-fs (loop6): inodes count not valid: 115 vs 32 [ 97.961289][ T5479] Bluetooth: hci1: command 0x1003 tx timeout [ 97.967392][ T3547] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 98.194601][ T3502] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 98.204729][ T3502] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 98.281373][ T7523] loop7: detected capacity change from 0 to 512 [ 98.292525][ T3502] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 98.302472][ T3502] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 98.341979][ T7525] wg1 speed is unknown, defaulting to 1000 [ 98.349248][ T7525] lo speed is unknown, defaulting to 1000 [ 98.376769][ T3502] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 98.386763][ T3502] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 98.422558][ T7525] chnl_net:caif_netlink_parms(): no params data found [ 98.438555][ T3502] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 98.448545][ T3502] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 98.479082][ T7525] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.486215][ T7525] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.493472][ T7525] bridge_slave_0: entered allmulticast mode [ 98.499844][ T7525] bridge_slave_0: entered promiscuous mode [ 98.506631][ T7525] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.513728][ T7525] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.521172][ T7525] bridge_slave_1: entered allmulticast mode [ 98.527635][ T7525] bridge_slave_1: entered promiscuous mode [ 98.552547][ T7525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.572270][ T7525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.743229][ T3502] bond0 (unregistering): Released all slaves [ 98.759795][ T7014] wg1 speed is unknown, defaulting to 1000 [ 98.765803][ T7014] syz: Port: 1 Link DOWN [ 98.771735][ T7525] team0: Port device team_slave_0 added [ 98.778378][ T7525] team0: Port device team_slave_1 added [ 98.794517][ T7525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.801533][ T7525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.827490][ T7525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.839258][ T7525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.846332][ T7525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.846358][ T7548] FAULT_INJECTION: forcing a failure. [ 98.846358][ T7548] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.872305][ T7525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.885410][ T7548] CPU: 1 UID: 0 PID: 7548 Comm: syz.6.1381 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 98.885509][ T7548] Tainted: [W]=WARN [ 98.885516][ T7548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 98.885528][ T7548] Call Trace: [ 98.885534][ T7548] [ 98.885618][ T7548] __dump_stack+0x1d/0x30 [ 98.885639][ T7548] dump_stack_lvl+0xe8/0x140 [ 98.885675][ T7548] dump_stack+0x15/0x1b [ 98.885691][ T7548] should_fail_ex+0x265/0x280 [ 98.885715][ T7548] should_fail+0xb/0x20 [ 98.885731][ T7548] should_fail_usercopy+0x1a/0x20 [ 98.885750][ T7548] _copy_from_user+0x1c/0xb0 [ 98.885811][ T7548] restore_altstack+0x4b/0x2d0 [ 98.885849][ T7548] ? __set_task_blocked+0x23a/0x2a0 [ 98.885873][ T7548] __ia32_sys_rt_sigreturn+0xdc/0x350 [ 98.885894][ T7548] ? _raw_spin_unlock_irq+0x26/0x50 [ 98.885953][ T7548] ? signal_setup_done+0x266/0x290 [ 98.885972][ T7548] ? xfd_validate_state+0x45/0xf0 [ 98.885999][ T7548] ? fpu__clear_user_states+0x63/0x270 [ 98.886072][ T7548] ? fpregs_mark_activate+0x66/0x140 [ 98.886118][ T7548] ? fpu__clear_user_states+0x63/0x270 [ 98.886145][ T7548] ? arch_do_signal_or_restart+0x2b5/0x440 [ 98.886227][ T7548] x64_sys_call+0x2d4b/0x3000 [ 98.886247][ T7548] do_syscall_64+0xd2/0x200 [ 98.886315][ T7548] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 98.886340][ T7548] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 98.886369][ T7548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.886460][ T7548] RIP: 0033:0x7fc492cbb829 [ 98.886475][ T7548] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 98.886491][ T7548] RSP: 002b:00007fc491786a80 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 98.886509][ T7548] RAX: ffffffffffffffda RBX: 00007fc492f75fa0 RCX: 00007fc492cbb829 [ 98.886521][ T7548] RDX: 00007fc491786a80 RSI: 00007fc491786bb0 RDI: 0000000000000011 [ 98.886533][ T7548] RBP: 00007fc491787090 R08: 0000200000048000 R09: 0000000000000300 [ 98.886545][ T7548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.886602][ T7548] R13: 00007fc492f76038 R14: 00007fc492f75fa0 R15: 00007ffdb041bbd8 [ 98.886620][ T7548] [ 99.007183][ T7555] loop6: detected capacity change from 0 to 512 [ 99.123044][ T3502] tipc: Disabling bearer [ 99.128278][ T3502] tipc: Left network mode [ 99.141226][ T7525] hsr_slave_0: entered promiscuous mode [ 99.149641][ T7525] hsr_slave_1: entered promiscuous mode [ 99.155868][ T7555] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.168909][ T7555] ext4 filesystem being mounted at /246/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.179812][ T7525] debugfs: 'hsr0' already exists in 'hsr' [ 99.185590][ T7525] Cannot create hsr debugfs directory [ 99.191400][ T29] kauditd_printk_skb: 160 callbacks suppressed [ 99.191412][ T29] audit: type=1326 audit(1764613235.902:14563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7559 comm="syz.7.1383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59bc7df749 code=0x7ffc0000 [ 99.226239][ T7555] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.243760][ T29] audit: type=1326 audit(1764613235.902:14564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7559 comm="syz.7.1383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f59bc7df749 code=0x7ffc0000 [ 99.267305][ T29] audit: type=1326 audit(1764613235.902:14565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7559 comm="syz.7.1383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59bc7df749 code=0x7ffc0000 [ 99.290831][ T29] audit: type=1326 audit(1764613235.902:14566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7559 comm="syz.7.1383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f59bc7df749 code=0x7ffc0000 [ 99.314444][ T29] audit: type=1326 audit(1764613235.932:14567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7559 comm="syz.7.1383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59bc7df749 code=0x7ffc0000 [ 99.337975][ T29] audit: type=1326 audit(1764613235.932:14568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7559 comm="syz.7.1383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59bc7df749 code=0x7ffc0000 [ 99.361580][ T29] audit: type=1326 audit(1764613235.932:14569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7559 comm="syz.7.1383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f59bc7df749 code=0x7ffc0000 [ 99.385124][ T29] audit: type=1326 audit(1764613235.932:14570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7559 comm="syz.7.1383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59bc7df749 code=0x7ffc0000 [ 99.408627][ T29] audit: type=1326 audit(1764613235.932:14571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7559 comm="syz.7.1383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59bc7df749 code=0x7ffc0000 [ 99.432135][ T29] audit: type=1326 audit(1764613235.932:14572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7559 comm="syz.7.1383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f59bc7df749 code=0x7ffc0000 [ 99.457871][ T3502] hsr_slave_0: left promiscuous mode [ 99.463815][ T3502] hsr_slave_1: left promiscuous mode [ 99.472663][ T3502] veth1_macvtap: left promiscuous mode [ 99.479387][ T3502] veth0_macvtap: left promiscuous mode [ 99.485947][ T3502] veth1_vlan: left promiscuous mode [ 99.491379][ T3502] veth0_vlan: left promiscuous mode [ 99.497166][ T7570] loop6: detected capacity change from 0 to 164 [ 99.515673][ T7570] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 99.542743][ T7570] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1388'. [ 99.567328][ T3502] pimreg (unregistering): left allmulticast mode [ 99.613041][ T7571] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 99.631617][ T7571] Symlink component flag not implemented [ 99.637265][ T7571] Symlink component flag not implemented [ 99.656642][ T7571] Symlink component flag not implemented (7) [ 99.662749][ T7571] Symlink component flag not implemented (116) [ 99.686835][ T7570] IPVS: Error connecting to the multicast addr [ 99.693074][ T7014] lo speed is unknown, defaulting to 1000 [ 99.698800][ T7014] infiniband syz2: ib_query_port failed (-19) [ 99.764545][ T7525] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 99.773442][ T7525] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 99.782861][ T7525] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 99.792495][ T7525] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 99.854381][ T7579] lo speed is unknown, defaulting to 1000 [ 99.856690][ T7525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.869436][ T7579] lo speed is unknown, defaulting to 1000 [ 99.874449][ T7525] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.891927][ T7579] lo speed is unknown, defaulting to 1000 [ 99.898850][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.905903][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.919992][ T7579] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 99.933156][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.940367][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.956701][ T7525] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 99.967139][ T7525] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 99.980434][ T7579] lo speed is unknown, defaulting to 1000 [ 99.982533][ T3502] IPVS: stop unused estimator thread 0... [ 99.990334][ T7579] lo speed is unknown, defaulting to 1000 [ 99.998219][ T7579] lo speed is unknown, defaulting to 1000 [ 100.006151][ T7579] lo speed is unknown, defaulting to 1000 [ 100.015201][ T7579] lo speed is unknown, defaulting to 1000 [ 100.111460][ T7525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.118693][ T7598] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3584 sclass=netlink_route_socket pid=7598 comm=syz.8.1394 [ 100.169049][ T7598] loop8: detected capacity change from 0 to 2048 [ 100.186907][ T7598] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.207447][ T7598] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.254207][ T7525] veth0_vlan: entered promiscuous mode [ 100.273766][ T7618] loop7: detected capacity change from 0 to 512 [ 100.291631][ T7525] veth1_vlan: entered promiscuous mode [ 100.302677][ T7618] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.332633][ T7598] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1394'. [ 100.344162][ T7525] veth0_macvtap: entered promiscuous mode [ 100.361931][ T7618] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.383338][ T7525] veth1_macvtap: entered promiscuous mode [ 100.390455][ T7618] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.412061][ T7525] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.436506][ T7525] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.463878][ T3502] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.484374][ T3502] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.510607][ T3502] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.527628][ T3502] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.557076][ T7629] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 100.570132][ T7629] vhci_hcd: invalid port number 96 [ 100.575408][ T7629] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 100.664278][ T7647] loop9: detected capacity change from 0 to 1024 [ 100.675679][ T7648] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.689375][ T7647] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 100.701978][ T7647] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.714736][ T7646] EXT4-fs error (device loop9): ext4_free_blocks:6706: comm syz.9.1408: Freeing blocks not in datazone - block = 0, count = 16 [ 100.738503][ T7648] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.750326][ T7646] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.1408: bg 0: block 112: padding at end of block bitmap is not set [ 100.766167][ T7646] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 100.785702][ T7525] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 100.808574][ T7648] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.878267][ T7648] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.958909][ T7127] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.991474][ T52] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.460389][ T7659] Set syz1 is full, maxelem 65536 reached [ 101.541333][ T52] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.572839][ T31] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.595669][ T7663] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 101.595646][ T31] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.623581][ T7663] vhci_hcd: invalid port number 96 [ 101.628718][ T7663] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 101.636838][ T7667] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 101.647812][ T7667] vhci_hcd: invalid port number 96 [ 101.653048][ T7667] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 101.696749][ T7674] loop7: detected capacity change from 0 to 1024 [ 101.720806][ T7672] SELinux: failed to load policy [ 101.727092][ T7674] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 101.742274][ T7672] loop8: detected capacity change from 0 to 512 [ 101.749235][ T7674] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.760251][ T7672] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 101.783766][ T7676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.793074][ T7672] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.801903][ T7676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.807620][ T6049] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 101.823020][ T7672] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 101.857865][ T7672] EXT4-fs error (device loop8): ext4_lookup:1787: inode #12: comm syz.8.1416: iget: bad i_size value: 2533274857506816 [ 101.881889][ T7672] EXT4-fs error (device loop8): ext4_lookup:1787: inode #12: comm syz.8.1416: iget: bad i_size value: 2533274857506816 [ 101.912426][ T7127] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.016937][ T7692] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 102.025577][ T7692] vhci_hcd: invalid port number 96 [ 102.030961][ T7692] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 102.082990][ T7702] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 102.090463][ T7702] vhci_hcd: invalid port number 96 [ 102.096132][ T7702] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 102.137640][ T7707] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.169624][ T7709] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 102.183996][ T7707] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.244010][ T7707] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.290867][ T3968] ================================================================== [ 102.298975][ T3968] BUG: KCSAN: data-race in __dentry_kill / step_into [ 102.305672][ T3968] [ 102.307990][ T3968] read-write to 0xffff888119f83600 of 4 bytes by task 3875 on cpu 1: [ 102.316051][ T3968] __dentry_kill+0x230/0x4b0 [ 102.320652][ T3968] dput+0x5e/0xd0 [ 102.324280][ T3968] __fput+0x444/0x650 [ 102.328347][ T3968] fput_close_sync+0x6e/0x120 [ 102.333022][ T3968] __x64_sys_close+0x56/0xf0 [ 102.337622][ T3968] x64_sys_call+0x273c/0x3000 [ 102.342302][ T3968] do_syscall_64+0xd2/0x200 [ 102.346812][ T3968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.352704][ T3968] [ 102.355021][ T3968] read to 0xffff888119f83600 of 4 bytes by task 3968 on cpu 0: [ 102.362556][ T3968] step_into+0x12f/0x7f0 [ 102.366796][ T3968] path_openat+0x13e8/0x2170 [ 102.371389][ T3968] do_filp_open+0x109/0x230 [ 102.375885][ T3968] do_sys_openat2+0xa6/0x110 [ 102.380461][ T3968] __x64_sys_openat+0xf2/0x120 [ 102.385249][ T3968] x64_sys_call+0x2eab/0x3000 [ 102.390085][ T3968] do_syscall_64+0xd2/0x200 [ 102.394575][ T3968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.400452][ T3968] [ 102.402761][ T3968] value changed: 0x00200080 -> 0x00004080 [ 102.408454][ T3968] [ 102.410763][ T3968] Reported by Kernel Concurrency Sanitizer on: [ 102.416902][ T3968] CPU: 0 UID: 0 PID: 3968 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 102.428516][ T3968] Tainted: [W]=WARN [ 102.432299][ T3968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 102.442337][ T3968] ================================================================== [ 102.504379][ T7707] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.535304][ T7718] lo speed is unknown, defaulting to 1000 [ 102.551306][ T7719] FAULT_INJECTION: forcing a failure. [ 102.551306][ T7719] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.564471][ T7719] CPU: 0 UID: 0 PID: 7719 Comm: syz.9.1435 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 102.564516][ T7719] Tainted: [W]=WARN [ 102.564521][ T7719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 102.564531][ T7719] Call Trace: [ 102.564536][ T7719] [ 102.564543][ T7719] __dump_stack+0x1d/0x30 [ 102.564571][ T7719] dump_stack_lvl+0xe8/0x140 [ 102.564702][ T7719] dump_stack+0x15/0x1b [ 102.564758][ T7719] should_fail_ex+0x265/0x280 [ 102.564776][ T7719] should_fail+0xb/0x20 [ 102.564791][ T7719] should_fail_usercopy+0x1a/0x20 [ 102.564808][ T7719] _copy_from_user+0x1c/0xb0 [ 102.564830][ T7719] do_ipt_set_ctl+0x3a0/0x820 [ 102.564894][ T7719] ? lock_sock_nested+0x112/0x140 [ 102.564921][ T7719] nf_setsockopt+0x199/0x1b0 [ 102.564943][ T7719] ip_setsockopt+0x102/0x110 [ 102.564970][ T7719] udp_setsockopt+0x99/0xb0 [ 102.565030][ T7719] sock_common_setsockopt+0x69/0x80 [ 102.565053][ T7719] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 102.565077][ T7719] __sys_setsockopt+0x184/0x200 [ 102.565162][ T7719] __x64_sys_setsockopt+0x64/0x80 [ 102.565205][ T7719] x64_sys_call+0x20ec/0x3000 [ 102.565222][ T7719] do_syscall_64+0xd2/0x200 [ 102.565239][ T7719] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 102.565343][ T7719] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 102.565372][ T7719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.565391][ T7719] RIP: 0033:0x7f3f0443f749 [ 102.565405][ T7719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.565471][ T7719] RSP: 002b:00007f3f02e7e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 102.565490][ T7719] RAX: ffffffffffffffda RBX: 00007f3f04696090 RCX: 00007f3f0443f749 [ 102.565504][ T7719] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000006 [ 102.565516][ T7719] RBP: 00007f3f02e7e090 R08: 00000000000003d0 R09: 0000000000000000 [ 102.565527][ T7719] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000001 [ 102.565610][ T7719] R13: 00007f3f04696128 R14: 00007f3f04696090 R15: 00007ffc5b898568 [ 102.565627][ T7719] [ 102.793686][ T3502] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.813078][ T3502] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.822343][ T3502] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.849562][ T3502] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.125767][ T3968] ================================================================== [ 103.134241][ T3968] BUG: KCSAN: data-race in __dentry_kill / fast_dput [ 103.142605][ T3968] [ 103.144948][ T3968] write to 0xffff888119f863d0 of 8 bytes by task 3875 on cpu 1: [ 103.153193][ T3968] __dentry_kill+0x142/0x4b0 [ 103.158317][ T3968] dput+0x5e/0xd0 [ 103.162323][ T3968] do_unlinkat+0x259/0x480 [ 103.166744][ T3968] __x64_sys_unlink+0x2e/0x40 [ 103.171772][ T3968] x64_sys_call+0x2dcf/0x3000 [ 103.176722][ T3968] do_syscall_64+0xd2/0x200 [ 103.181403][ T3968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.187323][ T3968] [ 103.189642][ T3968] read to 0xffff888119f863d0 of 8 bytes by task 3968 on cpu 0: [ 103.197262][ T3968] fast_dput+0x5f/0x2c0 [ 103.201438][ T3968] dput+0x24/0xd0 [ 103.205087][ T3968] __fput+0x444/0x650 [ 103.209067][ T3968] fput_close_sync+0x6e/0x120 [ 103.213753][ T3968] __x64_sys_close+0x56/0xf0 [ 103.218360][ T3968] x64_sys_call+0x273c/0x3000 [ 103.223036][ T3968] do_syscall_64+0xd2/0x200 [ 103.228071][ T3968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.233959][ T3968] [ 103.236275][ T3968] value changed: 0xffff888237946b68 -> 0x0000000000000000 [ 103.243391][ T3968] [ 103.245840][ T3968] Reported by Kernel Concurrency Sanitizer on: [ 103.251987][ T3968] CPU: 0 UID: 0 PID: 3968 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 103.263450][ T3968] Tainted: [W]=WARN [ 103.267246][ T3968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 103.277565][ T3968] ================================================================== [ 103.445764][ T3968] ================================================================== [ 103.453878][ T3968] BUG: KCSAN: data-race in __dentry_kill / step_into [ 103.460578][ T3968] [ 103.462908][ T3968] read-write to 0xffff88810723e480 of 4 bytes by task 3875 on cpu 1: [ 103.471046][ T3968] __dentry_kill+0x230/0x4b0 [ 103.476091][ T3968] dput+0x5e/0xd0 [ 103.479905][ T3968] __fput+0x444/0x650 [ 103.483992][ T3968] fput_close_sync+0x6e/0x120 [ 103.488703][ T3968] __x64_sys_close+0x56/0xf0 [ 103.493508][ T3968] x64_sys_call+0x273c/0x3000 [ 103.498195][ T3968] do_syscall_64+0xd2/0x200 [ 103.502718][ T3968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.508607][ T3968] [ 103.510931][ T3968] read to 0xffff88810723e480 of 4 bytes by task 3968 on cpu 0: [ 103.518579][ T3968] step_into+0xe3/0x7f0 [ 103.522850][ T3968] path_openat+0x13e8/0x2170 [ 103.527459][ T3968] do_filp_open+0x109/0x230 [ 103.531958][ T3968] do_sys_openat2+0xa6/0x110 [ 103.536634][ T3968] __x64_sys_openat+0xf2/0x120 [ 103.541485][ T3968] x64_sys_call+0x2eab/0x3000 [ 103.546163][ T3968] do_syscall_64+0xd2/0x200 [ 103.550760][ T3968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.556651][ T3968] [ 103.558965][ T3968] value changed: 0x00200080 -> 0x00004080 [ 103.564669][ T3968] [ 103.566982][ T3968] Reported by Kernel Concurrency Sanitizer on: [ 103.573128][ T3968] CPU: 0 UID: 0 PID: 3968 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 103.584581][ T3968] Tainted: [W]=WARN [ 103.588372][ T3968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 103.598427][ T3968] ================================================================== [ 104.463084][ T3968] ================================================================== [ 104.471290][ T3968] BUG: KCSAN: data-race in __dentry_kill / lookup_fast [ 104.478154][ T3968] [ 104.480470][ T3968] read-write to 0xffff888119f05a80 of 4 bytes by task 3875 on cpu 1: [ 104.488522][ T3968] __dentry_kill+0x230/0x4b0 [ 104.493125][ T3968] dput+0x5e/0xd0 [ 104.496759][ T3968] __fput+0x444/0x650 [ 104.500739][ T3968] fput_close_sync+0x6e/0x120 [ 104.505418][ T3968] __x64_sys_close+0x56/0xf0 [ 104.510005][ T3968] x64_sys_call+0x273c/0x3000 [ 104.514679][ T3968] do_syscall_64+0xd2/0x200 [ 104.519176][ T3968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.525058][ T3968] [ 104.527376][ T3968] read to 0xffff888119f05a80 of 4 bytes by task 3968 on cpu 0: [ 104.534907][ T3968] lookup_fast+0xf0/0x320 [ 104.539244][ T3968] path_openat+0x43c/0x2170 [ 104.543765][ T3968] do_filp_open+0x109/0x230 [ 104.548274][ T3968] do_sys_openat2+0xa6/0x110 [ 104.552858][ T3968] __x64_sys_openat+0xf2/0x120 [ 104.557615][ T3968] x64_sys_call+0x2eab/0x3000 [ 104.562291][ T3968] do_syscall_64+0xd2/0x200 [ 104.566786][ T3968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.572678][ T3968] [ 104.575000][ T3968] value changed: 0x00200080 -> 0x00004080 [ 104.580706][ T3968] [ 104.583285][ T3968] Reported by Kernel Concurrency Sanitizer on: [ 104.589425][ T3968] CPU: 0 UID: 0 PID: 3968 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 104.600882][ T3968] Tainted: [W]=WARN [ 104.604676][ T3968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 104.614727][ T3968] ================================================================== [ 105.441069][ T3968] ================================================================== [ 105.449180][ T3968] BUG: KCSAN: data-race in __dentry_kill / step_into [ 105.455865][ T3968] [ 105.458180][ T3968] read-write to 0xffff88813ec366c0 of 4 bytes by task 3875 on cpu 1: [ 105.466234][ T3968] __dentry_kill+0x230/0x4b0 [ 105.471091][ T3968] dput+0x5e/0xd0 [ 105.474737][ T3968] __fput+0x444/0x650 [ 105.478739][ T3968] fput_close_sync+0x6e/0x120 [ 105.483418][ T3968] __x64_sys_close+0x56/0xf0 [ 105.488009][ T3968] x64_sys_call+0x273c/0x3000 [ 105.492858][ T3968] do_syscall_64+0xd2/0x200 [ 105.497369][ T3968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.503347][ T3968] [ 105.506012][ T3968] read to 0xffff88813ec366c0 of 4 bytes by task 3968 on cpu 0: [ 105.513637][ T3968] step_into+0x12f/0x7f0 [ 105.517885][ T3968] path_openat+0x13e8/0x2170 [ 105.522468][ T3968] do_filp_open+0x109/0x230 [ 105.527052][ T3968] do_sys_openat2+0xa6/0x110 [ 105.531732][ T3968] __x64_sys_openat+0xf2/0x120 [ 105.536492][ T3968] x64_sys_call+0x2eab/0x3000 [ 105.541946][ T3968] do_syscall_64+0xd2/0x200 [ 105.546446][ T3968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.552334][ T3968] [ 105.554644][ T3968] value changed: 0x00200080 -> 0x00004080 [ 105.560351][ T3968] [ 105.562658][ T3968] Reported by Kernel Concurrency Sanitizer on: [ 105.568793][ T3968] CPU: 0 UID: 0 PID: 3968 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 105.580246][ T3968] Tainted: [W]=WARN [ 105.584045][ T3968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 105.594094][ T3968] ================================================================== [ 106.436526][ T3875] ================================================================== [ 106.444629][ T3875] BUG: KCSAN: data-race in __dentry_kill / fast_dput [ 106.451293][ T3875] [ 106.453599][ T3875] write to 0xffff88813ec7f0d0 of 8 bytes by task 3968 on cpu 0: [ 106.461205][ T3875] __dentry_kill+0x142/0x4b0 [ 106.465788][ T3875] dput+0x5e/0xd0 [ 106.469499][ T3875] __fput+0x444/0x650 [ 106.473484][ T3875] fput_close_sync+0x6e/0x120 [ 106.478160][ T3875] __x64_sys_close+0x56/0xf0 [ 106.482733][ T3875] x64_sys_call+0x273c/0x3000 [ 106.487388][ T3875] do_syscall_64+0xd2/0x200 [ 106.491877][ T3875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.497771][ T3875] [ 106.500093][ T3875] read to 0xffff88813ec7f0d0 of 8 bytes by task 3875 on cpu 1: [ 106.507614][ T3875] fast_dput+0x5f/0x2c0 [ 106.511755][ T3875] dput+0x24/0xd0 [ 106.515400][ T3875] do_unlinkat+0x259/0x480 [ 106.519803][ T3875] __x64_sys_unlink+0x2e/0x40 [ 106.524487][ T3875] x64_sys_call+0x2dcf/0x3000 [ 106.529158][ T3875] do_syscall_64+0xd2/0x200 [ 106.533647][ T3875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.539527][ T3875] [ 106.541839][ T3875] value changed: 0xffff888237946b68 -> 0x0000000000000000 [ 106.548948][ T3875] [ 106.551253][ T3875] Reported by Kernel Concurrency Sanitizer on: [ 106.557420][ T3875] CPU: 1 UID: 0 PID: 3875 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 106.568867][ T3875] Tainted: [W]=WARN [ 106.572652][ T3875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 106.582781][ T3875] ================================================================== [ 106.847844][ T3875] ================================================================== [ 106.855952][ T3875] BUG: KCSAN: data-race in __dentry_kill / step_into [ 106.862643][ T3875] [ 106.864987][ T3875] read-write to 0xffff888119cd3840 of 4 bytes by task 3968 on cpu 0: [ 106.873309][ T3875] __dentry_kill+0x230/0x4b0 [ 106.877907][ T3875] dput+0x5e/0xd0 [ 106.881539][ T3875] __fput+0x444/0x650 [ 106.885521][ T3875] fput_close_sync+0x6e/0x120 [ 106.890199][ T3875] __x64_sys_close+0x56/0xf0 [ 106.894788][ T3875] x64_sys_call+0x273c/0x3000 [ 106.899457][ T3875] do_syscall_64+0xd2/0x200 [ 106.903952][ T3875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.909845][ T3875] [ 106.912169][ T3875] read to 0xffff888119cd3840 of 4 bytes by task 3875 on cpu 1: [ 106.919705][ T3875] step_into+0xe3/0x7f0 [ 106.923872][ T3875] path_openat+0x13e8/0x2170 [ 106.928463][ T3875] do_filp_open+0x109/0x230 [ 106.932966][ T3875] do_sys_openat2+0xa6/0x110 [ 106.937640][ T3875] __x64_sys_openat+0xf2/0x120 [ 106.942396][ T3875] x64_sys_call+0x2eab/0x3000 [ 106.947066][ T3875] do_syscall_64+0xd2/0x200 [ 106.951558][ T3875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.957446][ T3875] [ 106.959754][ T3875] value changed: 0x00200080 -> 0x00004080 [ 106.965505][ T3875] [ 106.967817][ T3875] Reported by Kernel Concurrency Sanitizer on: [ 106.973964][ T3875] CPU: 1 UID: 0 PID: 3875 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 106.985427][ T3875] Tainted: [W]=WARN [ 106.989214][ T3875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 106.999291][ T3875] ================================================================== [ 108.685253][ T3968] ================================================================== [ 108.693474][ T3968] BUG: KCSAN: data-race in __dentry_kill / lookup_fast [ 108.700329][ T3968] [ 108.702653][ T3968] read-write to 0xffff888119fb6780 of 4 bytes by task 3875 on cpu 1: [ 108.710718][ T3968] __dentry_kill+0x230/0x4b0 [ 108.715319][ T3968] dput+0x5e/0xd0 [ 108.718967][ T3968] do_unlinkat+0x259/0x480 [ 108.723381][ T3968] __x64_sys_unlink+0x2e/0x40 [ 108.728065][ T3968] x64_sys_call+0x2dcf/0x3000 [ 108.732737][ T3968] do_syscall_64+0xd2/0x200 [ 108.737229][ T3968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.743115][ T3968] [ 108.745442][ T3968] read to 0xffff888119fb6780 of 4 bytes by task 3968 on cpu 0: [ 108.752970][ T3968] lookup_fast+0xf0/0x320 [ 108.757303][ T3968] path_openat+0x43c/0x2170 [ 108.761797][ T3968] do_filp_open+0x109/0x230 [ 108.766309][ T3968] do_sys_openat2+0xa6/0x110 [ 108.770889][ T3968] __x64_sys_openat+0xf2/0x120 [ 108.775647][ T3968] x64_sys_call+0x2eab/0x3000 [ 108.780322][ T3968] do_syscall_64+0xd2/0x200 [ 108.784825][ T3968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.790721][ T3968] [ 108.793026][ T3968] value changed: 0x00200080 -> 0x00004080 [ 108.798725][ T3968] [ 108.801040][ T3968] Reported by Kernel Concurrency Sanitizer on: [ 108.807184][ T3968] CPU: 0 UID: 0 PID: 3968 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 108.818641][ T3968] Tainted: [W]=WARN [ 108.822469][ T3968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 108.832609][ T3968] ================================================================== [ 109.725914][ T3968] ================================================================== [ 109.734059][ T3968] BUG: KCSAN: data-race in __dentry_kill / step_into [ 109.740748][ T3968] [ 109.743087][ T3968] read-write to 0xffff888119cace40 of 4 bytes by task 3875 on cpu 1: [ 109.751160][ T3968] __dentry_kill+0x230/0x4b0 [ 109.755758][ T3968] dput+0x5e/0xd0 [ 109.759399][ T3968] __fput+0x444/0x650 [ 109.763397][ T3968] fput_close_sync+0x6e/0x120 [ 109.768076][ T3968] __x64_sys_close+0x56/0xf0 [ 109.772668][ T3968] x64_sys_call+0x273c/0x3000 [ 109.777343][ T3968] do_syscall_64+0xd2/0x200 [ 109.781928][ T3968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.787820][ T3968] [ 109.790136][ T3968] read to 0xffff888119cace40 of 4 bytes by task 3968 on cpu 0: [ 109.797668][ T3968] step_into+0x12f/0x7f0 [ 109.801917][ T3968] path_openat+0x13e8/0x2170 [ 109.806511][ T3968] do_filp_open+0x109/0x230 [ 109.811018][ T3968] do_sys_openat2+0xa6/0x110 [ 109.815609][ T3968] __x64_sys_openat+0xf2/0x120 [ 109.820373][ T3968] x64_sys_call+0x2eab/0x3000 [ 109.825072][ T3968] do_syscall_64+0xd2/0x200 [ 109.829576][ T3968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.835475][ T3968] [ 109.837795][ T3968] value changed: 0x00200080 -> 0x00004080 [ 109.843596][ T3968] [ 109.845923][ T3968] Reported by Kernel Concurrency Sanitizer on: [ 109.852073][ T3968] CPU: 0 UID: 0 PID: 3968 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 109.863534][ T3968] Tainted: [W]=WARN [ 109.867325][ T3968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 109.877380][ T3968] ================================================================== [ 110.049223][ T3875] ================================================================== [ 110.057331][ T3875] BUG: KCSAN: data-race in __dentry_kill / fast_dput [ 110.064023][ T3875] [ 110.066339][ T3875] write to 0xffff88813ed01850 of 8 bytes by task 3968 on cpu 0: [ 110.074053][ T3875] __dentry_kill+0x142/0x4b0 [ 110.078736][ T3875] dput+0x5e/0xd0 [ 110.082370][ T3875] __fput+0x444/0x650 [ 110.086355][ T3875] fput_close_sync+0x6e/0x120 [ 110.091031][ T3875] __x64_sys_close+0x56/0xf0 [ 110.096486][ T3875] x64_sys_call+0x273c/0x3000 [ 110.101836][ T3875] do_syscall_64+0xd2/0x200 [ 110.106859][ T3875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.112753][ T3875] [ 110.115070][ T3875] read to 0xffff88813ed01850 of 8 bytes by task 3875 on cpu 1: [ 110.122602][ T3875] fast_dput+0x5f/0x2c0 [ 110.126756][ T3875] dput+0x24/0xd0 [ 110.130388][ T3875] __fput+0x444/0x650 [ 110.134366][ T3875] fput_close_sync+0x6e/0x120 [ 110.139132][ T3875] __x64_sys_close+0x56/0xf0 [ 110.143715][ T3875] x64_sys_call+0x273c/0x3000 [ 110.148395][ T3875] do_syscall_64+0xd2/0x200 [ 110.153331][ T3875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.159221][ T3875] [ 110.161529][ T3875] value changed: 0xffff888237946b68 -> 0x0000000000000000 [ 110.168642][ T3875] [ 110.171136][ T3875] Reported by Kernel Concurrency Sanitizer on: [ 110.177460][ T3875] CPU: 1 UID: 0 PID: 3875 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 110.188911][ T3875] Tainted: [W]=WARN [ 110.192715][ T3875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 110.202764][ T3875] ================================================================== [ 110.447368][ T3968] ================================================================== [ 110.455483][ T3968] BUG: KCSAN: data-race in __dentry_kill / step_into [ 110.462173][ T3968] [ 110.464502][ T3968] read-write to 0xffff88813ec7f600 of 4 bytes by task 3875 on cpu 1: [ 110.472554][ T3968] __dentry_kill+0x230/0x4b0 [ 110.477156][ T3968] dput+0x5e/0xd0 [ 110.480803][ T3968] __fput+0x444/0x650 [ 110.484781][ T3968] fput_close_sync+0x6e/0x120 [ 110.489523][ T3968] __x64_sys_close+0x56/0xf0 [ 110.494108][ T3968] x64_sys_call+0x273c/0x3000 [ 110.498780][ T3968] do_syscall_64+0xd2/0x200 [ 110.503308][ T3968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.509196][ T3968] [ 110.511519][ T3968] read to 0xffff88813ec7f600 of 4 bytes by task 3968 on cpu 0: [ 110.519051][ T3968] step_into+0xe3/0x7f0 [ 110.523227][ T3968] path_openat+0x13e8/0x2170 [ 110.527821][ T3968] do_filp_open+0x109/0x230 [ 110.532314][ T3968] do_sys_openat2+0xa6/0x110 [ 110.536901][ T3968] __x64_sys_openat+0xf2/0x120 [ 110.541664][ T3968] x64_sys_call+0x2eab/0x3000 [ 110.546335][ T3968] do_syscall_64+0xd2/0x200 [ 110.550840][ T3968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.556729][ T3968] [ 110.559042][ T3968] value changed: 0x00200080 -> 0x00004080 [ 110.564751][ T3968] [ 110.567073][ T3968] Reported by Kernel Concurrency Sanitizer on: [ 110.573221][ T3968] CPU: 0 UID: 0 PID: 3968 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 110.584739][ T3968] Tainted: [W]=WARN [ 110.588535][ T3968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 110.598583][ T3968] ================================================================== [ 111.841961][ T3875] ================================================================== [ 111.850071][ T3875] BUG: KCSAN: data-race in __dentry_kill / lookup_fast [ 111.856928][ T3875] [ 111.859268][ T3875] read-write to 0xffff888119eebd80 of 4 bytes by task 3968 on cpu 0: [ 111.867316][ T3875] __dentry_kill+0x230/0x4b0 [ 111.871951][ T3875] dput+0x5e/0xd0 [ 111.875598][ T3875] __fput+0x444/0x650 [ 111.879584][ T3875] fput_close_sync+0x6e/0x120 [ 111.884263][ T3875] __x64_sys_close+0x56/0xf0 [ 111.888854][ T3875] x64_sys_call+0x273c/0x3000 [ 111.893534][ T3875] do_syscall_64+0xd2/0x200 [ 111.898034][ T3875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.903993][ T3875] [ 111.906405][ T3875] read to 0xffff888119eebd80 of 4 bytes by task 3875 on cpu 1: [ 111.913946][ T3875] lookup_fast+0xf0/0x320 [ 111.918281][ T3875] path_openat+0x43c/0x2170 [ 111.922793][ T3875] do_filp_open+0x109/0x230 [ 111.927289][ T3875] do_sys_openat2+0xa6/0x110 [ 111.931884][ T3875] __x64_sys_openat+0xf2/0x120 [ 111.936644][ T3875] x64_sys_call+0x2eab/0x3000 [ 111.941319][ T3875] do_syscall_64+0xd2/0x200 [ 111.945813][ T3875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.951704][ T3875] [ 111.954013][ T3875] value changed: 0x00200080 -> 0x00004080 [ 111.959721][ T3875] [ 111.962031][ T3875] Reported by Kernel Concurrency Sanitizer on: [ 111.968166][ T3875] CPU: 1 UID: 0 PID: 3875 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 111.979629][ T3875] Tainted: [W]=WARN [ 111.983418][ T3875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 111.993468][ T3875] ==================================================================