last executing test programs: 5m54.439277397s ago: executing program 32 (id=99): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r3, &(0x7f0000000740), 0x0, 0x0, &(0x7f00000007c0)={0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) shutdown(r3, 0x1) setsockopt(r3, 0x84, 0x80, &(0x7f0000000080)="1a4f30d089f5bd5b", 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0x1, @mcast2, 0x235}}}, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) socket$packet(0x11, 0xa, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 5m45.266263451s ago: executing program 33 (id=245): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x3, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x28}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x286ca06bbee933dc, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/freeze_filesystems', 0x101a02, 0xc8) sendfile(r5, r5, 0x0, 0x101) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000000000000000000000000008000000"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, r2, 0x8, 0x0, 0x0, 0x14}, 0x94) syz_emit_ethernet(0x6a, &(0x7f0000000340)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558, 0x0, 0x0, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x0]}, {}, {0xdd86}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00'}) syz_mount_image$iso9660(&(0x7f0000000780), &(0x7f0000000000)='./file0\x00', 0x21488b, &(0x7f0000000400)=ANY=[@ANYBLOB='map=acorn,sbsector=0x0000000000000000,uid=', @ANYRESDEC=0x0, @ANYBLOB="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"/296, @ANYRESDEC=0x0, @ANYBLOB="48aa122ce7bad1d4005fd66df97f8ec44bbc8f22ca2298ce346671617bb371da3c639abd9ee548b49a9c10009f28579f82efb3cf18d7e4f7d0cda9f6feec4c5df95db277defa1414ccf2075e6fd144cdc78c1f843f1574502ce415c27f3cec8893fe5950104e7d7b43440fd107294cf00fe8000000000000", @ANYRESOCT], 0x1, 0x65b, &(0x7f00000007c0)="$eJzs3V1rG+n5x/HfyLKs+A/hT1uWEPJwJ+mCQ1NFkjcOIoV2OhrZs5U0YkZubSgs6cZeQuRsm6TQ+GTJSR9g+wb2bE+W0hdR6HHfRQ8LS3tW6MmUebJsS7LkRLF3t9+PiefWzDVzX/eMMhdjSSMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABZTrNarVlqe93NLTOZ0wz8zgnL060t6nbauD2mqy+O9CtZ8T+Vy7qUzrr0neHid+JfN3UlfXRF5XhS1v7/vfP/D75dLOTrn5DQ61AkzbDNUpakMc9f7j95OBjsPJtzIl8BKswQtO52vdD3Ova6a7zQN421terdjVZoWl5J4XbYdzvGCdxC3w/MinPb1BqNVeNWtv3N7nrTbrv5zPvfr1era+b9pWzP3n2/EjobXrvtddeTmHhxHHPffPrzNMS1O8bsPh7srE5LMg6qzRJUnxZUr9brtVq9Xlu717h3v1otjsyoHqORiLk/afE1M7+TN/CGCnH9/7sltVVWV5vakhn746ipQL46E5Zn8vr/7l33xH4P1/+8yl8aLr6spP5fSx9dm1T/J+RiZJIVxi2xJsx/vZ/neql9PdFDDTTQjp7NZ7vX55fh2/1Zl4qSp1C+PHVka12uTDbHqKE1ramqD7ShlkIZteSpLVehthWqL1ed5JgEcmUnrdiKHN2WUU0NNbQqI1cVbcvXprpaV1O2/h1F0a4eJ/t99YQclQfVZgmqnxA0qf7/4pM066n13xL1/xstP3/NEgOcuyi7/j+l628nGwAAAAAA8DZYyV/freS1+6uSIrW8tls977QAAAAAAMAcJa/8X4kni3HrqqwJ1//R2ecGAAAAAADmw0o+Y2dJWk7e1G8NPwk1y5sAFs4gRQAAAAAA8IaS1/+vlaQouffadVmnuv4HAAAAAABfA78/dI/9Yn6P3Sh/Wb8gKewtWX/555KCRetVb+u71p4dL7H3spiRdwD0W5eti9mNepNJSVLyyHGvWFfToOwmmFa++pe70+71bwXHEigt5H++mJbAWjF7pE91I425UU6nj/YLSpakvSy3vLZbcfz2g5ps+2Kh7271f/308W+k4GCcu48HO5UPPx48SnJ5Fc96tRfn8cmRdArTcnmhbF9cHTviC2rlXf6h21m2kn6r+fgXZO8VDnc02/h/q5tpzM3ldLq8r2xPJOMvx+OvVZJDNhx9PKrP/jQcfe34yMcdiAlZlJMsbqUxt1ZupZM8vyyL7y1I9crxY1CKn4LDfVE/nMX0fWH9a2RfTMki3hercRZ/jTc0fCYcyWL1dFmMHBEAOC+7wyqU3MR89B77x+vu65zlplf3Hx3t5cVnUfqBwwWpmL02cWIvZcVn9JVk2yopObEWLx+cZfdu5Gf0alZXyppwRq++QXWL+/rz8DuQsrRH6sp/oih6UEv6/eNBv2lV/Txe4fOJ/Ybt+kI8wrsv9n6Z3AA/9tHORztP6/XVtep71eq9uhaTYWQTag8AYIzp37EzNcJ67+Cq+tE/3k1bRyretw7eUlDRh/pYAz3SnfwrBK6P3+ryobch3Bm9ao1jL0jHY2u6M/GqLqmlaezPtks/TIOS34vKVzlaqYfbXX2rxwAAgLN2s5E1JtThWer/neS6W9LK5UPX3QfX7Mdq+fFvCJ5Uc2tntg8AAPhf4wZfWsv931lB4PU+qDUaNbu/4ZrAd35iAq+57hqv23cDZ8PurrumF/h93/HbphdoyWu6oQk3ez0/6JuWH5ieH3pbpuW1XZN99Xvoduxu33PCXtu1Q9c4frdvO33T9ELH9DZ/3PbCDTdIVg57ruO1PMfue37XhP5m4LgVY0LXPRToNd1u32t5cbNreoHXsYNt81O/vdlxTdMNncDr9f10g3lfXrflB51ksxVFp/6iQwAAvomev9x/8nAw2Hk2qZFc0U+JGTZK4zaY98UrzgAAfDWMVumJymeSEAAAAAAAAAAAAAAAAAAAAAAAGDH9I32nbCyO+7CgdDDnVxdn2o6leSd2mkbh9Vf/2wkxFw7m5Lv/cMyrcxip0kZx/lu+cJqPjc6h8YPddI9OjIkXjl20dHAsivP/7xA3nn4xYVEURdHJqy8d3YelkwZ4tFGU9Kz0BofgfM5HAM7OfwMAAP//3JZAiA==") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0902000000000000000001000000050002000a00000014000700ff00000000000000000000000000000108000b00"], 0x38}}, 0x0) 5m37.272005191s ago: executing program 3 (id=345): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$inet_opts(r1, 0x0, 0x1, &(0x7f0000000980)="9fd2", 0x2) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0), 0x4) 5m37.222557675s ago: executing program 3 (id=348): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r2, 0x2, {0x0, 0xf0, 0x3}, 0x2}, 0x18) socket$packet(0x11, 0x2, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0xffffffffffffff01, 0x3, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000000280), 0x0, 0x0) 5m36.299432109s ago: executing program 3 (id=361): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e85000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) 5m36.28428863s ago: executing program 3 (id=362): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0xc248, &(0x7f0000000240)={[{@usrquota}, {@resgid={'resgid', 0x3d, 0xee00}}, {@init_itable}]}, 0x83, 0x5f9, &(0x7f0000001200)="$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") r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$peeksig(0x4210, r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 5m35.936740517s ago: executing program 3 (id=369): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) 5m35.416002549s ago: executing program 3 (id=374): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5453, 0x0) 5m35.372895153s ago: executing program 34 (id=374): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5453, 0x0) 5m33.443702847s ago: executing program 2 (id=415): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) 5m33.371451713s ago: executing program 2 (id=416): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x3, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x28}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x48) mount(0x0, &(0x7f0000003c40)='.\x00', 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x286ca06bbee933dc, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/freeze_filesystems', 0x101a02, 0xc8) sendfile(r4, r4, 0x0, 0x101) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00'}) syz_mount_image$iso9660(&(0x7f0000000780), &(0x7f0000000000)='./file0\x00', 0x21488b, &(0x7f0000000400)=ANY=[@ANYBLOB='map=acorn,sbsector=0x0000000000000000,uid=', @ANYRESDEC=0x0, @ANYBLOB="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"/296, @ANYRESDEC=0x0, @ANYBLOB="48aa122ce7bad1d4005fd66df97f8ec44bbc8f22ca2298ce346671617bb371da3c639abd9ee548b49a9c10009f28579f82efb3cf18d7e4f7d0cda9f6feec4c5df95db277defa1414ccf2075e6fd144cdc78c1f843f1574502ce415c27f3cec8893fe5950104e7d7b43440fd107294cf00fe8000000000000", @ANYRESOCT], 0x1, 0x65b, &(0x7f00000007c0)="$eJzs3V1rG+n5x/HfyLKs+A/hT1uWEPJwJ+mCQ1NFkjcOIoV2OhrZs5U0YkZubSgs6cZeQuRsm6TQ+GTJSR9g+wb2bE+W0hdR6HHfRQ8LS3tW6MmUebJsS7LkRLF3t9+PiefWzDVzX/eMMhdjSSMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABZTrNarVlqe93NLTOZ0wz8zgnL060t6nbauD2mqy+O9CtZ8T+Vy7qUzrr0neHid+JfN3UlfXRF5XhS1v7/vfP/D75dLOTrn5DQ61AkzbDNUpakMc9f7j95OBjsPJtzIl8BKswQtO52vdD3Ova6a7zQN421terdjVZoWl5J4XbYdzvGCdxC3w/MinPb1BqNVeNWtv3N7nrTbrv5zPvfr1era+b9pWzP3n2/EjobXrvtddeTmHhxHHPffPrzNMS1O8bsPh7srE5LMg6qzRJUnxZUr9brtVq9Xlu717h3v1otjsyoHqORiLk/afE1M7+TN/CGCnH9/7sltVVWV5vakhn746ipQL46E5Zn8vr/7l33xH4P1/+8yl8aLr6spP5fSx9dm1T/J+RiZJIVxi2xJsx/vZ/neql9PdFDDTTQjp7NZ7vX55fh2/1Zl4qSp1C+PHVka12uTDbHqKE1ramqD7ShlkIZteSpLVehthWqL1ed5JgEcmUnrdiKHN2WUU0NNbQqI1cVbcvXprpaV1O2/h1F0a4eJ/t99YQclQfVZgmqnxA0qf7/4pM066n13xL1/xstP3/NEgOcuyi7/j+l628nGwAAAAAA8DZYyV/freS1+6uSIrW8tls977QAAAAAAMAcJa/8X4kni3HrqqwJ1//R2ecGAAAAAADmw0o+Y2dJWk7e1G8NPwk1y5sAFs4gRQAAAAAA8IaS1/+vlaQouffadVmnuv4HAAAAAABfA78/dI/9Yn6P3Sh/Wb8gKewtWX/555KCRetVb+u71p4dL7H3spiRdwD0W5eti9mNepNJSVLyyHGvWFfToOwmmFa++pe70+71bwXHEigt5H++mJbAWjF7pE91I425UU6nj/YLSpakvSy3vLZbcfz2g5ps+2Kh7271f/308W+k4GCcu48HO5UPPx48SnJ5Fc96tRfn8cmRdArTcnmhbF9cHTviC2rlXf6h21m2kn6r+fgXZO8VDnc02/h/q5tpzM3ldLq8r2xPJOMvx+OvVZJDNhx9PKrP/jQcfe34yMcdiAlZlJMsbqUxt1ZupZM8vyyL7y1I9crxY1CKn4LDfVE/nMX0fWH9a2RfTMki3hercRZ/jTc0fCYcyWL1dFmMHBEAOC+7wyqU3MR89B77x+vu65zlplf3Hx3t5cVnUfqBwwWpmL02cWIvZcVn9JVk2yopObEWLx+cZfdu5Gf0alZXyppwRq++QXWL+/rz8DuQsrRH6sp/oih6UEv6/eNBv2lV/Txe4fOJ/Ybt+kI8wrsv9n6Z3AA/9tHORztP6/XVtep71eq9uhaTYWQTag8AYIzp37EzNcJ67+Cq+tE/3k1bRyretw7eUlDRh/pYAz3SnfwrBK6P3+ryobch3Bm9ao1jL0jHY2u6M/GqLqmlaezPtks/TIOS34vKVzlaqYfbXX2rxwAAgLN2s5E1JtThWer/neS6W9LK5UPX3QfX7Mdq+fFvCJ5Uc2tntg8AAPhf4wZfWsv931lB4PU+qDUaNbu/4ZrAd35iAq+57hqv23cDZ8PurrumF/h93/HbphdoyWu6oQk3ez0/6JuWH5ieH3pbpuW1XZN99Xvoduxu33PCXtu1Q9c4frdvO33T9ELH9DZ/3PbCDTdIVg57ruO1PMfue37XhP5m4LgVY0LXPRToNd1u32t5cbNreoHXsYNt81O/vdlxTdMNncDr9f10g3lfXrflB51ksxVFp/6iQwAAvomev9x/8nAw2Hk2qZFc0U+JGTZK4zaY98UrzgAAfDWMVumJymeSEAAAAAAAAAAAAAAAAAAAAAAAGDH9I32nbCyO+7CgdDDnVxdn2o6leSd2mkbh9Vf/2wkxFw7m5Lv/cMyrcxip0kZx/lu+cJqPjc6h8YPddI9OjIkXjl20dHAsivP/7xA3nn4xYVEURdHJqy8d3YelkwZ4tFGU9Kz0BofgfM5HAM7OfwMAAP//3JZAiA==") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a0000000000008500"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0902000000000000000001000000050002000a00000014000700ff00000000000000000000000000000108000b00"], 0x38}}, 0x0) 5m32.974911935s ago: executing program 2 (id=422): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@dioread_lock}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@dioread_lock}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000004c0)='kfree\x00', r0, 0x0, 0x1}, 0x18) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000001740)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_addr=@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001800000005000000000000000080000095000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x1}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00') socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r5, 0x0, 0x13, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10) (async) bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10) listen(r6, 0x0) (async) listen(r6, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) socket$tipc(0x1e, 0x5, 0x0) (async) r7 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r7, &(0x7f0000002300)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x4) (async) sendmsg$tipc(r7, &(0x7f0000002300)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x4) sendmsg$tipc(r7, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000000)=0x9, 0x4) 5m31.967923265s ago: executing program 2 (id=431): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0xc248, &(0x7f0000000240)={[{@usrquota}, {@resgid={'resgid', 0x3d, 0xee00}}, {@init_itable}]}, 0x83, 0x5f9, &(0x7f0000001200)="$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") r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 5m31.686234958s ago: executing program 2 (id=436): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00'}) r1 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x1218088, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0xa, 0x2c2, &(0x7f00000008c0)="$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") r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000001fc0)=""/184, 0x20002078) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x3, 0xb, &(0x7f0000000300)=ANY=[@ANYRESOCT=r1, @ANYRESOCT=r2], &(0x7f0000000340)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0x80}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) flistxattr(r6, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff2500000010"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80004}, 0x94) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000100)) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r8, &(0x7f0000000100)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0xe}], 0x1) ioctl$PPPIOCSACTIVE(r7, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x40, 0x8, 0xfe, 0x9}, {0x6, 0x0, 0x0, 0x8eb6}]}) writev(r6, &(0x7f0000000240)=[{&(0x7f00000022c0)="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", 0x1000}], 0x1) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x80000) 5m31.316153207s ago: executing program 2 (id=445): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$inet_opts(r2, 0x0, 0x1, &(0x7f0000000980)="9fd2", 0x2) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0), 0x4) 5m31.294285409s ago: executing program 35 (id=445): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$inet_opts(r2, 0x0, 0x1, &(0x7f0000000980)="9fd2", 0x2) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0), 0x4) 1m12.874058344s ago: executing program 8 (id=4153): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r0}, 0x18) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001000000000000c4000007008209", @ANYRES32=r3, @ANYRES32, @ANYBLOB="00000001e000030000000000000000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x880}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m12.856470495s ago: executing program 8 (id=4154): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) fcntl$lock(r2, 0x5, &(0x7f0000000200)={0x1, 0x0, 0x3793, 0x101}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="e9fc87b9c3d582e60a00000004000000fd0f0000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$addseals(r7, 0x409, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) setrlimit(0x9, &(0x7f0000000400)={0x0, 0x7}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xb, &(0x7f0000000740)=ANY=[], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r8}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) kexec_load(0x0, 0x0, 0x0, 0x0) io_setup(0x2004, &(0x7f0000000680)) write$binfmt_elf32(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="7f454c4604070003050000000000000002000300030000000903000038000000fcffffff0e0000000000200001000500000000000000f3000300000008000000f30000007f00000004000000040020000700000000040000361681a41397e0418f4151a864965ec126ae8b9cf8ac18dddaf8eebc7babf2c52e5520fd19feb833e7e2513a48bb66e365eb90ba754d98d046c7425811b6d7c4ae0699e84f02ef6c6ccef4b31d7e4c5a4baee77d854ecaaf66d6e9afda2d837148a678190ec45908f6945546fe30f56c8c1d370a30248ef7639b92c766705ffdf89dd0e1876e6ae98b0d6d0546e2"], 0x58) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) flistxattr(r9, &(0x7f0000000040)=""/5, 0x5) time(&(0x7f00000004c0)) r10 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r10, 0x40383d0c, &(0x7f0000000980)={{0x2000000, 0x2000005}, {0x80000000000000, 0xffffffff}, 0x5, 0x6}) 1m12.754863123s ago: executing program 8 (id=4155): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) lsm_get_self_attr(0x67, &(0x7f0000000400)={0x0, 0x0, 0xad, 0x8d, ""/141}, &(0x7f0000000080)=0xad, 0x0) socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = getpgrp(0x0) r2 = syz_pidfd_open(r1, 0x0) r3 = pidfd_getfd(r2, r2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) setns(r3, 0x14020000) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x20, &(0x7f0000000540)={&(0x7f0000000740)=""/4096, 0x1000, 0x0, &(0x7f0000000480)=""/176, 0xb0}}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000000), 0x84, &(0x7f0000000840)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r5}}) socket(0x2, 0xa, 0x300) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x5, 0xb68, 0xfffffffffffffeb9, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0xe}, 0x48) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x4, &(0x7f0000001740)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {}, 0x2c, {[], [{@dont_measure}, {@dont_hash}, {@subj_type}, {@smackfsfloor={'smackfsfloor', 0x3d, '\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\'4'}}, {@flag='silent'}]}}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa1000000000000070100"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) 1m12.287125681s ago: executing program 8 (id=4158): unshare(0x20000400) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) chown(0x0, 0x0, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000003140), 0x280, 0x0) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@mb_optimize_scan}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x4}}]}, 0x1, 0x50f, &(0x7f0000000140)="$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") r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) fallocate(r4, 0x0, 0xbf5, 0x2000402) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000004280), 0x400) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1008082, &(0x7f00000008c0)={[{@nodioread_nolock}, {@noauto_da_alloc}, {@dioread_lock}, {@errors_continue}, {@dioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@data_err_ignore}, {@data_ordered}]}, 0x0, 0x5fa, &(0x7f0000000dc0)="$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") sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x11000000}, 0x80001) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r5, 0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) pidfd_getfd(r3, r6, 0x0) recvmsg$can_j1939(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)}, {&(0x7f0000000300)=""/37, 0x25}, {&(0x7f0000000340)=""/165, 0xa5}, {&(0x7f00000004c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/226, 0xe2}, {&(0x7f0000000400)=""/57, 0x39}], 0x6, &(0x7f0000000780)=""/66, 0x42}, 0x2000) io_setup(0x7, &(0x7f0000001e00)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02180000100000000000b65900000000030006000000000002004e240000000000000000000000000800120000000300000002020000000006000000000000000000000000000000ac1414aa000000000000000000000000fe800000000000000000000000000030030005000000000002"], 0x80}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000003200)={'gretap0\x00', &(0x7f00000042c0)={'syztnl1\x00', 0x0, 0x1, 0x8000, 0x80000001, 0x6, {{0x1a, 0x4, 0x3, 0xc, 0x68, 0x67, 0x0, 0x8, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}, @local, {[@noop, @noop, @timestamp_addr={0x44, 0x1c, 0xe4, 0x1, 0x2, [{@multicast1, 0xfffffffa}, {@broadcast, 0x80000003}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}]}, @lsrr={0x83, 0xb, 0x9, [@empty, @multicast2]}, @lsrr={0x83, 0xf, 0x27, [@multicast1, @multicast2, @rand_addr=0x64010102]}, @ra={0x94, 0x4, 0x2}, @timestamp={0x44, 0x18, 0xaf, 0x0, 0x3, [0x24, 0x0, 0xfffffffb, 0xe, 0x7]}]}}}}}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x40, 0x53) lseek(r7, 0x40000001b, 0x6) socket$tipc(0x1e, 0x5, 0x0) 1m12.010771753s ago: executing program 8 (id=4159): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000080)}) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 1m11.659411932s ago: executing program 8 (id=4162): bind$packet(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) lsm_get_self_attr(0x66, &(0x7f0000000040)={0x0, 0x0, 0x34, 0x14, ""/20}, &(0x7f00000000c0)=0x34, 0x0) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000eca20ae40000440003800800010002"], 0x58}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) gettid() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000002a80)=ANY=[@ANYRESDEC=r1, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="bf64c2b5b745a11b96d568e3000000000000000095aa37ae7e31bbb1bb33c93a67b5273b90a1e4456e8c17bd37221459b8374c38552adc254d6197eea275f4fb4f7490ce568d00155a8607140c5a6edab28fb7e81ec298158775391c5dd98b736865b7f0253de6927b4f16c9d0468708cca6d9e2826bd66f251c55", @ANYRES8=r3, @ANYRESHEX=r2], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x5) r6 = inotify_init1(0x800) inotify_add_watch(r6, &(0x7f0000000180)='./control\x00', 0xa4000960) ioctl$SG_BLKTRACETEARDOWN(r0, 0x1276, 0x0) close_range(r5, 0xffffffffffffffff, 0x400000000000000) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4000044}, 0x10) 1m11.623725745s ago: executing program 36 (id=4162): bind$packet(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) lsm_get_self_attr(0x66, &(0x7f0000000040)={0x0, 0x0, 0x34, 0x14, ""/20}, &(0x7f00000000c0)=0x34, 0x0) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000eca20ae40000440003800800010002"], 0x58}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) gettid() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000002a80)=ANY=[@ANYRESDEC=r1, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="bf64c2b5b745a11b96d568e3000000000000000095aa37ae7e31bbb1bb33c93a67b5273b90a1e4456e8c17bd37221459b8374c38552adc254d6197eea275f4fb4f7490ce568d00155a8607140c5a6edab28fb7e81ec298158775391c5dd98b736865b7f0253de6927b4f16c9d0468708cca6d9e2826bd66f251c55", @ANYRES8=r3, @ANYRESHEX=r2], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x5) r6 = inotify_init1(0x800) inotify_add_watch(r6, &(0x7f0000000180)='./control\x00', 0xa4000960) ioctl$SG_BLKTRACETEARDOWN(r0, 0x1276, 0x0) close_range(r5, 0xffffffffffffffff, 0x400000000000000) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4000044}, 0x10) 1m9.972181127s ago: executing program 1 (id=4176): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) connect$inet(r0, &(0x7f0000000380)={0x2, 0x4e25, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) 1m9.095993588s ago: executing program 1 (id=4181): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000180)={{0x6, @multicast2, 0x4e22, 0x1, 'lblc\x00', 0x2, 0x9, 0x15}, {@remote, 0x4e24, 0x2004, 0xa71, 0x80, 0x4}}, 0x44) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10) r3 = eventfd(0x0) read$eventfd(r3, &(0x7f0000000240), 0x8) writev(r3, &(0x7f0000000080)=[{&(0x7f0000001100)="02965d1f5ec3de3d", 0x8}, {&(0x7f0000002180)="27a8104ce45cd4d5", 0x8}], 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061114b000000005d7512bc45628d6400"], &(0x7f0000000000)='GPL\x00'}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000080000000000000000000850000007d00"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r4}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000200)) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xd, 0xa}, {}, {0xe, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40008c8}, 0x20004804) 1m8.933206241s ago: executing program 1 (id=4187): truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) 1m8.915241012s ago: executing program 1 (id=4188): unshare(0x20000400) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) chown(0x0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000003140), 0x280, 0x0) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@mb_optimize_scan}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x4}}]}, 0x1, 0x50f, &(0x7f0000000140)="$eJzs3c9vI1cdAPCvnThxsmmTlh4AQbu0hQWt1km8bVT1AOUCQqgSokeQtiHxRlHsOIqd0oQ9pGeuSFTiBEf+AG5IPSFx5ILgxqUckPgRgRokDoNmPMk6WbuJNokdxZ+PNJr35s36+32bnffWL4lfACPrdkTsR8RERLwbEbP59UJ+xFudI73vk4NHK4cHj1YKkSTv/LOQtafXouvPpG7lr1mOiO9/O+JHhSfjtnb3Npbr9dp2Xp9vN7bmW7t799Yby2u1tdpmtbq0uLTwxv3Xq5fW15caE3npix//Yf9rP0nTmsmvdPfjMnW6XjqOkxqPiO9eRbAhGMv7MzHsRHgqxYh4PiJezp7/2RjLvpoAwE2WJLORzHbXAYCbrpitgRWKlXwtYCaKxUqls4b3QkwX681W++7D5s7mametbC5KxYfr9dpCvlY4F6VCWl/Myo/r1VP1+xHxXET8bHIqq1dWmvXVYf7HBwBG2K1T8/9/JjvzPwBww5WHnQAAMHDmfwAYPeZ/ABg95n8AGD2d+X9q2GkAAAPk/T8AjB7zPwCMlO+9/XZ6JIf551+vvre7s9F8795qrbVRaeysVFaa21uVtWZzLfvMnsZZr1dvNrcWX4ud9+e+vtVqz7d29x40mjub7QfZ53o/qJWyu/YH0DMAoJ/nXvroz4V0Rn5zKjuiay+H0lAzA65acdgJAEMzNuwEgKGx2xeMrgu8x7c8ADdEjy16j/3+W0lS7vULQkmSJFebFnCF7nzO+j+Mqq71fz8FDCPG+j+MLuv/MLqSpHDePf/jvDcCANebNX6gz/f/n8/Pv86/OfDD1dN3fHiVWQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD1drT/byXfC3wmisVKJeKZiJiLUuHher22EBHPRsSfJkuTaX1xyDkDABdV/Fsh3//rzuyrMyeaXrx1XJyIiB//4p2fv7/cbm//MWKi8K/Jo+vtD/Pr1cFnDwCc7Wiezs5db+Q/OXi0cnQMMp+/fzMiyp34hwcTcXgcfzzGs3M5ShEx/e9CXu8odK1dXMT+BxHx2V79L8RMtgbS2fn0dPw09jMDjV88Eb+YtXXO6d/FZy4hFxg1H6Xjz1u9nr9i3M7OvZ//cjZCXVw+/qUvtXKYjYGP4x+Nf2N9xr/b543x2u++0ylNPdn2QcTnxyOOYh92jT9H8Qt94r96+sX6DIh/+cKLL/fLLfllxJ3oHb871ny7sTXf2t27t95YXqut1Tar1aXFpYU37r9enc/WqOf7zwb/ePPus/3a0v5P94lfPqP/X+4b8aRf/e/dH3zpU+J/9ZVe8YvxwqfET+fEr5wz/vL0b8r92tL4q336f9bX/+4543/8170ntg0HAIantbu3sVyv17b7Fn47ffY9CgoDKaT/ZK9BGj0L3xhUrIno3fTTVzrP9KmmJHmqWCfHicfvHC9j1Q24Do4f+oj477CTAQAAAAAAAAAAAAAAehrEbywNu48AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcXP8PAAD//9140jY=") r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) fallocate(r3, 0x0, 0xbf5, 0x2000402) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000004280), 0x400) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1008082, &(0x7f00000008c0)={[{@nodioread_nolock}, {@noauto_da_alloc}, {@dioread_lock}, {@errors_continue}, {@dioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@data_err_ignore}, {@data_ordered}]}, 0x0, 0x5fa, &(0x7f0000000dc0)="$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") sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x11000000}, 0x80001) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r4, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) pidfd_getfd(r2, r5, 0x0) 1m8.814326241s ago: executing program 1 (id=4189): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newtaction={0x68, 0x30, 0x10d, 0x70bd2a, 0x25dfdbfd, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0xfffffffffffffe75, 0x2, {0x2, 0x20009, 0x4, 0x8be6, 0x5}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff2, 0xd}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth1_to_bond\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000001c0)={@remote, r3}, 0x14) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r4}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x2a4, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x27c, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x21c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x210, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x1f4, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x52, 0x1, "f6d7bbbb48f41acd1724927f132f9ce99a78eaca0bce6e1fb150ff252209ed4420618889cf38073204cb41d062caec384e33c8ba5665fe1d1ed3facc841d9a7657f414bf99966826a3159a22c948"}, @NFTA_DATA_VALUE={0x40, 0x1, "445daf4ba69950818c66c1a4391b49c15180687365a3189ebde171ec698c3b05d7b0e62331f9d3170b059eea9dc46355958d7dba8b368ce32c2a9dc6"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x31, 0x1, "f45712a15b35bf35fe9c76be5fb7addcb1efc5470f13fc41074553487c399d31f1c8b1d70a7764eced8c7453d9"}, @NFTA_DATA_VALUE={0x62, 0x1, "70fa279ec915e467cfc2407b633462204d8660ae6f1254c541a83437fe94f1c2aad91212f5e47c9d309a47eab3626dfc7dbc0641b16cd8705f19708e84d2251b29bc275135be8f3fd4ebcbd82bc668b008fa65ff3b530dadbd74a70a5c31"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x5911cfe997d3f3d9}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_CMP_SREG={0x8}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_LIMIT_FLAGS={0x8}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x32c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="671d00000000fbdbdf25460000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e000200000052fc8f0001000000000000000c009000a3003bb600000000"], 0x54}, 0x1, 0x0, 0x0, 0x4040010}, 0x600c000) r8 = socket(0x1, 0x803, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000500)={'syztnl1\x00', &(0x7f00000004c0)={'gre0\x00', r3, 0x7, 0x7, 0x7fff, 0xea, {{0x8, 0x4, 0x3, 0x2, 0x20, 0x66, 0x0, 0xff, 0x2f, 0x0, @private=0xa010102, @local, {[@lsrr={0x83, 0xb, 0x95, [@loopback, @rand_addr=0x64010102]}]}}}}}) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2fffffffd}, 0xc) close(0xffffffffffffffff) 1m8.667189872s ago: executing program 1 (id=4190): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) syz_io_uring_setup(0x495, &(0x7f0000000040)={0x0, 0x10079ae, 0x1000, 0x3, 0x8}, &(0x7f0000000340)=0x0, &(0x7f0000000400)=0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r7 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r7, 0x0) r8 = syz_clone(0x1940380, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$peeksig(0x4209, r8, &(0x7f0000000000)={0x0, 0x1}, 0x0) ptrace$getenv(0x4201, r8, 0x8, &(0x7f0000000080)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newqdisc={0x4c, 0x24, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xe}, {0xfff2, 0xb}, {0xe, 0xb}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x5, 0x0, 0x25, 0x2, 0x8, 0x8, 0x1}}, {0x6, 0x2, [0x7]}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x20000880) write$selinux_load(r6, &(0x7f0000000000)=ANY=[], 0x44f0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f00000003c0)=ANY=[@ANYRES64], &(0x7f0000000500)='syzkaller\x00', 0x5, 0xb7, &(0x7f000000cf3d)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, r7, 0x19, &(0x7f0000000000)={0x4}, 0x8, 0x10, &(0x7f0000000200)={0x2, 0x0, 0x0, 0x40}, 0x10, 0x0, r7, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'geneve0\x00'}}, 0x1e) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xb, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) connect$pppoe(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x0, {0x0, @remote, 'veth0_to_batadv\x00'}}, 0x1e) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'dummy0\x00', 0x0}) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa49}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r10}, @IFLA_HSR_SLAVE2={0x8, 0x2, r10}]}}}]}, 0x40}}, 0x0) connect$inet(r3, &(0x7f0000000380)={0x2, 0x4e25, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r0, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) 1m8.666495642s ago: executing program 37 (id=4190): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) syz_io_uring_setup(0x495, &(0x7f0000000040)={0x0, 0x10079ae, 0x1000, 0x3, 0x8}, &(0x7f0000000340)=0x0, &(0x7f0000000400)=0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r7 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r7, 0x0) r8 = syz_clone(0x1940380, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$peeksig(0x4209, r8, &(0x7f0000000000)={0x0, 0x1}, 0x0) ptrace$getenv(0x4201, r8, 0x8, &(0x7f0000000080)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newqdisc={0x4c, 0x24, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xe}, {0xfff2, 0xb}, {0xe, 0xb}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x5, 0x0, 0x25, 0x2, 0x8, 0x8, 0x1}}, {0x6, 0x2, [0x7]}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x20000880) write$selinux_load(r6, &(0x7f0000000000)=ANY=[], 0x44f0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f00000003c0)=ANY=[@ANYRES64], &(0x7f0000000500)='syzkaller\x00', 0x5, 0xb7, &(0x7f000000cf3d)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, r7, 0x19, &(0x7f0000000000)={0x4}, 0x8, 0x10, &(0x7f0000000200)={0x2, 0x0, 0x0, 0x40}, 0x10, 0x0, r7, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'geneve0\x00'}}, 0x1e) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xb, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) connect$pppoe(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x0, {0x0, @remote, 'veth0_to_batadv\x00'}}, 0x1e) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'dummy0\x00', 0x0}) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa49}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r10}, @IFLA_HSR_SLAVE2={0x8, 0x2, r10}]}}}]}, 0x40}}, 0x0) connect$inet(r3, &(0x7f0000000380)={0x2, 0x4e25, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r0, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) 1m7.540896113s ago: executing program 4 (id=4203): pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) statx(0xffffffffffffff9c, 0x0, 0x6000, 0x2, 0x0) 1m6.613686598s ago: executing program 4 (id=4212): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newtaction={0x68, 0x30, 0x10d, 0x70bd2a, 0x25dfdbfd, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0xfffffffffffffe75, 0x2, {0x2, 0x20009, 0x4, 0x8be6, 0x5}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff2, 0xd}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth1_to_bond\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000001c0)={@remote, r3}, 0x14) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r4}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x2a4, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x27c, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x21c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x210, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x1f4, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x52, 0x1, "f6d7bbbb48f41acd1724927f132f9ce99a78eaca0bce6e1fb150ff252209ed4420618889cf38073204cb41d062caec384e33c8ba5665fe1d1ed3facc841d9a7657f414bf99966826a3159a22c948"}, @NFTA_DATA_VALUE={0x40, 0x1, "445daf4ba69950818c66c1a4391b49c15180687365a3189ebde171ec698c3b05d7b0e62331f9d3170b059eea9dc46355958d7dba8b368ce32c2a9dc6"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x31, 0x1, "f45712a15b35bf35fe9c76be5fb7addcb1efc5470f13fc41074553487c399d31f1c8b1d70a7764eced8c7453d9"}, @NFTA_DATA_VALUE={0x62, 0x1, "70fa279ec915e467cfc2407b633462204d8660ae6f1254c541a83437fe94f1c2aad91212f5e47c9d309a47eab3626dfc7dbc0641b16cd8705f19708e84d2251b29bc275135be8f3fd4ebcbd82bc668b008fa65ff3b530dadbd74a70a5c31"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x5911cfe997d3f3d9}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_CMP_SREG={0x8}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_LIMIT_FLAGS={0x8}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x32c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="671d00000000fbdbdf25460000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e000200000052fc8f0001000000000000000c009000a3003bb600000000"], 0x54}, 0x1, 0x0, 0x0, 0x4040010}, 0x600c000) r8 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2fffffffd}, 0xc) close(r8) 1m6.392288526s ago: executing program 4 (id=4213): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) sendmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 1m6.356754028s ago: executing program 4 (id=4215): unshare(0x20000400) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) chown(0x0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000003140), 0x280, 0x0) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@mb_optimize_scan}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x4}}]}, 0x1, 0x50f, &(0x7f0000000140)="$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") r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) fallocate(r3, 0x0, 0xbf5, 0x2000402) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000004280), 0x400) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1008082, &(0x7f00000008c0)={[{@nodioread_nolock}, {@noauto_da_alloc}, {@dioread_lock}, {@errors_continue}, {@dioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@data_err_ignore}, {@data_ordered}]}, 0x0, 0x5fa, &(0x7f0000000dc0)="$eJzs3c9vFGUfAPDvbH/QUt63hbx53xcP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2prTb2f7Ytrul8/kkS2fm2eH5TrffnWeefZ7ZAEprMP2nEnEwIqaTiP5kfrGsM7LCwYXnPfrzo/PpI4lq9bXfk0iybfnzk+xnX7ZzT0T8+EMSBzpW1jszd+Py+NTU5PVsfXj2yvTwzNyNo5eujF+cvDh5dfSF0VMnT5w8NXKsqeO6WbDt7O133+//ZOzNb776Kxn59pexJE7Hy9kTlx7HVhmMwdrvJFlZ1Hdqqytrk47s72TpS5x0FjxxTwuDYt3y168rIv4X/dERj1+8/vj4lbYGB2yrahJRBUoqiWreNmt3KEBL5e2A/Nq+/jq40vIWCdAqD88sdACszP/Ohb7B6Kn1Dex9lMTSbp0kIprrmVtuX0Tcvzd2+8K9sduxkX64oj4mYEPmb0XE/4vyP6nl/0D0xEAt/yvLUi5tF5zLfqbbX22y/vo03o5+eKDYQv73rJr/0SD/31qS/283Wf/g48V3epflf2+zhwQAAAAAAACldfdMRDxf9Pl/ZXH8TxSM/+mLiNNbUP9g3frKz/8rD7agGqDAwzMRLxWO/63ko38HOrKlf9XGA3QlFy5NTR6LiH9HxJHo2pOuj6xSx9FPD3zZqGwwG/+XP9L672djAbM4HnTWzR2dGJ8d3+xxAxEPb0U8VTj+N1k8/ycF5//0/WB6nXUcePbOuUZla+c/sF2qX0ccLjz/P75rRbL6/TmGa+2B4bxVsNLTH372XaP6m81/w/9h89Lz/97V838gWXq/npmN13F8rrPaqKzZ9n938nrtljPd2bYPxmdnr49EdCdnO9Kty7aPLu7avfHoYffI8yHPlzT/jzyzev9fUfu/NyLm6/7v5I/lc4pz//2779dG8Wj/Q/uk+T+xofP/xhdG7wx836j+9Z3/T9TO9UeyLfr/YMEXeZrWtWwL0rGzqKjV8QIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAblCJiH2RVIYWlyuVoaGIvoj4T+ytTF2bmX3uwrX3rk6kZbXv/6/k3/Tbv7Ce5N//P7BkfbRu/XhE7I+Izzt6a+tD569NTbT74AEAAAAAAAAAAAAAAAAAAGCH6Gsw/z/1W0e7owO2XWe7AwDapiD/f2pHHEDrNXf+37PlcQCtp/0P5SX/obzkP5SX/Ifykv9QXvIfykv+AwAAAADArrL/0N2fk4iYf7G39kh1Z2Vda+/ukwN4glXaHQDQNm7xA+WlAQ/ltY5rfGCXS9Yo72m401p7rmb6/CZ2BgAAAAAAAAAAAIDSOXxwU/P/gSeY+f9QXub/Q3nl8/8PtTkOoPVc4wOxxkz+wvn/a+4FAAAAAAAAAAAAAGylmbkbl8enpiavW3hjZ4TRyoVqtXoz/SvYKfE84Qv5UPidEk/dQj7Xb317te89CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWO6fAAAA//8QQBzw") sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x11000000}, 0x80001) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r4, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) pidfd_getfd(r2, r5, 0x0) 1m6.218708589s ago: executing program 4 (id=4216): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = getpgrp(0x0) r1 = syz_pidfd_open(r0, 0x0) pidfd_getfd(r1, r1, 0x0) 1m5.970974989s ago: executing program 4 (id=4219): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newtaction={0x68, 0x30, 0x10d, 0x70bd2a, 0x25dfdbfd, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0xfffffffffffffe75, 0x2, {0x2, 0x20009, 0x4, 0x8be6, 0x5}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff2, 0xd}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth1_to_bond\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000001c0)={@remote, r3}, 0x14) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r4}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x2a4, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x27c, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x21c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x210, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x1f4, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x52, 0x1, "f6d7bbbb48f41acd1724927f132f9ce99a78eaca0bce6e1fb150ff252209ed4420618889cf38073204cb41d062caec384e33c8ba5665fe1d1ed3facc841d9a7657f414bf99966826a3159a22c948"}, @NFTA_DATA_VALUE={0x40, 0x1, "445daf4ba69950818c66c1a4391b49c15180687365a3189ebde171ec698c3b05d7b0e62331f9d3170b059eea9dc46355958d7dba8b368ce32c2a9dc6"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x31, 0x1, "f45712a15b35bf35fe9c76be5fb7addcb1efc5470f13fc41074553487c399d31f1c8b1d70a7764eced8c7453d9"}, @NFTA_DATA_VALUE={0x62, 0x1, "70fa279ec915e467cfc2407b633462204d8660ae6f1254c541a83437fe94f1c2aad91212f5e47c9d309a47eab3626dfc7dbc0641b16cd8705f19708e84d2251b29bc275135be8f3fd4ebcbd82bc668b008fa65ff3b530dadbd74a70a5c31"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x5911cfe997d3f3d9}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_CMP_SREG={0x8}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_LIMIT_FLAGS={0x8}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x32c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="671d00000000fbdbdf25460000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e000200000052fc8f0001000000000000000c009000a3003bb600000000"], 0x54}, 0x1, 0x0, 0x0, 0x4040010}, 0x600c000) r8 = socket(0x1, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r9 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2fffffffd}, 0xc) close(r9) 1m5.97047979s ago: executing program 38 (id=4219): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newtaction={0x68, 0x30, 0x10d, 0x70bd2a, 0x25dfdbfd, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0xfffffffffffffe75, 0x2, {0x2, 0x20009, 0x4, 0x8be6, 0x5}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff2, 0xd}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth1_to_bond\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000001c0)={@remote, r3}, 0x14) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r4}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x2a4, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x27c, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x21c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x210, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x1f4, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x52, 0x1, "f6d7bbbb48f41acd1724927f132f9ce99a78eaca0bce6e1fb150ff252209ed4420618889cf38073204cb41d062caec384e33c8ba5665fe1d1ed3facc841d9a7657f414bf99966826a3159a22c948"}, @NFTA_DATA_VALUE={0x40, 0x1, "445daf4ba69950818c66c1a4391b49c15180687365a3189ebde171ec698c3b05d7b0e62331f9d3170b059eea9dc46355958d7dba8b368ce32c2a9dc6"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x31, 0x1, "f45712a15b35bf35fe9c76be5fb7addcb1efc5470f13fc41074553487c399d31f1c8b1d70a7764eced8c7453d9"}, @NFTA_DATA_VALUE={0x62, 0x1, "70fa279ec915e467cfc2407b633462204d8660ae6f1254c541a83437fe94f1c2aad91212f5e47c9d309a47eab3626dfc7dbc0641b16cd8705f19708e84d2251b29bc275135be8f3fd4ebcbd82bc668b008fa65ff3b530dadbd74a70a5c31"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x5911cfe997d3f3d9}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_CMP_SREG={0x8}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_LIMIT_FLAGS={0x8}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x32c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="671d00000000fbdbdf25460000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e000200000052fc8f0001000000000000000c009000a3003bb600000000"], 0x54}, 0x1, 0x0, 0x0, 0x4040010}, 0x600c000) r8 = socket(0x1, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r9 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2fffffffd}, 0xc) close(r9) 4.080181211s ago: executing program 6 (id=5092): request_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x1, 0x7}, &(0x7f0000001fee)='y\xa9rustV\x1eS=\xd4\x16\x95:e\x00\x00\x00', 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00'}, 0x10) writev(r1, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xf, 0x20000000000001a0, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0x9}, 0x18) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, 0x0, 0x0) setsockopt$MRT_FLUSH(r5, 0x0, 0xd4, &(0x7f0000000000)=0x9, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x6, 0x0, 0x38159f4e, 0xd21f, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x4}, 0x1100f0, 0x7ff, 0x9, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) r6 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r8 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x2000000, 0x3a6}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r11, 0x400454cd, 0x305) syz_io_uring_submit(r9, r10, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r7, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000100000001"], 0x18}, 0x0, 0x40000, 0x1}) io_uring_enter(r8, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) 3.942608292s ago: executing program 6 (id=5095): bind$packet(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) lsm_get_self_attr(0x66, &(0x7f0000000040)={0x0, 0x0, 0x34, 0x14, ""/20}, &(0x7f00000000c0)=0x34, 0x0) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000eca20ae40000440003800800010002"], 0x58}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) gettid() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000002a80)=ANY=[@ANYRESDEC=r1, @ANYBLOB="9a6adba9f7cfdfe07da20aa1326b959cb77d01f7f43d5a72e933a4fc8d98e562e2c008353c632476b6a5c1e233a3700dac26db6bb15f7191671a91efb5aca1fa84103f824161c3771a44d76c17ceb942ae0850e6607bd63d93c21c273375c90f2ee53e9f7d21dd77cb56c23726589cc4706216c8bac643cef31f63ba2c2897a6937df2b63ae9ebaeeae43fb4395edab2844a34f4ce41ba2ea02e8b6774aac200b149ef7840bd3498756a3911cbe639ca62e55f268f0cb1460bb3579947bc32ba4d685508da0848d71875edbbc0008f16fcf776e0303d62e215831103d09625cdd4034d20ab8c341adc32cd12af76a2c76e2d4a5ed001699570065c5657e719ac2ddd891522a20dd30a94ff4f5ff4e86f7d9ab1810d271986d8cdc7b0fa3d0ace338c4c984f56ae0331dc837e7bcf81a2baa7dd1230e9ed276b6c3a126667ae834332ad518014b08ba8013d2676797651ab06ce93c10f43cc5770d7feca62fc2e13624b651fbf469765f9771831d5f8285cfd2ae82afb960e5b85ba7c4f1509a10b89f0dbe1821250f83084efa844a3e3abb0667bfe1c3df57efd1c518feda0b22f4532ab5a6743728262a63d864b13f2e91e216be82dd3396c6bf2a284b4517e26b515a79146f323ae9fc8e522d4ff6ebc5143f41ad337ee4cbd82de28c547a6e58a9e589ba4a190276e63d6365fbfba6fd1808728ecff5bf63ea2c06c1ca9a59646c424d6a4d7d85f332c3eb97b120067fe7669829471a60ee1a0c620b99b67a7ed3900539893915826f5b8981a8726c65f4d1023ebd4422d24c2e2c63268ec2c1fc4eac4eb5f16942bc96cac4383ca9cd9a42b12821be713ebb61b6fbcff10bc86afc662a1efc16f62120a6a60feb4ac155a3fa27a3130ca0af505b01738dae86433664c4f714db31d68ed1fc023b6c7e7f4a13b5214796b89203a9c4a3e28f3eb32a8dcc2945839556a341f49304fbb7f2c922630a5d6349e8adab34f5b42d728be9e8cc5a59f902ea318fb2079c1e13d7dcf6dd514e643115af40dba7b92ebaf087ddd068121d28b71bb3d0278ccf1197f6d9955d241bfb2d6d881f85f70045e4ac1445d8475c52f506da7a5e70c8af66d533088ebe38cb6cd74fbeb356068bc065171cb6c8a1cfc9d61c6afcf975e1dcd693eb67aa8156a2ac54fbee75c291480f89d5706b174fb37715869fad619767d94ec2d81cf1df0822053c6f0b0a726efc6cd2055267c123b1610572b7daa6d07bded7c27c88f36120d47742e3241f9adaa96517d630c4d8970d432baf381c67763503977dcb9ed2fce54ce4366e9743875b5ebdebd7ba8b096b3129ce92ec27ef4b71f8eecc9115435971b7843b207e54b526dc80bcfacb7bbb0ab78b7400211e89923d300244aabf32e05c1844bd1185e5180250c16c8010338b19d2643522a069a1bfb001fefdc01a9deb5a71224c5d9d5dcc754a465f05c2394ea498e25ca32ee1796f1e0b7d1d422f8240dc19f9dfe9a23ab9982549cf048fb5af2b2acb12025a8b9b8489fdac5270e56b522fd75680edf46a116794060250e79562eaa9ba9e59db2fcf016bca38e020e901dde9a5338c406e003492f3b9c66c757ae1e90715b3fc763071dd95bcfabbed36ae46d5b55800e80ef84efab27cf9af5928e0ad0956b93ab87ce3050a33d1ee61245b13c4faf500b08835adc12d898e03f8da04bf7d0d3f1a831c41f52b323586fde89e195a7e1fe4edc1bbe9596cf25590c4788c5839d9315c5b168d3e886601c73685d380b70871d8d37cbb351bb896b407253b166f9919636029d4d77d9911276fa07c82f7434558923fb4ada2d70273eb6eb0a7ab3fbf32e3fa3ac7fd7c2714cc457f894b7262084d0cdf49bba054a3e6e0bd3ae09eeabdc49a9aac48d46a1ba2a8e26a7ca8b44ba5b17c79fdb47cfa16b0fbde0210553ed51c259847e7db5786ce0066a12782b40846348750e99878a32cbdb24a79397d0bd2b27d1c63014b56f013cc7c9e360a47f9f0b9f431df1384eac11cf2923eb194a3e690f2cc4091387a7289b1d07a7be4088b99d14385d90da9d69d17e6dfc8aa3ada3028840072f546d6b4cf74f04e448d4777e30cec5779b765ebd6f703561e96333c4c8101e07b6ded943e7aae09f35869a8ddb072793d7b897afe82a754d5b8c99f6b8a5fea4b5283e8f23743a46ccb6b0e9600854916ab227571b3d45aabfbb17c21edf780c8a0858d28583a8aae9ef4f243617c582355d7acc94db70cb77ffd2b62005d6639dc08bf9ba20b7acdf825b48ead199cbc1c5aa21a7e97b21bb04f57c46ed6b947a40eb8535c56b4449755744ce0da37fab5bf89d5bf330fd15a75b6d83cf382489ccef87bd29e834c1062682c478dcc5d694aaf58011833a69a6ae6154651b67a05c8c5871409d2c796f4de2655a6fa5bc6d44db970d1e6361ce8ac82e3116f7e4136270b181b72cc640146a5a375e97a0afad32b0fe6ddd40178036519ab233d2f0f76c3e5ef5240c1033cdb95b9f28d84b496cef6e7911efd9c4b973ee4dd8cf2668e7bbf1adcf2a6e6432d7f8329eefadf91280cba6fe661f6ad342cfe6dd7200590856691961685451e7e777ecbf95508cf6659a485a12bdd8d585538a2de06e69eb53b269a8962a518e3f8c4549b64e26858a5157ba4a2cf934d9fd4794d38af41e56fc739f1d06df23ed6e2c227f84ba9f8128f3abe8f6f42e073f5a67d6a4efafc37b7701ca09431573cd0da7305d7af876680532dd6bcab4c865330654fc3b7481c4ccde52314589a9230686765e3cad5ec52deeeed3f4cc601ad3db85c3d75653c24da3c7aa449861b5bc49c3c037090449527557ee11da9a6eecce99dd77761610a3ec7d4bb6c35342d200e0e3c0209029773f63761f5f92c36e27d000e66673962db999a876d8f2d17f277639f7e655b87b517dcd70ec72de27870c5afaf06185b0efd2dd9d9aa208478153d0bdc8788bcb02c59b181af8067ea29d6e9373a046397ee0ad4ab4ddace661e6771d5216c900c434302109333e30fb71f5dd49fac4972470fa165a3c2d8eb146fae20f5c9ca7325a34c9fd02657ab72bd8573f2229d2dd9b371b2b45ccc28fc55070848b3447ef009cc0631b4931ab68bc5635192d15e5b439b3b5856231f4cbfe1ee35efde588e348ae8c7714b881c661e47172c90977634518c2d9039a7f367e60324a84c0624a2218c7689ada4515b247f533ec7d137c7d71d6537634c36344d3f788994b0d922cad0a286ea9735c6c3b31602d55f1afb05985ba01682a9415dc7e7392fa8f882471a50a09c8633ad8aaa9680ce442919138cb24d176c837b98daaefcf63f0065213ee35543c19714b3dfc266dafd813f869d275982f56eee6da83e219572957a466bea22a84b6884e5fd943c4982a329862f90165dc20a86a075e15a1c3fe43dace582a230a01b29f02387975fe0f86ab1bb174ee251007b8cebdda6b83e59a730ca07ecffaa3fe2e3cc437f4dcde1a512a00f06192e7f98e41e18670e75f11ae6d8db2ccf6047fbf1d75dfd19c028ec26b9cfaa43737068101659a6575f16d58731f02336a7023252d24aec1858a6c8d388b9475410aa38fabbe5d391e5b7f4731393c867c88c09fb854bc55779e3fd7b6562e2ff51fd2991999f68d1b44c4a37cb9a08eddeeed6c6c3040c135c13accbdd25ac6528c2372e2aef3ba823b30a36cd239119f0fa5ae30a3bb93bbe13cbc16673108551cfc326bcd259ead134e3258fb95e3bf0057d44d4e1910d3f1d2ce7d598f2252faf07f35b591be1615f8a385d5d829ede87aa25a69e4c59096dbe075706071a45ed16f677ac34478c3ab9fc614b7f391c27e9b2b6f0314e96492e428e94d6531e01a1b80528d37b9100e3c5a5d3e205c04ddd6d83ca61e94585a2808aaba417e3cff61cf79118703f63758bf6e02755c62105dc1238f6c4310288883b9ecc5c32fc194aab859f5b185272df153d4c620aac6f9c5c4eb731ed39433fcb79c6d7b4887df821652a2dd5be7ed642e6be6b1bb81b60b8c6300047f89dd6656bc3a0e136c4d9fb6b400247fe35293256c340c673e6b67159a70cefeb9a17abf496ed4035378a6b93c07a04e0ee9c73fd5db7cb2893863ccfa7b8f5cc3a7b812fdfe0d54153352c1e1149f5c154373886258858dd39a289dc27501a8a7306fa9a64ef124a1074d493847b696e8efcfaac59c8a16a90f6b8ee8731d8bbc15723bace74a7fa9591f0e885b3e4109f9a3ca14d21bb92f7af4c4172662eca970355cc31a41056ee435eddd6a1dd733298133cdc54230dc019a49ef0f978aa25309345d2785641adf1b9c8e1252dd8435290188e668c15efd59e1ad35d3cbd6522de1b467ad1a3808db4c35d3d3308102c0af839272fa07a55462e8eea56b1d538a5ed2a21eb73d821ca5f2d8f172d7fdfc688927ab32399a724d77398b910d1cdd289bae3faff7e929c44eb9cc4e45ebdbb645c6f694a20ccd630eb4a6e026c440f66ecafa4f4ca2d25a5a16bf5400406058a1daedfbc18164938316d5da28d215ce4eb5e4a9ffb5481c5844b1324c1303a8ba465e97d3d2ab09dcf429f253ff5601b31ab9874815dc912c95866bbe1410071e6be7a254f7a8381e5c4c1010865233ec66cd0b39643086832d3c5b902e460d86b103bba8c94e19b36e00f8b8a89ae1a4722414a0447c5d8e67d3422a6867c128efea04ff464e1eb07877e4c2ac1e7666bac783dddf50e6186646e20731b06b02116c8bf11144826ac92c2d588aad7bf002cf715bd71e66e9ebe5dcc4ddc28cd32e052f15fea6ab1235e91afb5ab6e82d4c566cc6e352cb4329beb3befe70b2eebc5805a9bcae15386c8c618242a27823c00e7e7325231f05eb108dce8af2acdd1f867c05572f365a5f96493166961d93afee594960371894a796b92cbcf782025b1c231566cae38d27426bd4c6d24c178f4ab10f7a8be7117d4237db1b3e2cdc2fcc42bfabe1d70cbbf24a1376270e062cc0fcd6a7b9894cbeb86253840eb58b72f3a0a56201f2fb84d5e38bffd8ed5c77d5a4c3f61287606905e8e788535f7e2f88ce230bd264d1abf38f589ca413a8736f935d1f54d77aefb980de667732498274f6fed2a3670d7b52f0533c8e74864316da7026ff22ec87a15f57d9bd7b413232ac73f5200e768076872fcd121fb35992200e309a34be64126d50245c3fcf960eb46a20c5ff0017f49505ebdf251a9cd6910d8508e4e90b9c0d6443f1260a96ba1623c8870b0daa572de058e8c54ffcd7c4fe22fd210e4cd16e472ece20443ee127f3bbadaf512038a4d50ae49231410b140d3f2b199c59758756b07c18120d23edbedcde999cb75d68fb1c11adf6d77e18e591053beecc10f28b73cec8e8f327817d3a3b3ca02298e13569525d6a701cf355ee7e5a36adb621f78ea79333ba0ea9776effef7b8a5b58e83e8a067a37b6d0e3009dfffa5716b1a368a3c37f9015c38a06577333c7ffca0731996499168ead5a2e58269449d6e21e994a142589ffbfa4be40b290ec805a07f1bb62ed6646d2f0ef53ae7549c3a0f0968e3b0f9d5d92665c4f4bad3549d5196e9bc3fa9619eb94bb07dd6547f9fbc7b556e1368627c7a3520773ae1539f59811bfe228da0816ed422e70f7f2871b0ba2e4bcf4542becc2a4cd0f56f867ccc8fd16fc6d9aaba80b4686f1d810d3f6a246bcd34e8a47b4d0bb55638528bbf8caf928a0d8218c9712e1fce384ac442cf2eec8eecd7d53847014c8609a8416415921916178d64d71e1b552d0e437dbc49d2dec55b987", @ANYRES32=r0, @ANYBLOB="bf64c2b5b745a11b96d568e3000000000000000095aa37ae7e31bbb1bb33c93a67b5273b90a1e4456e8c17bd37221459b8374c38552adc254d6197eea275f4fb4f7490ce568d00155a8607140c5a6edab28fb7e81ec298158775391c5dd98b736865b7f0253de6927b4f16c9d0468708cca6d9e2826bd66f251c55", @ANYRES8=r3, @ANYRESHEX=r2], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x5) r7 = inotify_init1(0x800) inotify_add_watch(r7, &(0x7f0000000180)='./control\x00', 0xa4000960) ioctl$SG_BLKTRACETEARDOWN(r0, 0x1276, 0x0) rmdir(&(0x7f0000000100)='./control\x00') close_range(r6, 0xffffffffffffffff, 0x400000000000000) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4000044}, 0x10) 2.9770711s ago: executing program 6 (id=5108): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x7800, 0x7, 0x8, 0x8001, {{0x6, 0x4, 0x2, 0x2, 0x18, 0x64, 0x0, 0x3, 0x29, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x0, 0x2}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES16=r1, @ANYRES8, @ANYBLOB="ac03d9b1bce459e0eac179f881d647ae862f0267832d7642e24453ffd050e85a4ecfcc006aa7c4f460ea2dcfbf53b7b28d0f263e7e5e960ff3d3bb0b4d04f333d10ba52c356b74931ffc91ae549358abd7f5895fa11d438076f79ed696fb5c25970fb5642bbfae9f49a92d973dd222f42fb646cd65135b2a56b944"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000540)={0x0, r0}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x2a0040, 0x0) ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f0000000340)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="fa48235548a6464824309b471842", 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000800)=@assoc_value={0x0, 0x7fff}, &(0x7f0000000840)=0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x9}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}]}, 0x3c}}, 0x0) 2.928392124s ago: executing program 6 (id=5111): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) 2.901964666s ago: executing program 6 (id=5113): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x94}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0xfffffffffffffdee, &(0x7f0000000000)=0x8000000000005) getpid() connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0x4, './file0/file1\x00'}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) 2.774876516s ago: executing program 6 (id=5116): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x81203, 0x10000, 0x0, 0x5, 0x4, 0x20005, 0x0, 0x0, 0x0, 0x0, 0xcab}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="240000002100110000000000000000000a0000000c000000001d00000500130003000000"], 0x24}}, 0x20008000) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000180)=ANY=[@ANYRESDEC=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001340)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRESDEC, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff0000631ca163fb305cae000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}, {0x0, 0xe0}], 0x2, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r4}}], 0x20, 0x2400e044}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x444, &(0x7f0000000780)={[{@nogrpid}, {@mblk_io_submit}, {@nouid32}, {@debug}, {@nodiscard}, {@quota}]}, 0x1, 0x437, &(0x7f00000002c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x188) ioctl$EXT4_IOC_GROUP_EXTEND(r5, 0x40086607, &(0x7f0000000700)=0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = semget$private(0x0, 0x1, 0xa1) semctl$SETALL(r9, 0x0, 0x11, &(0x7f0000000280)=[0x3, 0x77bd, 0x0, 0x4c18, 0x2]) recvmmsg(r8, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}, 0xc}], 0x1, 0x40010080, 0x0) syz_usb_connect(0x3, 0xb4c, &(0x7f00000007c0)={{0x12, 0x1, 0x201, 0xac, 0xb8, 0x32, 0x10, 0x1b3d, 0x9310, 0xcebf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb3a, 0x4, 0x2, 0xd7, 0x20, 0x4, [{{0x9, 0x4, 0x92, 0x0, 0x5, 0x8b, 0x46, 0x14, 0x2, [], [{{0x9, 0x5, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x8}}, {{0x9, 0x5, 0x7acd62eb9abc31d9, 0x1, 0x8, 0x0, 0x4}}, {{0x9, 0x5, 0x5, 0x1, 0x8, 0xff, 0x1b, 0xd4, [@uac_iso={0x7, 0x25, 0x1, 0xc2, 0x3, 0x6}, @generic={0xb, 0x24, "8a1a461dae0bdd306f"}]}}, {{0x9, 0x5, 0x0, 0x3, 0x40, 0x6, 0x8, 0x2, [@generic={0x20, 0x21, "367d1e734f0ae20bd72b7d59248673cd0a1e0a7ccd134e20159497e72314"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x8000}]}}, {{0x9, 0x5, 0x1, 0x10, 0x20, 0xfc, 0x9, 0x7}}]}}, {{0x9, 0x4, 0x95, 0x1, 0xd, 0x6e, 0x69, 0xce, 0x1, [], [{{0x9, 0x5, 0xe, 0x10, 0x10, 0x2, 0x4, 0x10, [@generic={0x5c, 0x11, "3423b1f6329a14b3a3e9505066585b8dd84416b2f5313bd2603b183884d0f0e7b511546f3ef59c8e32fa736f60f67c8c07c719344e1a90d14ad0cba3216c4904d5ad31d9fb3d3f117a09f9dbde9d66667289b9bf8316a9267f68"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x0, 0x0, 0x5, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x2}, @generic={0x37, 0x4, "4376a320ce67f627d9e2dab046e2c1ef7689d5f2c5b7784cb9e74e36d881e5922eca65dbe24f6ac5933de30d875c87187bc5c3a6b8"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0x0, 0x7, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x6}]}}, {{0x9, 0x5, 0x4, 0x8, 0x10, 0x9, 0x40, 0x5}}, {{0x9, 0x5, 0x2, 0xc, 0x10, 0xd, 0x6, 0xfd}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x5b, 0x0, 0x1}}, {{0x9, 0x5, 0x8, 0x3, 0x200, 0xa6, 0x3, 0x26}}, {{0x9, 0x5, 0x1, 0x10, 0x400, 0x0, 0xf9, 0x7, [@generic={0xa4, 0x4, "36095576342d38831d6d10ce2421babf52113907822ec5bf79b331a56b05fcd484e65f1c7d13b35378a56e809bb684a56a35628183b65e20281613d79b46c13de8c9002d9d4efe5ea854cbbc10091fd4bbc025497a67fe13223a85f8e491d377c066f8ab328e876e7b23ba9fb471824ef2d023c2bb88605e3b00679722347855f504c2a680fb9f7fecdb6efb60e07fd19bd02f60d30c32f0e862bd665ef6e1742156"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x5ff, 0x8, 0x80, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8b, 0x5}]}}, {{0x9, 0x5, 0xd, 0xc, 0x10, 0xf2, 0xfa, 0xc5, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xa5, 0x800}, @generic={0xa, 0xe, "dabb4a47f8a5ac20"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x0, 0x2, 0x3, 0xf9, [@generic={0x84, 0x3, "eca31f1727aef6af5a0fd0bd3f6f7294f6d8aad21a7a352806c3f01e7e8008defc50c05442ee6ac3fe25cf01c4713e86f09cce1f88526fd7110017ac9497909fd802df49cc22b4096eda92d90452829fdcb7b3880cf1df1497873ce99ac827d4fd39f23b63282e32d8b7c355360c8776663eae0738b2dd2ca339ad40c155aa2cc318"}]}}, {{0x9, 0x5, 0xb, 0x3, 0x8, 0x0, 0x7, 0x3, [@generic={0xcb, 0x2, "a58ced7d6a800e0b0a9f0fda6fefdf750d1193a7775ca98fa478a1b8c012e8ab3130c71deb1c6588e2ee48baac89c0ba76c0dbb7b23c8b1f8880cf2f04c05c9b55e5cdabb774dafa8884b24d6d99ae0d29428c8020eb61c6f5553f03461cb4593adced593123d379bba0c7212fe91e498b1d24837b95b92c4ed1f2c3ea39645946889e1fa05e684473d5dca131f50f275c9a042c538cfe526d4fc2cfe6dbbb59df28a8262b98364a921392abb2da5efbc3db9f9a75706686c4678bc0fdc2975668fa8e3fd1e4ba49f7"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x35, 0x1}]}}, {{0x9, 0x5, 0x7, 0x10, 0x40, 0xa, 0x3, 0x67}}]}}, {{0x9, 0x4, 0x0, 0x5, 0xa, 0x3f, 0xb7, 0xd6, 0xc0, [@uac_as, @cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "f50f9af655"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x5, 0xc0ad, 0x1, 0x2}, {0x6, 0x24, 0x1a, 0xf2}, [@mdlm_detail={0xb7, 0x24, 0x13, 0x10, "24be9f7e689b71590a2b929192e24436980c6f3fcda65fecf23536e67d5675295426ef3f84ae6188b434a8287cf0ebf1e6f7fec0448798fce52f38248ebbce824d511487426f84e638a34d2659ed79717472f1768c7807bac19dd1a94df4c9c79756fa762371d14ef4854024c534d91fb7d66d6971e22fb64695d4d9c8787ad923b395b91304da9f7c49069b21b5905c7d1120f5c1615790947a147f2f18dd931e956eca4b9725a0a3309d123c726598d4d57a"}, @acm={0x4}, @mbim={0xc, 0x24, 0x1b, 0xc31, 0x7, 0xea, 0xf, 0x5, 0x8}]}], [{{0x9, 0x5, 0xe, 0x10, 0x10, 0x80, 0x5, 0x6, [@generic={0xda, 0x22, "e809639188b1ddd6e8efda4be8fc30907e06b50433ad90fb42e8b6b4bb370a349a054980b7a06f95c34a0957bd18d5c61122b315e065ff606513c5405330a84b20f0b2429254a512324f70c029c1a841093c1cfc5f3dc9cff0a5d2996a427b98f1bf8e29cb2b537ad138de94178d491516f8b0b59f859347f54de4adb28ff5b8f7c4591b2fb3f20f01cf14aeda48aea419abce33daf25417302d2b7a9c73ebe4857737396aff1e6a888229cbc4a792c1c3906d7c9031a5ea319b100ab76179c733635a6b2ce381f4ccc9ea7bddaa785b1cdd605d5ee3623a"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x88c}]}}, {{0x9, 0x5, 0x2, 0xc, 0x40, 0x10, 0x74, 0xfb, [@generic={0xc9, 0x22, "2bd7efcb3de41a8b2ba7349fa2868bf010178a1a008892413e00d964aeda9df1403bc229aa9f3fd57cfd604263e812556eeb0b9df17b119537479c1cc2aee31fb40cd9014452bd937bbf2a6c6f2d6350ab643e072dfabb7ac7d93b28fbd1642bfc24bfcf8accfd6899d2b367c36d147b95e3bf3e6a1fa0f52334f5d0aa818cd62e7fe1aaddbb58dc733a8b0ce7ff4dd369037d2766fde2ba1d62d9fe68d079a0f5616456f9e928aff77825244920fa74129c5c895ae667f2b4a377392520512f7d9653e7ea3ac7"}]}}, {{0x9, 0x5, 0xb, 0x1, 0x3ff, 0xe, 0xd, 0x88, [@generic={0x5c, 0x3, "5e6f3752853ed5e204f2bc07425e174d9a2c7957d4a3bbe5130529cc0399e41cea8e21527bc4cbb30de9f7ccbf4113e191cc45bb5a09c1b975b7fb314e705479c5f01be9a8e2d250afe0028e05901bcf209746b4ae29377ccca0"}]}}, {{0x9, 0x5, 0xc, 0x36, 0x3ff, 0x81, 0xf1, 0xb7, [@generic={0xb5, 0x21, "79a0d15c204eac81856ddb7da7280e7baa0cb943635d2084ed527fd0023bbc1c8e5324e422b5540371495e03dd3888be27b2543a1086ed86fc98c41ed3d3e124358d174105697bc8acc680bfc13907034a3b9e03736be86b89186905402d3bc3d5d95f45779241d82629a5e7a0ea2ef131fbe2f2bb6614a9ddeea25369ceaf13f4acbb2e0fe8c894f9f696ee14c2c662e93d2fdc212a966f234114807ce180e97e07d27bcfbbf940e53bdcc150949939e23c29"}]}}, {{0x9, 0x5, 0x6, 0x2, 0x20, 0x3, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4}]}}, {{0x9, 0x5, 0x80, 0x0, 0x40, 0x2, 0x4, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xc, 0x9}]}}, {{0x9, 0x5, 0xe, 0x8, 0x200, 0x6, 0x2, 0x2}}, {{0x9, 0x5, 0xd, 0x10, 0x8, 0x5, 0x8, 0xd6, [@uac_iso={0x7, 0x25, 0x1, 0x99b31accbe726cf0, 0x6, 0x401}, @generic={0x4e, 0x10, "94a20b8172a29ce62e894b4488803a7ee1229d282bd2486d2789b9fd4b72c5e214fcca4dba56c95aad1ab7211713c3a4984b4567dc96f5f6e5858d46a409f5ad6968e9551e7dc0d2389c7eab"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x200, 0x92, 0x80, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7f, 0xfff6}]}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0xf, 0x8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x68, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x78}]}}]}}, {{0x9, 0x4, 0xf7, 0x7, 0x10, 0x2d, 0xf, 0x9c, 0x4, [@uac_control={{0xa, 0x24, 0x1, 0xf180, 0x8}, [@feature_unit={0xb, 0x24, 0x6, 0x4, 0x3, 0x2, [0x6, 0x1], 0x1}, @mixer_unit={0x9, 0x24, 0x4, 0x1, 0x3, "55a81a10"}, @mixer_unit={0xb, 0x24, 0x4, 0x5, 0x8, "3afeb1f14c10"}, @mixer_unit={0xb, 0x24, 0x4, 0x6, 0x7, "664f47341650"}, @mixer_unit={0x9, 0x24, 0x4, 0x3, 0x9, "c664ca2e"}]}], [{{0x9, 0x5, 0x9, 0x10, 0x200, 0xfb, 0x7f, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xa5, 0x9}, @generic={0xc5, 0xb, "906c83dd12d435c19f372811fb6e40f8e4af3e014cf67305e02f6080050fa477f3e8b2117b7425eabd58b72a9944c09ff319218cb5dcf66623d7f5f37153deb51c48e43a21aa61f0025f1b06a1c80c5c650a4245b7846639ccbfe04fd2cd0fe0e2719eaaa95bc30904cec9761c9befb79acc9a915d052347bd5bb2ac2d8cce183ddc38a73280f6e5fc583feab010540036164d7c8dcafe53eeb5e31e01738ceb138eafae1bda0fcf3df2804ce9e2d4102766a9ccd751899a16cf6cf969b0e3932de090"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x20, 0x4, 0x8, 0x9}}, {{0x9, 0x5, 0x2, 0x10, 0x40, 0x7, 0x6, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7f, 0x80}]}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0x80, 0x6, 0x0, [@generic={0xd1, 0x30, "59dd1e84afbc229fd237dff5377633f8ce33b36e77ee7deb6605852c3fb8e66dbab1eae9c6de53840bb86dffa7fe5ab230946afb0046b9d68a7946d9f1cd506fa3722a0f4564972b68cb06ae51a1a0bd9bb7f0bbd6a0fbe26305c3d58d975556c68ce3c96ebfd11dcd06175781e8f1601217bc7a86b8b272e3caa7961e391fab53f638b1e1378aaf6727243645c04949b813e89c9fca73fce29f4d2f2257ee8b6f1dd828dbcd890fd22da3ab079ac4bc28a7138ce47577011113bcbc3787ccd9980bbd8fe48887fc18951bd1981b94"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x10, 0x5, 0x0, 0x1, [@generic={0x53, 0x24, "703f6565b236ebae7637d74dd0436f7e6c236188a99186da435a78faeafba971e385a4fa110aa269750dae178fe6d4457e10eff7e8bab025efcaf53ed4891a5ce5f38fb16b2ea4ba55b958fde36fcf39e6"}]}}, {{0x9, 0x5, 0xd, 0xc, 0x20, 0x3, 0x3, 0x3}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0xe, 0x6, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x4, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x6}]}}, {{0x9, 0x5, 0x1, 0x3, 0x20, 0x4, 0x80, 0xff}}, {{0x9, 0x5, 0x9, 0x1, 0x40, 0x80, 0x5, 0x2}}, {{0x9, 0x5, 0xc, 0x0, 0x420, 0x0, 0xe, 0x5}}, {{0x9, 0x5, 0x9, 0x10, 0x20, 0x5, 0x2, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xcd6b2e7a2be14a83, 0x1, 0x3}]}}, {{0x9, 0x5, 0x84, 0x0, 0x200, 0x7, 0x8, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xfd, 0xb}]}}, {{0x9, 0x5, 0x5, 0x8, 0x8, 0x0, 0x24, 0x5}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x0, 0x3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xfe, 0x401}]}}, {{0x9, 0x5, 0x0, 0x1, 0x3ff, 0x0, 0x3, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xd3, 0xc1}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x5}]}}, {{0x9, 0x5, 0x5, 0xc, 0x3ff, 0x91, 0x6, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x1}]}}]}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x2, 0x3b, 0x8, 0x20, 0x6}, 0xf, &(0x7f0000000040)={0x5, 0xf, 0xf, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x1a, 0x0, 0x7}, @ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x1801}}]}) 2.370051999s ago: executing program 5 (id=5120): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fsmount(0xffffffffffffffff, 0x1, 0x2) getsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000003c0), &(0x7f0000000400)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaa1cffffff07ffff81000700430564c81e68ecb3ef37039277b48f1626ddce608b0000000000064d0050fd834eef3ddce8ce1b3c772faa787e3cc5abf101d7c24397a099567314917028d453ac0e1be0eedd1108c468673e6ae645db605b3d0884ee65e513ac400c941ae9a534165abcca4e239d72cb61c0b12b79ed1533886058de05225182f2eba2924fefc62c261aed4fb9bb7738c43505fe0d"], 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c00000006000000000000000100000d030000000000000003000000000000000000000604000000040000000000001202000000000000005f"], 0x0, 0x4a, 0x0, 0x1}, 0x28) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f00000000c0)={@empty, 0xe, 0x0, 0x0, 0x3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) 2.318165163s ago: executing program 5 (id=5121): openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x4b800, 0x0) r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYRESDEC, @ANYBLOB="4ecec27cf18820a4ec18ee210249ec702546b28b4c5f493dcd2c11e3196dff3bcc2e6c0a404411b6d5c50e0c63cd149f8ead3c7649648a89819b27f75f6bae4a0066941724496461619a30d3afcca1c53a57e4013f60fdb1052c1296e4d2f4b214a3ef152dcde73e99fe1bce0c63fddadef196f0d44879ff94d8408a4f8dbd33d48a66d0e60541dac7276f7e34a40a4dd7b752c3d88c63bf1416d851ec91dcfff6dd7cfa38edba20ada5e7e852687a9c1e3ff0109c9fc23ab2b8b813092ea1bda0ef97a86e9fbda3d374edc5e7702987587313f09d727875ee676d00"/234, @ANYRES64=r0, @ANYBLOB='\t\x00\x00\x00', @ANYBLOB="03373ada06a20413d6b660e857923da8ae4287d92f04b68ff6af741da628c139b5922540e75fb38cbf6829ffffb8b8b42daaf1aab3b29dc4b469ae449cedb1c8c22648e78ee4897812de99e3bd1188cbc585e961dccb"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x105480, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x55, 0x1e5, 0x3, 0x25dfdbfc, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x2, 0x0, {@ip4=@loopback, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x440d4}, 0x20004000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='netlink_extack\x00', r2}, 0x18) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="4001000010000100000000000000000064010102000000000000000000000000ff01000000000000000000000000000100000000000000000000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe80000000000000e72ff55146b66b6a000000003200000000000000000000000000000000000001feffffffffffffff0500000000000000000000000000000065000000000000000000000000000000010000000000000000000000000000000000000000000000040000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000a0004fdaf00000000000000480002006362632873657270656e74290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008"], 0x140}, 0x1, 0x0, 0x0, 0x3886f31be662c690}, 0x4000000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) wait4(0x0, 0x0, 0x20000000, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r6, 0x84, 0x1a, &(0x7f0000000600)={0x0, 0x46, "d7aeae11d3716a6a588ea91b0521af49c19768205cfd4b3f8ca302d18ac5d80a988d45295c8d997d1b408efb5087dfe13ed5359381f635e6c66adc453670660ad75e75f11c35"}, &(0x7f00000000c0)=0x4e) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) (fail_nth: 2) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000480)={0x60, r8, 0x405, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r9}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140)=r0, 0x12) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x3c}}, 0x0) 1.931430235s ago: executing program 5 (id=5122): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b70300000000000085000000720000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = msgget$private(0x0, 0x790) msgsnd(r1, &(0x7f0000000d00)=ANY=[@ANYRES8], 0x401, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) msgrcv(0x0, 0x0, 0x0, 0x1, 0x3000) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000280)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0x0, 0x40, 0x2, 0x2, 0x7, 0x10001, 0xfffc, 0x0, 0x40}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socketpair(0x8, 0x80000, 0x81, &(0x7f0000000300)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0x0}, 0x50) 1.517353157s ago: executing program 0 (id=5125): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) syz_io_uring_setup(0x495, &(0x7f0000000040)={0x0, 0x10079ae, 0x1000, 0x3, 0x8}, &(0x7f0000000340)=0x0, &(0x7f0000000400)=0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r7 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r7, 0x0) r8 = syz_clone(0x1940380, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$peeksig(0x4209, r8, &(0x7f0000000000)={0x0, 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newqdisc={0x4c, 0x24, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xe}, {0xfff2, 0xb}, {0xe, 0xb}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x5, 0x0, 0x25, 0x2, 0x8, 0x8, 0x1}}, {0x6, 0x2, [0x7]}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x20000880) write$selinux_load(r6, 0x0, 0x44f0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f00000003c0)=ANY=[@ANYRES64], &(0x7f0000000500)='syzkaller\x00', 0x5, 0xb7, &(0x7f000000cf3d)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, r7, 0x19, &(0x7f0000000000)={0x4}, 0x8, 0x10, &(0x7f0000000200)={0x2, 0x0, 0x0, 0x40}, 0x10, 0x0, r7, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'geneve0\x00'}}, 0x1e) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b0000000000"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xb, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) connect$pppoe(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x0, {0x0, @remote, 'veth0_to_batadv\x00'}}, 0x1e) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'dummy0\x00', 0x0}) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa49}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r10}, @IFLA_HSR_SLAVE2={0x8, 0x2, r10}]}}}]}, 0x40}}, 0x0) connect$inet(r3, &(0x7f0000000380)={0x2, 0x4e25, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r0, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) 1.446013873s ago: executing program 0 (id=5127): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) request_key(&(0x7f0000000440)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f00000001c0)='/;ev/vcsu#\x00CVq\x80\xfb\xc0\xe6C\xff\x9d9xg\x13\xd2\xd7C\xa2\xcd-z_\by\x94\x9c\x1c;\xf9ICX\xc5d\xe1Z\x06\x11i\xc5F\x1c\xf0\xf0\xf1\x7f\xd3\xb9\x18>*\xee \x99\xc2\n-\x8a?o\x00'/85, 0xffffffffffffffff) 1.418973236s ago: executing program 7 (id=5128): getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) getsockname$l2tp(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000a80)='kfree\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000003e000701fcf7fffffedbdf25017c00000c0004"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 1.391421958s ago: executing program 7 (id=5130): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1e8629867d7bdaee, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) request_key(&(0x7f0000000440)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f00000001c0)='/;ev/vcsu#\x00CVq\x80\xfb\xc0\xe6C\xff\x9d9xg\x13\xd2\xd7C\xa2\xcd-z_\by\x94\x9c\x1c;\xf9ICX\xc5d\xe1Z\x06\x11i\xc5F\x1c\xf0\xf0\xf1\x7f\xd3\xb9\x18>*\xee \x99\xc2\n-\x8a?o\x00'/85, 0xffffffffffffffff) 1.049041796s ago: executing program 5 (id=5134): bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0xfff1, &(0x7f0000000240)={&(0x7f0000000800)=@newqdisc={0x60, 0x24, 0x3fe3aa0262d8c583, 0xfffffff1, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0xc, 0xc89f, 0xffff5ef5, 0x0, 0x19, 0x3}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x803}, 0x20004004) 1.008103419s ago: executing program 5 (id=5135): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fsmount(0xffffffffffffffff, 0x1, 0x2) getsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000003c0), &(0x7f0000000400)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaa1cffffff07ffff81000700430564c81e68ecb3ef37039277b48f1626ddce608b0000000000064d0050fd834eef3ddce8ce1b3c772faa787e3cc5abf101d7c24397a099567314917028d453ac0e1be0eedd1108c468673e6ae645db605b3d0884ee65e513ac400c941ae9a534165abcca4e239d72cb61c0b12b79ed1533886058de05225182f2eba2924fefc62c261aed4fb9bb7738c43505fe0d"], 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c00000006000000000000000100000d030000000000000003000000000000000000000604000000040000000000001202000000000000005f"], 0x0, 0x4a, 0x0, 0x1}, 0x28) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f00000000c0)={@empty, 0xe, 0x0, 0x0, 0x3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) 950.676343ms ago: executing program 5 (id=5136): bind$packet(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) lsm_get_self_attr(0x66, &(0x7f0000000040)={0x0, 0x0, 0x34, 0x14, ""/20}, &(0x7f00000000c0)=0x34, 0x0) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000eca20ae40000440003800800010002"], 0x58}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) gettid() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000002a80)=ANY=[@ANYRESDEC=r1, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="bf64c2b5b745a11b96d568e3000000000000000095aa37ae7e31bbb1bb33c93a67b5273b90a1e4456e8c17bd37221459b8374c38552adc254d6197eea275f4fb4f7490ce568d00155a8607140c5a6edab28fb7e81ec298158775391c5dd98b736865b7f0253de6927b4f16c9d0468708cca6d9e2826bd66f251c55", @ANYRES8=r3, @ANYRESHEX=r2], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x5) r7 = inotify_init1(0x800) inotify_add_watch(r7, &(0x7f0000000180)='./control\x00', 0xa4000960) ioctl$SG_BLKTRACETEARDOWN(r0, 0x1276, 0x0) rmdir(&(0x7f0000000100)='./control\x00') close_range(r6, 0xffffffffffffffff, 0x400000000000000) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4000044}, 0x10) 455.538213ms ago: executing program 0 (id=5139): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000640)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fedbdf880100000018000180140002007665746830"], 0x2c}, 0x1, 0x0, 0x0, 0x141}, 0x0) 369.75213ms ago: executing program 0 (id=5140): getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) getsockname$l2tp(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000a80)='kfree\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000003e000701fcf7fffffedbdf25017c00000c0004"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 325.853183ms ago: executing program 0 (id=5142): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00f7ffffffffffff130012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000200)='kmem_cache_free\x00', r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r4, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x5c, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "e3de3d7b1cbd053b139464458ba87ec3ee777de774fc7987cca41989"}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, r6, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xa21}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x48880}, 0x4044) r7 = socket(0x10, 0x3, 0x0) (async) r8 = socket$l2tp(0x2, 0x2, 0x73) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r9 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r9, 0xc0109207, &(0x7f0000000080)={0x0, 0x6}) ioctl$MON_IOCH_MFLUSH(r9, 0x9208, 0x24) (async) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) (async) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) (async) connect$l2tp(r8, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}, 0x1}, 0x10) (async) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) 269.769028ms ago: executing program 0 (id=5143): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="00000000780000c79500"/25], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, r3, r6) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r7}, 0x10) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x20000000) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 241.00053ms ago: executing program 7 (id=5146): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x7800, 0x7, 0x8, 0x8001, {{0x6, 0x4, 0x2, 0x2, 0x18, 0x64, 0x0, 0x3, 0x29, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x0, 0x2}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES16=r0, @ANYRES8, @ANYBLOB="ac03d9b1bce459e0eac179f881d647ae862f0267832d7642e24453ffd050e85a4ecfcc006aa7c4f460ea2dcfbf53b7b28d0f263e7e5e960ff3d3bb0b4d04f333d10ba52c356b74931ffc91ae549358abd7f5895fa11d438076f79ed696fb5c25970fb5642bbfae9f49a92d973dd222f42fb646cd65135b2a56b944"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x9}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}]}, 0x3c}}, 0x0) 239.339291ms ago: executing program 9 (id=5147): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14000}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_GET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000008c0)={0x2c, r3, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000090}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) r4 = memfd_secret(0x0) unshare(0xcd79584ebb54295f) timerfd_gettime(r4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000022007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sys_enter\x00', r6}, 0x18) syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xd3283d036ae269b3, 0x8031, 0xffffffffffffffff, 0x99cf0000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x2, 0xfffffffffffffffb}, 0x120, 0x10000, 0x33f8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x77f4}, 0x0, 0x7, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x0, 0x0}) 222.985622ms ago: executing program 7 (id=5148): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) syz_io_uring_setup(0x495, &(0x7f0000000040)={0x0, 0x10079ae, 0x1000, 0x3, 0x8}, &(0x7f0000000340)=0x0, &(0x7f0000000400)=0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r7 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r7, 0x0) r8 = syz_clone(0x1940380, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$peeksig(0x4209, r8, &(0x7f0000000000)={0x0, 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newqdisc={0x4c, 0x24, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xe}, {0xfff2, 0xb}, {0xe, 0xb}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x5, 0x0, 0x25, 0x2, 0x8, 0x8, 0x1}}, {0x6, 0x2, [0x7]}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x20000880) write$selinux_load(r6, 0x0, 0x44f0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f00000003c0)=ANY=[@ANYRES64], &(0x7f0000000500)='syzkaller\x00', 0x5, 0xb7, &(0x7f000000cf3d)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, r7, 0x19, &(0x7f0000000000)={0x4}, 0x8, 0x10, &(0x7f0000000200)={0x2, 0x0, 0x0, 0x40}, 0x10, 0x0, r7, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'geneve0\x00'}}, 0x1e) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b0000000000"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xb, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) connect$pppoe(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x0, {0x0, @remote, 'veth0_to_batadv\x00'}}, 0x1e) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'dummy0\x00', 0x0}) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa49}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r10}, @IFLA_HSR_SLAVE2={0x8, 0x2, r10}]}}}]}, 0x40}}, 0x0) connect$inet(r3, &(0x7f0000000380)={0x2, 0x4e25, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r0, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) 219.213962ms ago: executing program 9 (id=5149): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000300)=ANY=[@ANYRES16=r0], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) mbind(&(0x7f000026f000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000680)=0x7fffffff, 0x3, 0x2) r4 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x140}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r6}, 0x38) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) pivot_root(&(0x7f00000001c0)='.\x00', &(0x7f0000002080)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x50, 0x0, &(0x7f00000001c0)="00001dde73622c5e2fe73c522108002164a9a74b4fefdeec0804bd63a997935f1e140e1e9d2f0c664f139a6147a2bfaa195c94ac772523a49c82aed0ec0f1a24ae4c715cdc21f090411f600f98c72cec", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x50) r8 = inotify_init1(0x0) inotify_add_watch(r8, &(0x7f0000000000)='./file0\x00', 0x40000022) write$binfmt_elf32(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69) close(r4) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 150.483388ms ago: executing program 7 (id=5150): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000180)='timer_start\x00', r3}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000b00)=ANY=[@ANYBLOB="180000000900000000000000ff03000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b700000000000000950000000000000048951fa6687c56823d36dafc2373"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000280)='timer_start\x00', r5}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000940)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, &(0x7f0000000380), &(0x7f00000003c0)=r6}, 0x20) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000005c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@grpid}]}, 0x1, 0x4ff, &(0x7f0000001140)="$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") 99.408492ms ago: executing program 7 (id=5151): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000180)={{0x6, @multicast2, 0x4e22, 0x1, 'lblc\x00', 0x2, 0x9, 0x15}, {@remote, 0x4e24, 0x2004, 0xa71, 0x80, 0x4}}, 0x44) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10) r3 = eventfd(0x0) read$eventfd(r3, &(0x7f0000000240), 0x8) writev(r3, &(0x7f0000000080)=[{&(0x7f0000001100)="02965d1f5ec3de3d", 0x8}, {&(0x7f0000002180)="27a8104ce45cd4d5", 0x8}], 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061114b000000005d7512bc45628d6400"], &(0x7f0000000000)='GPL\x00'}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000080000000000000000000850000007d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r4}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000200)) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xd, 0xa}, {}, {0xe, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40008c8}, 0x20004804) 98.203502ms ago: executing program 9 (id=5152): getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) getsockname$l2tp(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000a80)='kfree\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000003e000701fcf7fffffedbdf25017c00000c0004"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 81.971443ms ago: executing program 9 (id=5153): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) 66.922554ms ago: executing program 9 (id=5154): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x94}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000030a0102000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c0800014000000002080001400000003008000240000000030800014000000012080003"], 0x122}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0xfffffffffffffdee, &(0x7f0000000000)=0x8000000000005) getpid() connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) 0s ago: executing program 9 (id=5155): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff"], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty}, {0x0, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "0b86c107cddd39d10e870794ae120f860174b07efe05336d54f519ebba5a2b26", "5e5992c2209db5127a4a84d3d6e03d081a4118a2bbd22f0ca038289c45b30eca6703476382c29175c40096a9c60c3cce", "6a9f3a451dd7eb4523e02c2a4a00f81073727f3ac9f91e284b975a32", {"8f865412904b133eebafc6eb170fb006", "21144ab13a642475fc21552dce5cda9c"}}}}}}}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file2\x00', 0x404, &(0x7f00000001c0)=ANY=[@ANYRES16=0x0, @ANYRESOCT, @ANYRES8], 0x1, 0x122e, &(0x7f0000002580)="$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") truncate(&(0x7f0000000200)='./file2\x00', 0x40000000007) syz_emit_ethernet(0x66, &(0x7f0000000b80)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x14, 0x300, 0x0, 0x0, 0x6c, 0x0, @private}, {{}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}}}}}}}}, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c"], 0x3c}, 0x1, 0x0, 0x0, 0x4004840}, 0x0) 0s ago: executing program 7 (id=5156): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB="0000000200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000200)='bridge0\x00') kernel console output (not intermixed with test programs): 95 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17794 comm="syz.9.4619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7eff00ecebe9 code=0x7ffc0000 [ 357.441302][ T29] audit: type=1326 audit(1755897084.598:23375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17794 comm="syz.9.4619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff00ecebe9 code=0x7ffc0000 [ 357.465089][ T29] audit: type=1326 audit(1755897084.598:23376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17794 comm="syz.9.4619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff00ecebe9 code=0x7ffc0000 [ 357.641722][T17808] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 357.652204][T17808] SELinux: failed to load policy [ 357.681924][T17813] loop9: detected capacity change from 0 to 1024 [ 357.716370][T17815] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 357.727003][T17815] SELinux: failed to load policy [ 357.738355][T17818] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4628'. [ 357.747382][T17818] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4628'. [ 357.756875][T17818] netlink: 'syz.0.4628': attribute type 18 has an invalid length. [ 357.770339][ T3452] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.770363][T17818] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4628'. [ 357.770395][T17818] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4628'. [ 357.797206][T17818] netlink: 'syz.0.4628': attribute type 18 has an invalid length. [ 357.798322][ T3452] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.839602][ T3452] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.869656][ T3452] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.926798][T17823] netlink: 'syz.7.4630': attribute type 10 has an invalid length. [ 357.968863][T17823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.977637][T12466] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.016240][T17823] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 358.058287][T17823] bond0: entered promiscuous mode [ 358.063463][T17823] bond_slave_0: entered promiscuous mode [ 358.069268][T17823] bond_slave_1: entered promiscuous mode [ 358.075010][T17823] batadv0: entered promiscuous mode [ 358.095469][T17818] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4628'. [ 358.112705][T17818] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4628'. [ 358.171152][T17832] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4633'. [ 358.219997][T17836] sctp: [Deprecated]: syz.0.4635 (pid 17836) Use of struct sctp_assoc_value in delayed_ack socket option. [ 358.219997][T17836] Use struct sctp_sack_info instead [ 358.293962][T17840] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 358.303787][T17840] SELinux: failed to load policy [ 358.307094][T17836] loop0: detected capacity change from 0 to 8192 [ 358.455489][T17857] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 358.465136][T17857] SELinux: failed to load policy [ 358.740262][T17874] FAULT_INJECTION: forcing a failure. [ 358.740262][T17874] name failslab, interval 1, probability 0, space 0, times 0 [ 358.753165][T17874] CPU: 1 UID: 0 PID: 17874 Comm: syz.5.4645 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 358.753235][T17874] Tainted: [W]=WARN [ 358.753286][T17874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 358.753303][T17874] Call Trace: [ 358.753310][T17874] [ 358.753320][T17874] __dump_stack+0x1d/0x30 [ 358.753347][T17874] dump_stack_lvl+0xe8/0x140 [ 358.753372][T17874] dump_stack+0x15/0x1b [ 358.753408][T17874] should_fail_ex+0x265/0x280 [ 358.753438][T17874] should_failslab+0x8c/0xb0 [ 358.753509][T17874] kmem_cache_alloc_noprof+0x50/0x310 [ 358.753555][T17874] ? audit_log_start+0x365/0x6c0 [ 358.753587][T17874] audit_log_start+0x365/0x6c0 [ 358.753623][T17874] audit_seccomp+0x48/0x100 [ 358.753721][T17874] ? __seccomp_filter+0x68c/0x10d0 [ 358.753743][T17874] __seccomp_filter+0x69d/0x10d0 [ 358.753799][T17874] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 358.753835][T17874] ? vfs_write+0x7e8/0x960 [ 358.753862][T17874] ? __rcu_read_unlock+0x4f/0x70 [ 358.753890][T17874] ? __fget_files+0x184/0x1c0 [ 358.753984][T17874] __secure_computing+0x82/0x150 [ 358.754068][T17874] syscall_trace_enter+0xcf/0x1e0 [ 358.754099][T17874] do_syscall_64+0xac/0x200 [ 358.754208][T17874] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 358.754239][T17874] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 358.754272][T17874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.754300][T17874] RIP: 0033:0x7feb2ad2ebe9 [ 358.754327][T17874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.754350][T17874] RSP: 002b:00007feb2978f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 358.754374][T17874] RAX: ffffffffffffffda RBX: 00007feb2af55fa0 RCX: 00007feb2ad2ebe9 [ 358.754387][T17874] RDX: ffffffffffbffff8 RSI: 0000000000000000 RDI: 0000000000000000 [ 358.754399][T17874] RBP: 00007feb2978f090 R08: 0000000000000000 R09: 0000000000000000 [ 358.754413][T17874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 358.754438][T17874] R13: 00007feb2af56038 R14: 00007feb2af55fa0 R15: 00007ffd1257d3c8 [ 358.754533][T17874] [ 359.053927][T17880] loop6: detected capacity change from 0 to 1024 [ 359.084734][T17882] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 359.094474][T17882] SELinux: failed to load policy [ 359.122044][T17885] loop0: detected capacity change from 0 to 2048 [ 359.134896][T17885] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 359.153583][T17884] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 359.247197][T16315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 359.277969][T17892] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 359.287998][T17892] SELinux: failed to load policy [ 359.319235][T17898] loop0: detected capacity change from 0 to 1024 [ 359.468735][T17903] loop7: detected capacity change from 0 to 128 [ 359.480710][T17903] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 359.488631][T17903] FAT-fs (loop7): Filesystem has been set read-only [ 359.496272][T17903] bio_check_eod: 124778 callbacks suppressed [ 359.496292][T17903] syz.7.4654: attempt to access beyond end of device [ 359.496292][T17903] loop7: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 359.516390][T17903] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 359.524422][T17903] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 359.536567][T17903] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 359.544794][T17903] syz.7.4654: attempt to access beyond end of device [ 359.544794][T17903] loop7: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 359.558698][T17904] syz.7.4654: attempt to access beyond end of device [ 359.558698][T17904] loop7: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 359.563967][T17903] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 359.572068][T17904] buffer_io_error: 123454 callbacks suppressed [ 359.572090][T17904] Buffer I/O error on dev loop7, logical block 2065, async page read [ 359.579832][T17903] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 359.652564][T17904] syz.7.4654: attempt to access beyond end of device [ 359.652564][T17904] loop7: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 359.666130][T17904] Buffer I/O error on dev loop7, logical block 2066, async page read [ 359.674509][T17904] syz.7.4654: attempt to access beyond end of device [ 359.674509][T17904] loop7: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 359.687868][T17904] Buffer I/O error on dev loop7, logical block 2067, async page read [ 359.696303][T17904] syz.7.4654: attempt to access beyond end of device [ 359.696303][T17904] loop7: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 359.709587][T17904] Buffer I/O error on dev loop7, logical block 2068, async page read [ 359.717981][T17904] syz.7.4654: attempt to access beyond end of device [ 359.717981][T17904] loop7: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 359.731291][T17904] Buffer I/O error on dev loop7, logical block 2069, async page read [ 359.733824][T17918] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 359.739785][T17904] syz.7.4654: attempt to access beyond end of device [ 359.739785][T17904] loop7: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 359.749986][T17918] SELinux: failed to load policy [ 359.763020][T17904] Buffer I/O error on dev loop7, logical block 2070, async page read [ 359.791363][T17904] syz.7.4654: attempt to access beyond end of device [ 359.791363][T17904] loop7: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 359.804707][T17904] Buffer I/O error on dev loop7, logical block 2071, async page read [ 359.814894][T17904] syz.7.4654: attempt to access beyond end of device [ 359.814894][T17904] loop7: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 359.828233][T17904] Buffer I/O error on dev loop7, logical block 2072, async page read [ 359.836445][T17903] Buffer I/O error on dev loop7, logical block 2065, async page read [ 359.845144][T17903] Buffer I/O error on dev loop7, logical block 2066, async page read [ 359.930633][T17928] loop6: detected capacity change from 0 to 2048 [ 359.976000][T17928] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 360.017376][T17927] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 360.126367][T12466] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 361.176729][T17969] loop7: detected capacity change from 0 to 1024 [ 361.279152][T17973] loop6: detected capacity change from 0 to 164 [ 361.295057][T17976] FAULT_INJECTION: forcing a failure. [ 361.295057][T17976] name failslab, interval 1, probability 0, space 0, times 0 [ 361.307819][T17976] CPU: 1 UID: 0 PID: 17976 Comm: syz.0.4676 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 361.307939][T17976] Tainted: [W]=WARN [ 361.307949][T17976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 361.307966][T17976] Call Trace: [ 361.307974][T17976] [ 361.307986][T17976] __dump_stack+0x1d/0x30 [ 361.308013][T17976] dump_stack_lvl+0xe8/0x140 [ 361.308033][T17976] dump_stack+0x15/0x1b [ 361.308116][T17976] should_fail_ex+0x265/0x280 [ 361.308151][T17976] should_failslab+0x8c/0xb0 [ 361.308179][T17976] kmem_cache_alloc_noprof+0x50/0x310 [ 361.308255][T17976] ? audit_log_start+0x365/0x6c0 [ 361.308350][T17976] audit_log_start+0x365/0x6c0 [ 361.308394][T17976] audit_seccomp+0x48/0x100 [ 361.308426][T17976] ? __seccomp_filter+0x68c/0x10d0 [ 361.308455][T17976] __seccomp_filter+0x69d/0x10d0 [ 361.308554][T17976] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 361.308590][T17976] ? vfs_write+0x7e8/0x960 [ 361.308647][T17976] __secure_computing+0x82/0x150 [ 361.308742][T17976] syscall_trace_enter+0xcf/0x1e0 [ 361.308775][T17976] do_syscall_64+0xac/0x200 [ 361.308810][T17976] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 361.308871][T17976] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 361.308905][T17976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.308930][T17976] RIP: 0033:0x7f9d14a8ebe9 [ 361.308946][T17976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.308999][T17976] RSP: 002b:00007f9d134ef038 EFLAGS: 00000246 ORIG_RAX: 00000000000001c3 [ 361.309024][T17976] RAX: ffffffffffffffda RBX: 00007f9d14cb5fa0 RCX: 00007f9d14a8ebe9 [ 361.309041][T17976] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: ffffffffffffffff [ 361.309057][T17976] RBP: 00007f9d134ef090 R08: 0000000000000000 R09: 0000000000000000 [ 361.309073][T17976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.309086][T17976] R13: 00007f9d14cb6038 R14: 00007f9d14cb5fa0 R15: 00007ffda7e3a138 [ 361.309106][T17976] [ 361.676739][T17993] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 361.686542][T17993] SELinux: failed to load policy [ 361.868205][T18009] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 361.878090][T18009] SELinux: failed to load policy [ 361.961361][T18015] pimreg: entered allmulticast mode [ 361.977876][T18015] pimreg: left allmulticast mode [ 362.218997][ T29] kauditd_printk_skb: 136 callbacks suppressed [ 362.219016][ T29] audit: type=1400 audit(1755897089.568:23509): avc: denied { map_read map_write } for pid=18031 comm="syz.9.4691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 362.266041][ T29] audit: type=1400 audit(1755897089.588:23510): avc: denied { lock } for pid=18031 comm="syz.9.4691" path="socket:[60077]" dev="sockfs" ino=60077 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 362.290207][ T29] audit: type=1326 audit(1755897089.618:23511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18031 comm="syz.9.4691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff00ecebe9 code=0x7ffc0000 [ 362.313831][ T29] audit: type=1326 audit(1755897089.618:23512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18031 comm="syz.9.4691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7eff00ecebe9 code=0x7ffc0000 [ 362.557536][T18027] __nla_validate_parse: 13 callbacks suppressed [ 362.557553][T18027] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4689'. [ 362.577564][ T29] audit: type=1400 audit(1755897089.928:23513): avc: denied { mounton } for pid=18035 comm="syz.9.4693" path="/89" dev="tmpfs" ino=481 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 362.599942][ T29] audit: type=1400 audit(1755897089.928:23514): avc: denied { create } for pid=18035 comm="syz.9.4693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 362.621883][T18041] tipc: Can't bind to reserved service type 2 [ 362.622907][ T29] audit: type=1400 audit(1755897089.928:23515): avc: denied { watch } for pid=18026 comm="syz.5.4689" path="/105/control" dev="tmpfs" ino=568 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 362.650879][ T29] audit: type=1400 audit(1755897089.958:23516): avc: denied { create } for pid=18040 comm="syz.6.4694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 362.670689][ T29] audit: type=1400 audit(1755897089.978:23517): avc: denied { bind } for pid=18040 comm="syz.6.4694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 362.690629][ T29] audit: type=1400 audit(1755897089.978:23518): avc: denied { listen } for pid=18040 comm="syz.6.4694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 362.711542][T18043] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4695'. [ 362.720987][T18043] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4695'. [ 362.730104][T18043] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4695'. [ 362.841782][T18055] loop9: detected capacity change from 0 to 164 [ 362.876135][T18057] wireguard0: entered promiscuous mode [ 362.881676][T18057] wireguard0: entered allmulticast mode [ 362.905476][T18060] pimreg: entered allmulticast mode [ 362.911510][T18060] pimreg: left allmulticast mode [ 363.009453][T18069] loop0: detected capacity change from 0 to 512 [ 363.018247][T18069] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.4698: bg 0: block 393: padding at end of block bitmap is not set [ 363.037120][T18069] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 363.046780][T18069] EXT4-fs (loop0): 2 truncates cleaned up [ 363.056139][T18069] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.095263][T18074] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 363.105180][T18074] SELinux: failed to load policy [ 363.113083][T18072] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4702'. [ 363.122337][T18072] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4702'. [ 363.141831][T18078] sctp: [Deprecated]: syz.7.4704 (pid 18078) Use of struct sctp_assoc_value in delayed_ack socket option. [ 363.141831][T18078] Use struct sctp_sack_info instead [ 363.146391][T18072] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4702'. [ 363.260281][T18078] loop7: detected capacity change from 0 to 8192 [ 363.482291][T18101] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4705'. [ 363.738436][T16315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.951728][T18123] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 363.961933][T18123] SELinux: failed to load policy [ 364.176561][T18132] netlink: 344 bytes leftover after parsing attributes in process `syz.7.4717'. [ 364.189874][T18108] netlink: 56 bytes leftover after parsing attributes in process `syz.9.4711'. [ 364.317919][T18141] loop5: detected capacity change from 0 to 1024 [ 364.337001][T18141] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 364.412187][T16435] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.821823][T18164] loop5: detected capacity change from 0 to 128 [ 364.921396][T18164] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 364.929578][T18164] FAT-fs (loop5): Filesystem has been set read-only [ 364.936337][T18164] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 364.944512][T18164] bio_check_eod: 18128 callbacks suppressed [ 364.944533][T18164] syz.5.4724: attempt to access beyond end of device [ 364.944533][T18164] loop5: rw=2049, sector=2065, nr_sectors = 8 limit=128 [ 365.044272][T18174] pimreg: entered allmulticast mode [ 365.052302][T18174] pimreg: left allmulticast mode [ 365.442949][T18183] netlink: 'syz.0.4733': attribute type 10 has an invalid length. [ 365.496166][T18183] team0: Device hsr_slave_0 failed to register rx_handler [ 366.046419][T18215] loop6: detected capacity change from 0 to 1024 [ 366.128884][T18221] loop5: detected capacity change from 0 to 164 [ 366.228482][T18229] delete_channel: no stack [ 366.252356][T18235] netlink: 'syz.0.4748': attribute type 10 has an invalid length. [ 366.264869][T18235] team0: Device hsr_slave_0 failed to register rx_handler [ 366.281747][T18237] loop9: detected capacity change from 0 to 1024 [ 366.565294][T18263] FAULT_INJECTION: forcing a failure. [ 366.565294][T18263] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 366.578577][T18263] CPU: 1 UID: 0 PID: 18263 Comm: syz.7.4758 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 366.578630][T18263] Tainted: [W]=WARN [ 366.578709][T18263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 366.578725][T18263] Call Trace: [ 366.578734][T18263] [ 366.578744][T18263] __dump_stack+0x1d/0x30 [ 366.578765][T18263] dump_stack_lvl+0xe8/0x140 [ 366.578786][T18263] dump_stack+0x15/0x1b [ 366.578808][T18263] should_fail_ex+0x265/0x280 [ 366.578865][T18263] should_fail+0xb/0x20 [ 366.578882][T18263] should_fail_usercopy+0x1a/0x20 [ 366.578907][T18263] _copy_from_iter+0x390/0xe80 [ 366.578945][T18263] ? __alloc_skb+0x223/0x320 [ 366.579009][T18263] netlink_sendmsg+0x471/0x6b0 [ 366.579042][T18263] ? __pfx_netlink_sendmsg+0x10/0x10 [ 366.579071][T18263] __sock_sendmsg+0x145/0x180 [ 366.579103][T18263] ____sys_sendmsg+0x31e/0x4e0 [ 366.579217][T18263] ___sys_sendmsg+0x17b/0x1d0 [ 366.579270][T18263] __x64_sys_sendmsg+0xd4/0x160 [ 366.579300][T18263] x64_sys_call+0x191e/0x2ff0 [ 366.579329][T18263] do_syscall_64+0xd2/0x200 [ 366.579423][T18263] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 366.579454][T18263] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 366.579593][T18263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.579639][T18263] RIP: 0033:0x7f39b24cebe9 [ 366.579656][T18263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 366.579675][T18263] RSP: 002b:00007f39b0f2f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 366.579693][T18263] RAX: ffffffffffffffda RBX: 00007f39b26f5fa0 RCX: 00007f39b24cebe9 [ 366.579707][T18263] RDX: 0000000000000000 RSI: 00002000000016c0 RDI: 0000000000000003 [ 366.579723][T18263] RBP: 00007f39b0f2f090 R08: 0000000000000000 R09: 0000000000000000 [ 366.579740][T18263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 366.579784][T18263] R13: 00007f39b26f6038 R14: 00007f39b26f5fa0 R15: 00007ffeb6d43528 [ 366.579806][T18263] [ 366.783546][T18262] loop0: detected capacity change from 0 to 128 [ 366.822372][T18262] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 366.830331][T18262] FAT-fs (loop0): Filesystem has been set read-only [ 366.876889][T18269] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 366.886537][T18262] syz.0.4755: attempt to access beyond end of device [ 366.886537][T18262] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 366.898129][T18269] SELinux: failed to load policy [ 366.945569][T18262] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 366.953621][T18262] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 366.988907][T18262] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 367.022312][T18262] syz.0.4755: attempt to access beyond end of device [ 367.022312][T18262] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 367.049070][T18271] syz.0.4755: attempt to access beyond end of device [ 367.049070][T18271] loop0: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 367.054282][T18262] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 367.062530][T18271] buffer_io_error: 18126 callbacks suppressed [ 367.062549][T18271] Buffer I/O error on dev loop0, logical block 2065, async page read [ 367.070382][T18262] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 367.095130][T18271] syz.0.4755: attempt to access beyond end of device [ 367.095130][T18271] loop0: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 367.108485][T18271] Buffer I/O error on dev loop0, logical block 2066, async page read [ 367.134592][T18271] syz.0.4755: attempt to access beyond end of device [ 367.134592][T18271] loop0: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 367.147911][T18271] Buffer I/O error on dev loop0, logical block 2067, async page read [ 367.156645][T18271] syz.0.4755: attempt to access beyond end of device [ 367.156645][T18271] loop0: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 367.170132][T18271] Buffer I/O error on dev loop0, logical block 2068, async page read [ 367.178714][T18271] syz.0.4755: attempt to access beyond end of device [ 367.178714][T18271] loop0: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 367.192147][T18271] Buffer I/O error on dev loop0, logical block 2069, async page read [ 367.200495][T18271] syz.0.4755: attempt to access beyond end of device [ 367.200495][T18271] loop0: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 367.213754][T18271] Buffer I/O error on dev loop0, logical block 2070, async page read [ 367.221869][T18271] syz.0.4755: attempt to access beyond end of device [ 367.221869][T18271] loop0: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 367.235217][T18271] Buffer I/O error on dev loop0, logical block 2071, async page read [ 367.251594][ T3452] bridge_slave_1: left allmulticast mode [ 367.257537][ T3452] bridge_slave_1: left promiscuous mode [ 367.263159][ T29] kauditd_printk_skb: 184 callbacks suppressed [ 367.263176][ T29] audit: type=1400 audit(1755897094.618:23703): avc: denied { tracepoint } for pid=18290 comm="syz.7.4768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 367.263271][ T3452] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.305054][T18271] Buffer I/O error on dev loop0, logical block 2072, async page read [ 367.322255][T18262] Buffer I/O error on dev loop0, logical block 2065, async page read [ 367.335511][T18291] loop7: detected capacity change from 0 to 512 [ 367.342441][ T3452] bridge_slave_0: left allmulticast mode [ 367.348064][T18291] EXT4-fs: Ignoring removed oldalloc option [ 367.348244][ T3452] bridge_slave_0: left promiscuous mode [ 367.356966][T18262] Buffer I/O error on dev loop0, logical block 2066, async page read [ 367.359840][ T3452] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.375645][ T29] audit: type=1400 audit(1755897094.738:23704): avc: denied { write } for pid=18292 comm="syz.9.4769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 367.424825][ T29] audit: type=1400 audit(1755897094.778:23705): avc: denied { connect } for pid=18295 comm="syz.0.4770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 367.444673][ T29] audit: type=1400 audit(1755897094.778:23706): avc: denied { name_connect } for pid=18295 comm="syz.0.4770" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 367.527958][T18301] loop0: detected capacity change from 0 to 128 [ 367.534773][T18301] EXT4-fs: Ignoring removed nobh option [ 367.546496][ T29] audit: type=1400 audit(1755897094.878:23707): avc: denied { write } for pid=18295 comm="syz.0.4770" lport=55181 faddr=::ffff:10.1.1.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 367.684373][ T3452] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 367.693414][ T29] audit: type=1400 audit(1755897094.928:23708): avc: denied { create } for pid=18292 comm="syz.9.4769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 367.697413][T18301] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 367.726995][T18291] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.739900][ T3452] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 367.742156][T18291] ext4 filesystem being mounted at /318/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 367.759556][ T29] audit: type=1400 audit(1755897095.098:23709): avc: denied { mount } for pid=18290 comm="syz.7.4768" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 367.762712][ T3452] bond0 (unregistering): Released all slaves [ 367.786709][T18301] ext4 filesystem being mounted at /107/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 367.800640][ T29] audit: type=1400 audit(1755897095.158:23710): avc: denied { add_name } for pid=18290 comm="syz.7.4768" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 367.801633][T18287] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 367.821442][ T29] audit: type=1400 audit(1755897095.158:23711): avc: denied { create } for pid=18290 comm="syz.7.4768" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 367.830892][T18287] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 367.863019][ T29] audit: type=1400 audit(1755897095.208:23712): avc: denied { write } for pid=18290 comm="syz.7.4768" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 367.886533][T18291] hub 9-0:1.0: USB hub found [ 367.892808][T18291] hub 9-0:1.0: 8 ports detected [ 367.906867][T16315] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 367.972856][ T3452] hsr_slave_0: left promiscuous mode [ 367.992034][ T3452] hsr_slave_1: left promiscuous mode [ 367.998171][ T3452] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.005643][ T3452] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.021761][ T3452] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.029273][ T3452] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 368.068118][T13118] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.079051][ T3452] veth1_macvtap: left promiscuous mode [ 368.084877][ T3452] veth0_macvtap: left promiscuous mode [ 368.092924][ T3452] veth1_vlan: left promiscuous mode [ 368.098211][ T3452] veth0_vlan: left promiscuous mode [ 368.201730][T18318] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 368.214233][T18318] SELinux: failed to load policy [ 368.305293][ T3452] team0 (unregistering): Port device team_slave_1 removed [ 368.334710][ T3452] team0 (unregistering): Port device team_slave_0 removed [ 368.397566][T18326] FAULT_INJECTION: forcing a failure. [ 368.397566][T18326] name failslab, interval 1, probability 0, space 0, times 0 [ 368.410402][T18326] CPU: 1 UID: 0 PID: 18326 Comm: syz.5.4777 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 368.410496][T18326] Tainted: [W]=WARN [ 368.410557][T18326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 368.410570][T18326] Call Trace: [ 368.410577][T18326] [ 368.410587][T18326] __dump_stack+0x1d/0x30 [ 368.410614][T18326] dump_stack_lvl+0xe8/0x140 [ 368.410640][T18326] dump_stack+0x15/0x1b [ 368.410662][T18326] should_fail_ex+0x265/0x280 [ 368.410690][T18326] should_failslab+0x8c/0xb0 [ 368.410790][T18326] kmem_cache_alloc_noprof+0x50/0x310 [ 368.410873][T18326] ? skb_clone+0x151/0x1f0 [ 368.410898][T18326] skb_clone+0x151/0x1f0 [ 368.410935][T18326] __netlink_deliver_tap+0x2c9/0x500 [ 368.410972][T18326] netlink_unicast+0x66b/0x690 [ 368.411063][T18326] netlink_sendmsg+0x58b/0x6b0 [ 368.411096][T18326] ? __pfx_netlink_sendmsg+0x10/0x10 [ 368.411126][T18326] __sock_sendmsg+0x145/0x180 [ 368.411164][T18326] ____sys_sendmsg+0x31e/0x4e0 [ 368.411221][T18326] ___sys_sendmsg+0x17b/0x1d0 [ 368.411265][T18326] __x64_sys_sendmsg+0xd4/0x160 [ 368.411373][T18326] x64_sys_call+0x191e/0x2ff0 [ 368.411454][T18326] do_syscall_64+0xd2/0x200 [ 368.411537][T18326] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 368.411562][T18326] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 368.411630][T18326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.411722][T18326] RIP: 0033:0x7feb2ad2ebe9 [ 368.411742][T18326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 368.411766][T18326] RSP: 002b:00007feb2978f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 368.411866][T18326] RAX: ffffffffffffffda RBX: 00007feb2af55fa0 RCX: 00007feb2ad2ebe9 [ 368.411879][T18326] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000011 [ 368.411891][T18326] RBP: 00007feb2978f090 R08: 0000000000000000 R09: 0000000000000000 [ 368.411904][T18326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 368.411921][T18326] R13: 00007feb2af56038 R14: 00007feb2af55fa0 R15: 00007ffd1257d3c8 [ 368.411949][T18326] [ 368.637883][T18326] team_slave_0: entered promiscuous mode [ 368.643671][T18326] team_slave_1: entered promiscuous mode [ 368.661682][T18326] vlan2: entered promiscuous mode [ 368.666804][T18326] team0: entered promiscuous mode [ 368.733374][T18330] __nla_validate_parse: 19 callbacks suppressed [ 368.733393][T18330] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4780'. [ 368.845688][T18333] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4781'. [ 368.905969][T18333] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4781'. [ 368.915715][T18333] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4781'. [ 368.942355][T18351] netlink: 344 bytes leftover after parsing attributes in process `syz.7.4786'. [ 369.563295][T18368] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 369.573320][T18368] SELinux: failed to load policy [ 369.591051][T18366] loop6: detected capacity change from 0 to 8192 [ 369.709389][T18378] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4794'. [ 369.915256][T18392] loop7: detected capacity change from 0 to 164 [ 369.935010][T18389] loop9: detected capacity change from 0 to 128 [ 369.997558][T18397] loop5: detected capacity change from 0 to 512 [ 370.361216][T18397] EXT4-fs: Ignoring removed oldalloc option [ 370.509503][T18397] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.532151][T18397] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 370.585654][T16435] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.619598][T18407] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4802'. [ 370.765832][T18416] sctp: [Deprecated]: syz.6.4805 (pid 18416) Use of struct sctp_assoc_value in delayed_ack socket option. [ 370.765832][T18416] Use struct sctp_sack_info instead [ 370.834660][T18416] loop6: detected capacity change from 0 to 8192 [ 371.453623][T18433] loop9: detected capacity change from 0 to 512 [ 371.463279][T18433] EXT4-fs: Ignoring removed oldalloc option [ 371.476115][T18433] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 371.490062][T18433] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 371.564146][T18445] sctp: [Deprecated]: syz.6.4813 (pid 18445) Use of struct sctp_assoc_value in delayed_ack socket option. [ 371.564146][T18445] Use struct sctp_sack_info instead [ 371.615252][T18445] loop6: detected capacity change from 0 to 8192 [ 371.622649][T18446] vlan2: entered promiscuous mode [ 371.627795][T18446] team0: entered promiscuous mode [ 371.633050][T18446] team_slave_0: entered promiscuous mode [ 371.639006][T18446] team_slave_1: entered promiscuous mode [ 371.646670][T16192] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.820778][T18468] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18468 comm=syz.9.4816 [ 371.842436][T18469] loop7: detected capacity change from 0 to 512 [ 371.886635][T18469] EXT4-fs (loop7): too many log groups per flexible block group [ 371.894508][T18469] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 371.901567][T18469] EXT4-fs (loop7): mount failed [ 371.992907][T18442] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4812'. [ 372.087055][T18488] sd 0:0:1:0: device reset [ 372.229886][T18493] loop9: detected capacity change from 0 to 128 [ 372.261747][T18493] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 372.269706][T18493] FAT-fs (loop9): Filesystem has been set read-only [ 372.276694][T18493] bio_check_eod: 9 callbacks suppressed [ 372.276708][T18493] syz.9.4824: attempt to access beyond end of device [ 372.276708][T18493] loop9: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 372.296012][T18493] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 372.303922][T18493] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 372.312217][T18493] syz.9.4824: attempt to access beyond end of device [ 372.312217][T18493] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 372.325714][T18493] syz.9.4824: attempt to access beyond end of device [ 372.325714][T18493] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 372.339627][ T2030] bridge_slave_1: left allmulticast mode [ 372.343453][T18493] syz.9.4824: attempt to access beyond end of device [ 372.343453][T18493] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 372.345517][ T2030] bridge_slave_1: left promiscuous mode [ 372.364308][ T2030] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.365732][T18493] syz.9.4824: attempt to access beyond end of device [ 372.365732][T18493] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 372.387208][ T2030] bridge_slave_0: left allmulticast mode [ 372.393180][ T2030] bridge_slave_0: left promiscuous mode [ 372.398938][ T2030] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.402260][T18493] syz.9.4824: attempt to access beyond end of device [ 372.402260][T18493] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 372.419590][T18495] syz.9.4824: attempt to access beyond end of device [ 372.419590][T18495] loop9: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 372.432944][T18495] buffer_io_error: 6 callbacks suppressed [ 372.432965][T18495] Buffer I/O error on dev loop9, logical block 2065, async page read [ 372.447126][T18495] syz.9.4824: attempt to access beyond end of device [ 372.447126][T18495] loop9: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 372.460427][T18495] Buffer I/O error on dev loop9, logical block 2066, async page read [ 372.468736][T18495] syz.9.4824: attempt to access beyond end of device [ 372.468736][T18495] loop9: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 372.469029][ T2030] bridge_slave_1: left allmulticast mode [ 372.482122][T18495] Buffer I/O error on dev loop9, logical block 2067, async page read [ 372.487795][ T2030] bridge_slave_1: left promiscuous mode [ 372.488003][ T2030] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.498967][T18495] syz.9.4824: attempt to access beyond end of device [ 372.498967][T18495] loop9: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 372.522247][T18495] Buffer I/O error on dev loop9, logical block 2068, async page read [ 372.530537][T18495] Buffer I/O error on dev loop9, logical block 2069, async page read [ 372.538731][T18495] Buffer I/O error on dev loop9, logical block 2070, async page read [ 372.538900][ T2030] bridge_slave_0: left allmulticast mode [ 372.546886][T18495] Buffer I/O error on dev loop9, logical block 2071, async page read [ 372.546911][T18495] Buffer I/O error on dev loop9, logical block 2072, async page read [ 372.547066][T18495] Buffer I/O error on dev loop9, logical block 2065, async page read [ 372.552658][ T2030] bridge_slave_0: left promiscuous mode [ 372.560996][T18495] Buffer I/O error on dev loop9, logical block 2066, async page read [ 372.569235][ T2030] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.683292][T18500] hub 9-0:1.0: USB hub found [ 372.698211][T18500] hub 9-0:1.0: 8 ports detected [ 372.996930][ T2030] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 373.033109][ T2030] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 373.051313][ T2030] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 373.079769][T18513] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 373.090431][T18513] SELinux: failed to load policy [ 373.100381][ T2030] bond0 (unregistering): Released all slaves [ 373.186396][ T2030] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 373.199027][ T2030] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 373.213377][T18520] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4830'. [ 373.237835][ T2030] bond0 (unregistering): Released all slaves [ 373.291178][ T2030] tipc: Left network mode [ 373.365922][T18530] loop5: detected capacity change from 0 to 1024 [ 373.386856][ T2030] hsr_slave_0: left promiscuous mode [ 373.387210][T18532] sctp: [Deprecated]: syz.6.4836 (pid 18532) Use of struct sctp_assoc_value in delayed_ack socket option. [ 373.387210][T18532] Use struct sctp_sack_info instead [ 373.408833][ T2030] hsr_slave_1: left promiscuous mode [ 373.486672][T18532] loop6: detected capacity change from 0 to 8192 [ 373.505159][ T2030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.527612][ T2030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.539079][ T2030] hsr_slave_0: left promiscuous mode [ 373.544832][ T2030] hsr_slave_1: left promiscuous mode [ 373.551016][ T2030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.561628][ T2030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.617404][ T2030] team0 (unregistering): Port device team_slave_1 removed [ 373.641872][ T2030] team0 (unregistering): Port device team_slave_0 removed [ 373.782750][ T2030] team0 (unregistering): Port device team_slave_1 removed [ 373.797296][T18551] hub 9-0:1.0: USB hub found [ 373.808045][ T2030] team0 (unregistering): Port device team_slave_0 removed [ 373.814737][T18551] hub 9-0:1.0: 8 ports detected [ 373.820431][ T1724] smc: removing ib device syz! [ 373.926088][T18557] netlink: 344 bytes leftover after parsing attributes in process `syz.6.4842'. [ 374.277098][T18568] FAULT_INJECTION: forcing a failure. [ 374.277098][T18568] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 374.290376][T18568] CPU: 0 UID: 0 PID: 18568 Comm: syz.7.4846 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 374.290417][T18568] Tainted: [W]=WARN [ 374.290426][T18568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 374.290512][T18568] Call Trace: [ 374.290521][T18568] [ 374.290531][T18568] __dump_stack+0x1d/0x30 [ 374.290558][T18568] dump_stack_lvl+0xe8/0x140 [ 374.290583][T18568] dump_stack+0x15/0x1b [ 374.290604][T18568] should_fail_ex+0x265/0x280 [ 374.290636][T18568] should_fail+0xb/0x20 [ 374.290667][T18568] should_fail_usercopy+0x1a/0x20 [ 374.290692][T18568] _copy_to_user+0x20/0xa0 [ 374.290758][T18568] simple_read_from_buffer+0xb5/0x130 [ 374.290783][T18568] proc_fail_nth_read+0x10e/0x150 [ 374.290814][T18568] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 374.290903][T18568] vfs_read+0x1a5/0x770 [ 374.290930][T18568] ? __rcu_read_unlock+0x4f/0x70 [ 374.290988][T18568] ? __fget_files+0x184/0x1c0 [ 374.291019][T18568] ksys_read+0xda/0x1a0 [ 374.291042][T18568] __x64_sys_read+0x40/0x50 [ 374.291069][T18568] x64_sys_call+0x27bc/0x2ff0 [ 374.291159][T18568] do_syscall_64+0xd2/0x200 [ 374.291192][T18568] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 374.291224][T18568] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 374.291311][T18568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.291334][T18568] RIP: 0033:0x7f39b24cd5fc [ 374.291354][T18568] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 374.291441][T18568] RSP: 002b:00007f39b0f2f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 374.291466][T18568] RAX: ffffffffffffffda RBX: 00007f39b26f5fa0 RCX: 00007f39b24cd5fc [ 374.291483][T18568] RDX: 000000000000000f RSI: 00007f39b0f2f0a0 RDI: 0000000000000004 [ 374.291499][T18568] RBP: 00007f39b0f2f090 R08: 0000000000000000 R09: 0000000000000000 [ 374.291515][T18568] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000001 [ 374.291528][T18568] R13: 00007f39b26f6038 R14: 00007f39b26f5fa0 R15: 00007ffeb6d43528 [ 374.291632][T18568] [ 374.590331][T18572] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4847'. [ 374.599404][T18572] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4847'. [ 374.645846][ T2030] IPVS: stop unused estimator thread 0... [ 374.730487][T18579] loop9: detected capacity change from 0 to 164 [ 374.823376][T18582] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 374.846277][T18582] SELinux: failed to load policy [ 374.875490][T18587] sctp: [Deprecated]: syz.6.4853 (pid 18587) Use of struct sctp_assoc_value in delayed_ack socket option. [ 374.875490][T18587] Use struct sctp_sack_info instead [ 374.994965][T18593] loop6: detected capacity change from 0 to 8192 [ 375.101730][T18578] netlink: 56 bytes leftover after parsing attributes in process `syz.7.4851'. [ 375.125122][T18590] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4854'. [ 375.419173][ T29] kauditd_printk_skb: 104 callbacks suppressed [ 375.419194][ T29] audit: type=1400 audit(1755897102.768:23817): avc: denied { ioctl } for pid=18635 comm="syz.6.4866" path="socket:[62197]" dev="sockfs" ino=62197 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 375.539096][T18642] loop0: detected capacity change from 0 to 8192 [ 375.571919][T18643] loop6: detected capacity change from 0 to 128 [ 375.673935][ T29] audit: type=1400 audit(1755897103.008:23818): avc: denied { getopt } for pid=18639 comm="syz.5.4868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 375.690433][T18643] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 375.694844][ T29] audit: type=1400 audit(1755897103.008:23819): avc: denied { mount } for pid=18639 comm="syz.5.4868" name="/" dev="ramfs" ino=62223 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 375.702579][T18643] FAT-fs (loop6): Filesystem has been set read-only [ 375.725078][ T29] audit: type=1400 audit(1755897103.008:23820): avc: denied { ioctl } for pid=18639 comm="syz.5.4868" path="socket:[62224]" dev="sockfs" ino=62224 ioctlcmd=0x9422 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 375.757843][ T29] audit: type=1400 audit(1755897103.008:23821): avc: denied { write } for pid=18639 comm="syz.5.4868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 375.760832][T18643] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 375.785342][T18643] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 375.820354][ T29] audit: type=1326 audit(1755897103.168:23822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18646 comm="syz.5.4870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2ad2ebe9 code=0x7ffc0000 [ 375.857907][T18649] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4871'. [ 375.870948][ T29] audit: type=1326 audit(1755897103.198:23823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18646 comm="syz.5.4870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7feb2ad2ebe9 code=0x7ffc0000 [ 375.894681][ T29] audit: type=1326 audit(1755897103.198:23824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18646 comm="syz.5.4870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2ad2ebe9 code=0x7ffc0000 [ 375.920744][ T29] audit: type=1400 audit(1755897103.268:23825): avc: denied { create } for pid=18648 comm="syz.9.4871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 375.929525][T18649] netlink: 56 bytes leftover after parsing attributes in process `syz.9.4871'. [ 375.965033][ T29] audit: type=1400 audit(1755897103.268:23826): avc: denied { write } for pid=18648 comm="syz.9.4871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 376.107219][T18666] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 376.123170][T18666] SELinux: failed to load policy [ 376.214639][T18673] loop9: detected capacity change from 0 to 164 [ 376.372337][T18683] loop5: detected capacity change from 0 to 128 [ 376.396437][T18689] netlink: 344 bytes leftover after parsing attributes in process `syz.6.4887'. [ 376.450489][T18692] loop7: detected capacity change from 0 to 512 [ 376.457202][T18692] EXT4-fs: Ignoring removed nobh option [ 376.462977][T18683] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 376.470817][T18683] FAT-fs (loop5): Filesystem has been set read-only [ 376.478714][T18683] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 376.486614][T18683] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 376.497148][T18692] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #3: comm syz.7.4886: corrupted inode contents [ 376.517043][T18692] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #3: comm syz.7.4886: mark_inode_dirty error [ 376.538295][T18692] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #3: comm syz.7.4886: corrupted inode contents [ 376.571351][T18700] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4888'. [ 376.598964][T18692] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #3: comm syz.7.4886: mark_inode_dirty error [ 376.691057][T18692] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.4886: Failed to acquire dquot type 0 [ 376.716901][T18692] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.4886: corrupted inode contents [ 376.730869][T18692] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #16: comm syz.7.4886: mark_inode_dirty error [ 376.773130][T18692] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.4886: corrupted inode contents [ 376.786879][T18692] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #16: comm syz.7.4886: mark_inode_dirty error [ 376.859440][T18703] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 376.906281][T18703] SELinux: failed to load policy [ 377.030319][T18692] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.4886: corrupted inode contents [ 377.057615][T18692] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem [ 377.070074][T18692] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.4886: corrupted inode contents [ 377.083220][T18692] EXT4-fs error (device loop7): ext4_truncate:4666: inode #16: comm syz.7.4886: mark_inode_dirty error [ 377.100909][T18692] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem [ 377.112936][T18692] EXT4-fs (loop7): 1 truncate cleaned up [ 377.119027][T18692] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 377.160568][T18692] ext4 filesystem being mounted at /345/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 377.230351][T18717] loop9: detected capacity change from 0 to 164 [ 377.239556][T18692] syz.7.4886 (18692) used greatest stack depth: 9680 bytes left [ 377.286365][T13118] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.310309][T18721] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4896'. [ 377.390454][T18737] sctp: [Deprecated]: syz.9.4902 (pid 18737) Use of struct sctp_assoc_value in delayed_ack socket option. [ 377.390454][T18737] Use struct sctp_sack_info instead [ 377.475882][ T37] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.486456][T18737] loop9: detected capacity change from 0 to 8192 [ 377.681006][ T37] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.921764][ T37] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.062253][ T37] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.089358][T18754] 9pnet_fd: Insufficient options for proto=fd [ 378.146351][T18760] loop7: detected capacity change from 0 to 1024 [ 378.193245][ T37] bridge_slave_1: left allmulticast mode [ 378.199026][ T37] bridge_slave_1: left promiscuous mode [ 378.204766][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.238119][T18738] loop5: detected capacity change from 0 to 32768 [ 378.253112][ T37] bridge_slave_0: left allmulticast mode [ 378.258819][ T37] bridge_slave_0: left promiscuous mode [ 378.264665][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.358106][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 378.368206][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 378.379813][ T37] bond0 (unregistering): Released all slaves [ 378.415817][T18773] loop0: detected capacity change from 0 to 164 [ 378.427718][ T37] hsr_slave_0: left promiscuous mode [ 378.442927][ T37] hsr_slave_1: left promiscuous mode [ 378.453198][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 378.460656][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 378.468568][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 378.476392][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 378.489609][ T37] veth1_macvtap: left promiscuous mode [ 378.495234][ T37] veth0_macvtap: left promiscuous mode [ 378.500910][ T37] veth1_vlan: left promiscuous mode [ 378.515389][ T37] veth0_vlan: left promiscuous mode [ 378.620386][ T37] team0 (unregistering): Port device team_slave_1 removed [ 378.631474][ T37] team0 (unregistering): Port device team_slave_0 removed [ 378.678515][T18787] sd 0:0:1:0: device reset [ 378.729952][T18797] 9pnet_fd: Insufficient options for proto=fd [ 378.771771][T18801] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 378.783547][T18801] SELinux: failed to load policy [ 378.830660][T18811] FAULT_INJECTION: forcing a failure. [ 378.830660][T18811] name failslab, interval 1, probability 0, space 0, times 0 [ 378.843470][T18811] CPU: 1 UID: 0 PID: 18811 Comm: syz.9.4923 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 378.843512][T18811] Tainted: [W]=WARN [ 378.843595][T18811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 378.843612][T18811] Call Trace: [ 378.843621][T18811] [ 378.843686][T18811] __dump_stack+0x1d/0x30 [ 378.843714][T18811] dump_stack_lvl+0xe8/0x140 [ 378.843740][T18811] dump_stack+0x15/0x1b [ 378.843762][T18811] should_fail_ex+0x265/0x280 [ 378.843791][T18811] ? __rdma_create_id+0x49/0x390 [ 378.843832][T18811] should_failslab+0x8c/0xb0 [ 378.843870][T18811] __kmalloc_cache_noprof+0x4c/0x320 [ 378.843908][T18811] ? path_openat+0x1bf8/0x2170 [ 378.843932][T18811] ? __pfx_rds_rdma_cm_event_handler+0x10/0x10 [ 378.843962][T18811] __rdma_create_id+0x49/0x390 [ 378.844029][T18811] ? __rcu_read_unlock+0x4f/0x70 [ 378.844051][T18811] ? __pfx_rds_rdma_cm_event_handler+0x10/0x10 [ 378.844072][T18811] __rdma_create_kernel_id+0x3c/0x80 [ 378.844182][T18811] rds_ib_laddr_check+0x8d/0x300 [ 378.844217][T18811] rds_trans_get_preferred+0x106/0x2a0 [ 378.844255][T18811] rds_bind+0x4a8/0xd30 [ 378.844304][T18811] __sys_bind+0x1ce/0x2a0 [ 378.844481][T18811] __x64_sys_bind+0x3f/0x50 [ 378.844524][T18811] x64_sys_call+0x2b6e/0x2ff0 [ 378.844553][T18811] do_syscall_64+0xd2/0x200 [ 378.844632][T18811] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 378.844658][T18811] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 378.844698][T18811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.844727][T18811] RIP: 0033:0x7eff00ecebe9 [ 378.844788][T18811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 378.844812][T18811] RSP: 002b:00007efeff937038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 378.844838][T18811] RAX: ffffffffffffffda RBX: 00007eff010f5fa0 RCX: 00007eff00ecebe9 [ 378.844855][T18811] RDX: 000000000000002b RSI: 0000200000000040 RDI: 0000000000000005 [ 378.844941][T18811] RBP: 00007efeff937090 R08: 0000000000000000 R09: 0000000000000000 [ 378.844958][T18811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.844975][T18811] R13: 00007eff010f6038 R14: 00007eff010f5fa0 R15: 00007ffce4211028 [ 378.845003][T18811] [ 379.090405][T18816] loop9: detected capacity change from 0 to 164 [ 379.109190][T18819] loop7: detected capacity change from 0 to 1024 [ 379.148103][T18821] sd 0:0:1:0: device reset [ 379.171890][T18823] tmpfs: Bad value for 'mpol' [ 379.227259][T18829] 9pnet_fd: Insufficient options for proto=fd [ 379.267984][ T37] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.278383][ T37] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.328729][ T37] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.339203][ T37] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.383234][T18844] FAULT_INJECTION: forcing a failure. [ 379.383234][T18844] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 379.396407][T18844] CPU: 0 UID: 0 PID: 18844 Comm: syz.9.4934 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 379.396453][T18844] Tainted: [W]=WARN [ 379.396460][T18844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 379.396472][T18844] Call Trace: [ 379.396478][T18844] [ 379.396488][T18844] __dump_stack+0x1d/0x30 [ 379.396513][T18844] dump_stack_lvl+0xe8/0x140 [ 379.396604][T18844] dump_stack+0x15/0x1b [ 379.396681][T18844] should_fail_ex+0x265/0x280 [ 379.396707][T18844] should_fail+0xb/0x20 [ 379.396725][T18844] should_fail_usercopy+0x1a/0x20 [ 379.396749][T18844] _copy_from_user+0x1c/0xb0 [ 379.396850][T18844] btf_new_fd+0x20a/0x790 [ 379.396910][T18844] bpf_btf_load+0x112/0x130 [ 379.397072][T18844] __sys_bpf+0x352/0x7b0 [ 379.397112][T18844] __x64_sys_bpf+0x41/0x50 [ 379.397137][T18844] x64_sys_call+0x2aea/0x2ff0 [ 379.397160][T18844] do_syscall_64+0xd2/0x200 [ 379.397194][T18844] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 379.397231][T18844] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 379.397259][T18844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.397281][T18844] RIP: 0033:0x7eff00ecebe9 [ 379.397297][T18844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 379.397381][T18844] RSP: 002b:00007efeff937038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 379.397401][T18844] RAX: ffffffffffffffda RBX: 00007eff010f5fa0 RCX: 00007eff00ecebe9 [ 379.397414][T18844] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 0000000000000012 [ 379.397428][T18844] RBP: 00007efeff937090 R08: 0000000000000000 R09: 0000000000000000 [ 379.397441][T18844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 379.397454][T18844] R13: 00007eff010f6038 R14: 00007eff010f5fa0 R15: 00007ffce4211028 [ 379.397532][T18844] [ 379.587245][ T37] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.597669][ T37] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.644747][T18853] loop0: detected capacity change from 0 to 1024 [ 379.656016][T18853] __nla_validate_parse: 5 callbacks suppressed [ 379.656081][T18853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4936'. [ 379.679457][ T37] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.689939][ T37] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.708760][T18857] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4937'. [ 379.717772][T18857] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4937'. [ 379.746199][T18859] netlink: 344 bytes leftover after parsing attributes in process `syz.5.4938'. [ 379.772999][ T37] bridge_slave_1: left allmulticast mode [ 379.778709][ T37] bridge_slave_1: left promiscuous mode [ 379.784547][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.792206][ T37] bridge_slave_0: left allmulticast mode [ 379.798069][ T37] bridge_slave_0: left promiscuous mode [ 379.803836][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.826073][T18863] loop6: detected capacity change from 0 to 512 [ 379.844935][T18863] EXT4-fs (loop6): too many log groups per flexible block group [ 379.852944][T18863] EXT4-fs (loop6): failed to initialize mballoc (-12) [ 379.871205][T18863] EXT4-fs (loop6): mount failed [ 379.888021][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 379.898198][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 379.908325][ T37] bond0 (unregistering): Released all slaves [ 379.950482][ T37] hsr_slave_0: left promiscuous mode [ 379.959599][ T37] hsr_slave_1: left promiscuous mode [ 379.961757][T18868] sctp: [Deprecated]: syz.7.4940 (pid 18868) Use of struct sctp_assoc_value in delayed_ack socket option. [ 379.961757][T18868] Use struct sctp_sack_info instead [ 379.969557][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 379.988982][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 380.013772][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 380.021210][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 380.036113][ T37] veth1_macvtap: left promiscuous mode [ 380.049933][T18868] loop7: detected capacity change from 0 to 8192 [ 380.056518][ T37] veth0_macvtap: left promiscuous mode [ 380.062037][ T37] veth1_vlan: left promiscuous mode [ 380.067406][ T37] veth0_vlan: left promiscuous mode [ 380.161560][ T37] team0 (unregistering): Port device team_slave_1 removed [ 380.175128][ T37] team0 (unregistering): Port device team_slave_0 removed [ 380.216777][T18874] sd 0:0:1:0: device reset [ 380.245104][T18876] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 380.255290][T18876] SELinux: failed to load policy [ 380.400177][T18879] netlink: 56 bytes leftover after parsing attributes in process `syz.7.4943'. [ 380.464860][T18882] loop9: detected capacity change from 0 to 512 [ 380.471569][T18882] EXT4-fs: Ignoring removed oldalloc option [ 380.489892][T18882] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.503169][T18882] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 380.509343][T18887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4945'. [ 380.526712][T18882] hub 9-0:1.0: USB hub found [ 380.531520][T18882] hub 9-0:1.0: 8 ports detected [ 380.630157][ T29] kauditd_printk_skb: 110 callbacks suppressed [ 380.630172][ T29] audit: type=1400 audit(1755897107.978:23935): avc: denied { create } for pid=18892 comm="syz.6.4947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 380.687973][ T29] audit: type=1400 audit(1755897107.988:23936): avc: denied { connect } for pid=18892 comm="syz.6.4947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 380.707928][ T29] audit: type=1400 audit(1755897107.998:23937): avc: denied { map } for pid=18892 comm="syz.6.4947" path="socket:[63069]" dev="sockfs" ino=63069 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 380.731472][ T29] audit: type=1400 audit(1755897107.998:23938): avc: denied { read } for pid=18892 comm="syz.6.4947" path="socket:[63069]" dev="sockfs" ino=63069 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 380.755085][ T29] audit: type=1400 audit(1755897107.998:23939): avc: denied { write } for pid=18892 comm="syz.6.4947" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 380.755540][T16192] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.778588][ T29] audit: type=1400 audit(1755897107.998:23940): avc: denied { open } for pid=18892 comm="syz.6.4947" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 380.811829][ T29] audit: type=1326 audit(1755897108.038:23941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18896 comm="syz.5.4948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2ad2ebe9 code=0x7ffc0000 [ 380.835547][ T29] audit: type=1326 audit(1755897108.038:23942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18896 comm="syz.5.4948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2ad2ebe9 code=0x7ffc0000 [ 380.872188][T18906] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4949'. [ 380.881292][T18906] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4949'. [ 380.975223][ T29] audit: type=1326 audit(1755897108.318:23943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18913 comm="syz.9.4953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff00ecebe9 code=0x7ffc0000 [ 380.998874][ T29] audit: type=1326 audit(1755897108.318:23944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18913 comm="syz.9.4953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff00ecebe9 code=0x7ffc0000 [ 381.133491][T18921] loop7: detected capacity change from 0 to 1024 [ 381.149335][T18915] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4952'. [ 381.246524][T18924] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4956'. [ 381.506555][T18926] 9pnet_fd: Insufficient options for proto=fd [ 381.612223][T18930] loop6: detected capacity change from 0 to 1024 [ 381.670525][T18932] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 381.680227][T18932] SELinux: failed to load policy [ 382.066869][T18960] 9pnet_fd: Insufficient options for proto=fd [ 382.096758][T18962] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 382.106620][T18962] SELinux: failed to load policy [ 382.130285][T18964] loop9: detected capacity change from 0 to 128 [ 382.136694][T18965] loop7: detected capacity change from 0 to 512 [ 382.157923][T18965] EXT4-fs error (device loop7): ext4_xattr_inode_iget:442: comm syz.7.4966: error while reading EA inode 32 err=-116 [ 382.183512][T18965] EXT4-fs (loop7): Remounting filesystem read-only [ 382.190161][T18965] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 382.208831][T18964] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 382.216821][T18964] FAT-fs (loop9): Filesystem has been set read-only [ 382.225585][T18965] EXT4-fs (loop7): 1 orphan inode deleted [ 382.231813][T18965] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 382.245648][T18964] bio_check_eod: 47454 callbacks suppressed [ 382.245736][T18964] syz.9.4967: attempt to access beyond end of device [ 382.245736][T18964] loop9: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 382.273570][T18964] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 382.281582][T18964] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 382.290688][T18964] syz.9.4967: attempt to access beyond end of device [ 382.290688][T18964] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 382.305606][T18965] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.315906][T18964] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 382.332998][T18964] syz.9.4967: attempt to access beyond end of device [ 382.332998][T18964] loop9: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 382.346895][T18969] syz.9.4967: attempt to access beyond end of device [ 382.346895][T18969] loop9: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 382.360186][T18969] buffer_io_error: 47198 callbacks suppressed [ 382.360204][T18969] Buffer I/O error on dev loop9, logical block 2065, async page read [ 382.367139][T18964] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 382.382328][T18964] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 382.431134][T18969] syz.9.4967: attempt to access beyond end of device [ 382.431134][T18969] loop9: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 382.444529][T18969] Buffer I/O error on dev loop9, logical block 2066, async page read [ 382.463096][T18969] syz.9.4967: attempt to access beyond end of device [ 382.463096][T18969] loop9: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 382.476537][T18969] Buffer I/O error on dev loop9, logical block 2067, async page read [ 382.484672][T18969] syz.9.4967: attempt to access beyond end of device [ 382.484672][T18969] loop9: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 382.498228][T18969] Buffer I/O error on dev loop9, logical block 2068, async page read [ 382.511119][T18969] syz.9.4967: attempt to access beyond end of device [ 382.511119][T18969] loop9: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 382.524471][T18969] Buffer I/O error on dev loop9, logical block 2069, async page read [ 382.531602][T18973] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 382.539973][T18969] syz.9.4967: attempt to access beyond end of device [ 382.539973][T18969] loop9: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 382.544808][T18973] SELinux: failed to load policy [ 382.556084][T18969] Buffer I/O error on dev loop9, logical block 2070, async page read [ 382.571411][T18969] syz.9.4967: attempt to access beyond end of device [ 382.571411][T18969] loop9: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 382.584960][T18969] Buffer I/O error on dev loop9, logical block 2071, async page read [ 382.595217][ T37] bridge_slave_1: left allmulticast mode [ 382.600924][ T37] bridge_slave_1: left promiscuous mode [ 382.606808][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.615321][T18969] Buffer I/O error on dev loop9, logical block 2072, async page read [ 382.625095][ T37] bridge_slave_0: left allmulticast mode [ 382.629603][T18969] Buffer I/O error on dev loop9, logical block 2065, async page read [ 382.630765][ T37] bridge_slave_0: left promiscuous mode [ 382.630892][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.640319][T18969] Buffer I/O error on dev loop9, logical block 2066, async page read [ 382.690579][T18984] loop5: detected capacity change from 0 to 512 [ 382.707165][T18984] EXT4-fs: Ignoring removed oldalloc option [ 382.724683][T18984] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.737444][T18984] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 382.743301][T18981] hub 8-0:1.0: USB hub found [ 382.766054][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 382.781843][T18984] hub 9-0:1.0: USB hub found [ 382.786902][T18984] hub 9-0:1.0: 8 ports detected [ 382.835509][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 382.851619][T18981] hub 8-0:1.0: 8 ports detected [ 382.860688][ T37] bond0 (unregistering): Released all slaves [ 382.922118][ T37] hsr_slave_0: left promiscuous mode [ 382.929030][T16435] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.050004][ T37] hsr_slave_1: left promiscuous mode [ 383.216949][ T37] team0 (unregistering): Port device team_slave_1 removed [ 383.264499][ T37] team0 (unregistering): Port device team_slave_0 removed [ 383.362556][T19009] pimreg: entered allmulticast mode [ 383.381668][T19009] pimreg: left allmulticast mode [ 383.476929][T19014] loop5: detected capacity change from 0 to 1024 [ 384.065436][T19025] netlink: 'syz.9.4987': attribute type 13 has an invalid length. [ 384.073643][T19025] netlink: 'syz.9.4987': attribute type 14 has an invalid length. [ 384.101005][T19025] 9pnet: p9_errstr2errno: server reported unknown error [ 384.168011][T19032] hub 8-0:1.0: USB hub found [ 384.173019][T19032] hub 8-0:1.0: 8 ports detected [ 384.255844][T19035] hub 8-0:1.0: USB hub found [ 384.261666][T19035] hub 8-0:1.0: 8 ports detected [ 384.270165][T19037] loop9: detected capacity change from 0 to 512 [ 384.282704][T19037] EXT4-fs: Ignoring removed oldalloc option [ 384.326495][T19037] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.344026][T19041] loop0: detected capacity change from 0 to 1024 [ 384.355719][T19037] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 384.364883][T19051] lo speed is unknown, defaulting to 1000 [ 384.374220][T19051] lo speed is unknown, defaulting to 1000 [ 384.387233][T19051] lo speed is unknown, defaulting to 1000 [ 384.404916][T19037] hub 9-0:1.0: USB hub found [ 384.409695][T19037] hub 9-0:1.0: 8 ports detected [ 384.449352][T19051] infiniband syz0: set down [ 384.454082][T19051] infiniband syz0: added lo [ 384.458779][ T3383] lo speed is unknown, defaulting to 1000 [ 384.477042][T16192] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.497861][T19051] RDS/IB: syz0: added [ 384.503520][T19051] smc: adding ib device syz0 with port count 1 [ 384.509903][T19051] smc: ib device syz0 port 1 has pnetid [ 384.515948][ T2957] lo speed is unknown, defaulting to 1000 [ 384.522083][T19051] lo speed is unknown, defaulting to 1000 [ 384.561104][T19051] lo speed is unknown, defaulting to 1000 [ 384.570605][T19071] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 384.601694][T19051] lo speed is unknown, defaulting to 1000 [ 384.639107][T19051] lo speed is unknown, defaulting to 1000 [ 384.666984][T19076] bridge0: port 3(batadv1) entered blocking state [ 384.673789][T19076] bridge0: port 3(batadv1) entered disabled state [ 384.684471][T19076] batadv1: entered allmulticast mode [ 384.690466][T19076] batadv1: entered promiscuous mode [ 384.698284][T19051] lo speed is unknown, defaulting to 1000 [ 384.812739][T19082] __nla_validate_parse: 8 callbacks suppressed [ 384.812762][T19082] netlink: 88 bytes leftover after parsing attributes in process `syz.5.5006'. [ 384.880219][T19087] sd 0:0:1:0: device reset [ 384.894890][T19089] FAULT_INJECTION: forcing a failure. [ 384.894890][T19089] name failslab, interval 1, probability 0, space 0, times 0 [ 384.907847][T19089] CPU: 0 UID: 0 PID: 19089 Comm: syz.6.5009 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 384.907937][T19089] Tainted: [W]=WARN [ 384.907946][T19089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 384.907963][T19089] Call Trace: [ 384.907970][T19089] [ 384.907980][T19089] __dump_stack+0x1d/0x30 [ 384.908020][T19089] dump_stack_lvl+0xe8/0x140 [ 384.908059][T19089] dump_stack+0x15/0x1b [ 384.908081][T19089] should_fail_ex+0x265/0x280 [ 384.908110][T19089] ? rtnl_newlink+0x5c/0x12d0 [ 384.908144][T19089] should_failslab+0x8c/0xb0 [ 384.908221][T19089] __kmalloc_cache_noprof+0x4c/0x320 [ 384.908264][T19089] rtnl_newlink+0x5c/0x12d0 [ 384.908380][T19089] ? xas_load+0x413/0x430 [ 384.908405][T19089] ? try_charge_memcg+0x200/0x9e0 [ 384.908431][T19089] ? __rcu_read_unlock+0x4f/0x70 [ 384.908459][T19089] ? css_rstat_updated+0xb7/0x240 [ 384.908490][T19089] ? __account_obj_stock+0x211/0x350 [ 384.908541][T19089] ? __rcu_read_unlock+0x4f/0x70 [ 384.908608][T19089] ? avc_has_perm_noaudit+0x1b1/0x200 [ 384.908663][T19089] ? cred_has_capability+0x210/0x280 [ 384.908695][T19089] ? selinux_capable+0x31/0x40 [ 384.908731][T19089] ? security_capable+0x83/0x90 [ 384.908763][T19089] ? ns_capable+0x7d/0xb0 [ 384.908789][T19089] ? __pfx_rtnl_newlink+0x10/0x10 [ 384.908876][T19089] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 384.908960][T19089] ? avc_has_perm_noaudit+0x1b1/0x200 [ 384.908998][T19089] netlink_rcv_skb+0x123/0x220 [ 384.909023][T19089] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 384.909091][T19089] rtnetlink_rcv+0x1c/0x30 [ 384.909116][T19089] netlink_unicast+0x5bd/0x690 [ 384.909226][T19089] netlink_sendmsg+0x58b/0x6b0 [ 384.909260][T19089] ? __pfx_netlink_sendmsg+0x10/0x10 [ 384.909290][T19089] __sock_sendmsg+0x145/0x180 [ 384.909387][T19089] ____sys_sendmsg+0x31e/0x4e0 [ 384.909420][T19089] ___sys_sendmsg+0x17b/0x1d0 [ 384.909472][T19089] __x64_sys_sendmsg+0xd4/0x160 [ 384.909509][T19089] x64_sys_call+0x191e/0x2ff0 [ 384.909576][T19089] do_syscall_64+0xd2/0x200 [ 384.909610][T19089] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 384.909640][T19089] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 384.909739][T19089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.909757][T19089] RIP: 0033:0x7fcf508febe9 [ 384.909771][T19089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.909787][T19089] RSP: 002b:00007fcf4f367038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 384.909804][T19089] RAX: ffffffffffffffda RBX: 00007fcf50b25fa0 RCX: 00007fcf508febe9 [ 384.909862][T19089] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 384.909877][T19089] RBP: 00007fcf4f367090 R08: 0000000000000000 R09: 0000000000000000 [ 384.909892][T19089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.909911][T19089] R13: 00007fcf50b26038 R14: 00007fcf50b25fa0 R15: 00007ffd51014478 [ 384.909932][T19089] [ 385.205571][ T2030] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 385.214901][ T2030] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 385.248785][T19096] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 385.265691][T19096] SELinux: failed to load policy [ 385.271059][T19095] netlink: 36 bytes leftover after parsing attributes in process `syz.9.5013'. [ 385.299133][T19101] loop5: detected capacity change from 0 to 512 [ 385.315813][T19103] FAULT_INJECTION: forcing a failure. [ 385.315813][T19103] name failslab, interval 1, probability 0, space 0, times 0 [ 385.328721][T19103] CPU: 0 UID: 0 PID: 19103 Comm: syz.0.5015 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 385.328755][T19103] Tainted: [W]=WARN [ 385.328781][T19103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 385.328804][T19103] Call Trace: [ 385.328812][T19103] [ 385.328823][T19103] __dump_stack+0x1d/0x30 [ 385.328850][T19103] dump_stack_lvl+0xe8/0x140 [ 385.328876][T19103] dump_stack+0x15/0x1b [ 385.328893][T19103] should_fail_ex+0x265/0x280 [ 385.328946][T19103] should_failslab+0x8c/0xb0 [ 385.328977][T19103] kmem_cache_alloc_node_noprof+0x57/0x320 [ 385.329045][T19103] ? __alloc_skb+0x101/0x320 [ 385.329142][T19103] __alloc_skb+0x101/0x320 [ 385.329207][T19103] netlink_alloc_large_skb+0xba/0xf0 [ 385.329265][T19103] netlink_sendmsg+0x3cf/0x6b0 [ 385.329299][T19103] ? __pfx_netlink_sendmsg+0x10/0x10 [ 385.329367][T19103] __sock_sendmsg+0x145/0x180 [ 385.329396][T19103] ____sys_sendmsg+0x31e/0x4e0 [ 385.329426][T19103] ___sys_sendmsg+0x17b/0x1d0 [ 385.329473][T19103] __x64_sys_sendmsg+0xd4/0x160 [ 385.329607][T19103] x64_sys_call+0x191e/0x2ff0 [ 385.329635][T19103] do_syscall_64+0xd2/0x200 [ 385.329669][T19103] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 385.329726][T19103] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 385.329763][T19103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.329810][T19103] RIP: 0033:0x7f9d14a8ebe9 [ 385.329827][T19103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 385.329881][T19103] RSP: 002b:00007f9d134ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 385.329906][T19103] RAX: ffffffffffffffda RBX: 00007f9d14cb5fa0 RCX: 00007f9d14a8ebe9 [ 385.329922][T19103] RDX: 0000000000008000 RSI: 0000200000001b80 RDI: 0000000000000005 [ 385.329936][T19103] RBP: 00007f9d134ef090 R08: 0000000000000000 R09: 0000000000000000 [ 385.329951][T19103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.329966][T19103] R13: 00007f9d14cb6038 R14: 00007f9d14cb5fa0 R15: 00007ffda7e3a138 [ 385.330059][T19103] [ 385.570447][T19109] FAULT_INJECTION: forcing a failure. [ 385.570447][T19109] name failslab, interval 1, probability 0, space 0, times 0 [ 385.583201][T19109] CPU: 1 UID: 0 PID: 19109 Comm: syz.9.5018 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 385.583313][T19109] Tainted: [W]=WARN [ 385.583321][T19109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 385.583339][T19109] Call Trace: [ 385.583346][T19109] [ 385.583355][T19109] __dump_stack+0x1d/0x30 [ 385.583460][T19109] dump_stack_lvl+0xe8/0x140 [ 385.583536][T19109] dump_stack+0x15/0x1b [ 385.583631][T19109] should_fail_ex+0x265/0x280 [ 385.583657][T19109] should_failslab+0x8c/0xb0 [ 385.583754][T19109] kmem_cache_alloc_node_noprof+0x57/0x320 [ 385.583869][T19109] ? __alloc_skb+0x101/0x320 [ 385.583904][T19109] __alloc_skb+0x101/0x320 [ 385.584007][T19109] ? _raw_spin_unlock_bh+0x36/0x40 [ 385.584091][T19109] sock_wmalloc+0x7e/0xc0 [ 385.584118][T19109] pppoe_sendmsg+0x15e/0x3e0 [ 385.584153][T19109] ? __pfx_pppoe_sendmsg+0x10/0x10 [ 385.584264][T19109] __sock_sendmsg+0x145/0x180 [ 385.584300][T19109] ____sys_sendmsg+0x345/0x4e0 [ 385.584334][T19109] ___sys_sendmsg+0x17b/0x1d0 [ 385.584388][T19109] __sys_sendmmsg+0x178/0x300 [ 385.584444][T19109] __x64_sys_sendmmsg+0x57/0x70 [ 385.584469][T19109] x64_sys_call+0x1c4a/0x2ff0 [ 385.584534][T19109] do_syscall_64+0xd2/0x200 [ 385.584562][T19109] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 385.584669][T19109] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 385.584701][T19109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.584728][T19109] RIP: 0033:0x7eff00ecebe9 [ 385.584748][T19109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 385.584770][T19109] RSP: 002b:00007efeff937038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 385.584844][T19109] RAX: ffffffffffffffda RBX: 00007eff010f5fa0 RCX: 00007eff00ecebe9 [ 385.584860][T19109] RDX: 0000000000034000 RSI: 00002000000008c0 RDI: 0000000000000005 [ 385.584876][T19109] RBP: 00007efeff937090 R08: 0000000000000000 R09: 0000000000000000 [ 385.584892][T19109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.584909][T19109] R13: 00007eff010f6038 R14: 00007eff010f5fa0 R15: 00007ffce4211028 [ 385.584937][T19109] [ 385.811734][T19101] EXT4-fs (loop5): too many log groups per flexible block group [ 385.819538][T19101] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 385.827992][T19101] EXT4-fs (loop5): mount failed [ 385.899112][ T29] kauditd_printk_skb: 151 callbacks suppressed [ 385.899127][ T29] audit: type=1326 audit(1755897113.248:24096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19119 comm="syz.0.5021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d14a8ebe9 code=0x7ffc0000 [ 385.939361][T19122] hub 8-0:1.0: USB hub found [ 385.949121][T19122] hub 8-0:1.0: 8 ports detected [ 385.978995][T19120] loop0: detected capacity change from 0 to 512 [ 385.993215][ T29] audit: type=1326 audit(1755897113.288:24097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19119 comm="syz.0.5021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d14a8ebe9 code=0x7ffc0000 [ 386.016986][ T29] audit: type=1326 audit(1755897113.288:24098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19119 comm="syz.0.5021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f9d14a8ebe9 code=0x7ffc0000 [ 386.040792][ T29] audit: type=1326 audit(1755897113.298:24099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19124 comm="syz.0.5021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9d14ac14a5 code=0x7ffc0000 [ 386.064418][ T29] audit: type=1326 audit(1755897113.298:24100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19119 comm="syz.0.5021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d14a8ebe9 code=0x7ffc0000 [ 386.088148][ T29] audit: type=1326 audit(1755897113.308:24101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19119 comm="syz.0.5021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f9d14a8ebe9 code=0x7ffc0000 [ 386.097968][T19120] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 386.111782][ T29] audit: type=1326 audit(1755897113.308:24102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19119 comm="syz.0.5021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d14a8ebe9 code=0x7ffc0000 [ 386.143711][ T29] audit: type=1326 audit(1755897113.308:24103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19119 comm="syz.0.5021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d14a8ebe9 code=0x7ffc0000 [ 386.167344][ T29] audit: type=1326 audit(1755897113.318:24104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19119 comm="syz.0.5021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9d14a8ebe9 code=0x7ffc0000 [ 386.191135][ T29] audit: type=1326 audit(1755897113.318:24105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19119 comm="syz.0.5021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d14a8ebe9 code=0x7ffc0000 [ 386.218414][T19120] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 386.227273][T19120] EXT4-fs error (device loop0): ext4_orphan_get:1392: comm syz.0.5021: inode #15: comm syz.0.5021: iget: illegal inode # [ 386.242643][T19120] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.5021: couldn't read orphan inode 15 (err -117) [ 386.257295][T19120] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 386.311246][T19143] netlink: 344 bytes leftover after parsing attributes in process `syz.9.5027'. [ 386.337758][T16315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.394953][T19150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5029'. [ 386.395779][T19153] sctp: [Deprecated]: syz.7.5030 (pid 19153) Use of struct sctp_assoc_value in delayed_ack socket option. [ 386.395779][T19153] Use struct sctp_sack_info instead [ 386.423709][T19150] netdevsim netdevsim0: Direct firmware load for ./file0/file1 failed with error -2 [ 386.471288][T19159] sd 0:0:1:0: device reset [ 386.512756][T19153] loop7: detected capacity change from 0 to 8192 [ 386.717964][T19180] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5039'. [ 386.727726][T19180] netlink: 312 bytes leftover after parsing attributes in process `syz.7.5039'. [ 386.736868][T19180] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5039'. [ 386.754417][T19182] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5040'. [ 386.769103][T19182] netdevsim netdevsim5: Direct firmware load for ./file0/file1 failed with error -2 [ 386.769866][T19184] loop7: detected capacity change from 0 to 512 [ 386.786093][T19184] EXT4-fs: Ignoring removed oldalloc option [ 386.806158][T19184] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.819585][T19184] ext4 filesystem being mounted at /373/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 386.849020][T19192] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 386.858770][T19192] SELinux: failed to load policy [ 386.873670][T19184] hub 9-0:1.0: USB hub found [ 386.878431][T19184] hub 9-0:1.0: 8 ports detected [ 386.948200][T19197] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5043'. [ 386.994582][T13118] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.004341][T19203] FAULT_INJECTION: forcing a failure. [ 387.004341][T19203] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 387.017466][T19203] CPU: 0 UID: 0 PID: 19203 Comm: syz.5.5046 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 387.017506][T19203] Tainted: [W]=WARN [ 387.017516][T19203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 387.017537][T19203] Call Trace: [ 387.017546][T19203] [ 387.017557][T19203] __dump_stack+0x1d/0x30 [ 387.017584][T19203] dump_stack_lvl+0xe8/0x140 [ 387.017607][T19203] dump_stack+0x15/0x1b [ 387.017624][T19203] should_fail_ex+0x265/0x280 [ 387.017652][T19203] should_fail+0xb/0x20 [ 387.017738][T19203] should_fail_usercopy+0x1a/0x20 [ 387.017818][T19203] _copy_to_user+0x20/0xa0 [ 387.017856][T19203] simple_read_from_buffer+0xb5/0x130 [ 387.017888][T19203] proc_fail_nth_read+0x10e/0x150 [ 387.018016][T19203] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 387.018044][T19203] vfs_read+0x1a5/0x770 [ 387.018127][T19203] ? __rcu_read_unlock+0x4f/0x70 [ 387.018228][T19203] ? __fget_files+0x184/0x1c0 [ 387.018262][T19203] ksys_read+0xda/0x1a0 [ 387.018324][T19203] __x64_sys_read+0x40/0x50 [ 387.018352][T19203] x64_sys_call+0x27bc/0x2ff0 [ 387.018375][T19203] do_syscall_64+0xd2/0x200 [ 387.018404][T19203] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 387.018484][T19203] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 387.018536][T19203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.018579][T19203] RIP: 0033:0x7feb2ad2d5fc [ 387.018600][T19203] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 387.018704][T19203] RSP: 002b:00007feb2978f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 387.018730][T19203] RAX: ffffffffffffffda RBX: 00007feb2af55fa0 RCX: 00007feb2ad2d5fc [ 387.018746][T19203] RDX: 000000000000000f RSI: 00007feb2978f0a0 RDI: 0000000000000004 [ 387.018762][T19203] RBP: 00007feb2978f090 R08: 0000000000000000 R09: 0000000000000000 [ 387.018848][T19203] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 387.018865][T19203] R13: 00007feb2af56038 R14: 00007feb2af55fa0 R15: 00007ffd1257d3c8 [ 387.018892][T19203] [ 387.279650][T19207] lo speed is unknown, defaulting to 1000 [ 387.655099][T19218] pimreg: entered allmulticast mode [ 387.695491][T19218] pimreg: left allmulticast mode [ 387.747254][T19224] netlink: 'syz.0.5053': attribute type 1 has an invalid length. [ 387.759227][T19212] lo speed is unknown, defaulting to 1000 [ 387.803053][T19228] FAULT_INJECTION: forcing a failure. [ 387.803053][T19228] name failslab, interval 1, probability 0, space 0, times 0 [ 387.809158][T19224] 8021q: adding VLAN 0 to HW filter on device bond1 [ 387.815764][T19228] CPU: 1 UID: 0 PID: 19228 Comm: syz.0.5053 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 387.815808][T19228] Tainted: [W]=WARN [ 387.815817][T19228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 387.815838][T19228] Call Trace: [ 387.815847][T19228] [ 387.815858][T19228] __dump_stack+0x1d/0x30 [ 387.815890][T19228] dump_stack_lvl+0xe8/0x140 [ 387.815989][T19228] dump_stack+0x15/0x1b [ 387.816013][T19228] should_fail_ex+0x265/0x280 [ 387.816049][T19228] should_failslab+0x8c/0xb0 [ 387.816088][T19228] kmem_cache_alloc_node_noprof+0x57/0x320 [ 387.816241][T19228] ? __alloc_skb+0x101/0x320 [ 387.816301][T19228] __alloc_skb+0x101/0x320 [ 387.816348][T19228] netlink_alloc_large_skb+0xba/0xf0 [ 387.816427][T19228] netlink_sendmsg+0x3cf/0x6b0 [ 387.816462][T19228] ? __pfx_netlink_sendmsg+0x10/0x10 [ 387.816570][T19228] __sock_sendmsg+0x145/0x180 [ 387.816618][T19228] ____sys_sendmsg+0x31e/0x4e0 [ 387.816657][T19228] ___sys_sendmsg+0x17b/0x1d0 [ 387.816716][T19228] __x64_sys_sendmsg+0xd4/0x160 [ 387.816796][T19228] x64_sys_call+0x191e/0x2ff0 [ 387.816826][T19228] do_syscall_64+0xd2/0x200 [ 387.816864][T19228] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 387.816902][T19228] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 387.816938][T19228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.816970][T19228] RIP: 0033:0x7f9d14a8ebe9 [ 387.816991][T19228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 387.817083][T19228] RSP: 002b:00007f9d134ce038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 387.817110][T19228] RAX: ffffffffffffffda RBX: 00007f9d14cb6090 RCX: 00007f9d14a8ebe9 [ 387.817128][T19228] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 387.817145][T19228] RBP: 00007f9d134ce090 R08: 0000000000000000 R09: 0000000000000000 [ 387.817163][T19228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.817180][T19228] R13: 00007f9d14cb6128 R14: 00007f9d14cb6090 R15: 00007ffda7e3a138 [ 387.817212][T19228] [ 387.828458][T19223] 9pnet: Could not find request transport: fr¬ ¡¸h [ 388.045093][T19231] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5055'. [ 388.148689][T19241] FAULT_INJECTION: forcing a failure. [ 388.148689][T19241] name failslab, interval 1, probability 0, space 0, times 0 [ 388.161462][T19241] CPU: 0 UID: 0 PID: 19241 Comm: syz.5.5059 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 388.161504][T19241] Tainted: [W]=WARN [ 388.161557][T19241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 388.161631][T19241] Call Trace: [ 388.161640][T19241] [ 388.161651][T19241] __dump_stack+0x1d/0x30 [ 388.161673][T19241] dump_stack_lvl+0xe8/0x140 [ 388.161693][T19241] dump_stack+0x15/0x1b [ 388.161710][T19241] should_fail_ex+0x265/0x280 [ 388.161791][T19241] should_failslab+0x8c/0xb0 [ 388.161827][T19241] __kmalloc_noprof+0xa5/0x3e0 [ 388.161864][T19241] ? genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 388.161962][T19241] genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 388.162077][T19241] genl_family_rcv_msg_doit+0x48/0x1b0 [ 388.162115][T19241] ? selinux_capable+0x31/0x40 [ 388.162152][T19241] ? security_capable+0x83/0x90 [ 388.162176][T19241] ? ns_capable+0x7d/0xb0 [ 388.162214][T19241] genl_rcv_msg+0x422/0x460 [ 388.162242][T19241] ? __pfx_ieee802154_add_iface+0x10/0x10 [ 388.162268][T19241] netlink_rcv_skb+0x123/0x220 [ 388.162384][T19241] ? __pfx_genl_rcv_msg+0x10/0x10 [ 388.162475][T19241] genl_rcv+0x28/0x40 [ 388.162509][T19241] netlink_unicast+0x5bd/0x690 [ 388.162586][T19241] netlink_sendmsg+0x58b/0x6b0 [ 388.162616][T19241] ? __pfx_netlink_sendmsg+0x10/0x10 [ 388.162681][T19241] __sock_sendmsg+0x145/0x180 [ 388.162721][T19241] ____sys_sendmsg+0x31e/0x4e0 [ 388.162762][T19241] ___sys_sendmsg+0x17b/0x1d0 [ 388.162821][T19241] __x64_sys_sendmsg+0xd4/0x160 [ 388.162858][T19241] x64_sys_call+0x191e/0x2ff0 [ 388.162886][T19241] do_syscall_64+0xd2/0x200 [ 388.162941][T19241] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 388.163037][T19241] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 388.163158][T19241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.163186][T19241] RIP: 0033:0x7feb2ad2ebe9 [ 388.163206][T19241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 388.163229][T19241] RSP: 002b:00007feb2978f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 388.163276][T19241] RAX: ffffffffffffffda RBX: 00007feb2af55fa0 RCX: 00007feb2ad2ebe9 [ 388.163291][T19241] RDX: 0000000020048000 RSI: 00002000000009c0 RDI: 0000000000000005 [ 388.163307][T19241] RBP: 00007feb2978f090 R08: 0000000000000000 R09: 0000000000000000 [ 388.163323][T19241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.163340][T19241] R13: 00007feb2af56038 R14: 00007feb2af55fa0 R15: 00007ffd1257d3c8 [ 388.163368][T19241] [ 388.451950][T19245] loop6: detected capacity change from 0 to 512 [ 388.475544][T19245] EXT4-fs (loop6): too many log groups per flexible block group [ 388.483429][T19245] EXT4-fs (loop6): failed to initialize mballoc (-12) [ 388.498271][T19245] EXT4-fs (loop6): mount failed [ 388.511917][T19256] FAULT_INJECTION: forcing a failure. [ 388.511917][T19256] name failslab, interval 1, probability 0, space 0, times 0 [ 388.524754][T19256] CPU: 1 UID: 0 PID: 19256 Comm: syz.5.5064 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 388.524871][T19256] Tainted: [W]=WARN [ 388.524880][T19256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 388.524896][T19256] Call Trace: [ 388.524904][T19256] [ 388.524913][T19256] __dump_stack+0x1d/0x30 [ 388.524940][T19256] dump_stack_lvl+0xe8/0x140 [ 388.524975][T19256] dump_stack+0x15/0x1b [ 388.525066][T19256] should_fail_ex+0x265/0x280 [ 388.525093][T19256] should_failslab+0x8c/0xb0 [ 388.525188][T19256] kmem_cache_alloc_noprof+0x50/0x310 [ 388.525223][T19256] ? skb_clone+0x151/0x1f0 [ 388.525264][T19256] skb_clone+0x151/0x1f0 [ 388.525286][T19256] __netlink_deliver_tap+0x2c9/0x500 [ 388.525386][T19256] netlink_unicast+0x66b/0x690 [ 388.525510][T19256] netlink_sendmsg+0x58b/0x6b0 [ 388.525535][T19256] ? __pfx_netlink_sendmsg+0x10/0x10 [ 388.525562][T19256] __sock_sendmsg+0x145/0x180 [ 388.525601][T19256] ____sys_sendmsg+0x31e/0x4e0 [ 388.525716][T19256] ___sys_sendmsg+0x17b/0x1d0 [ 388.525830][T19256] __x64_sys_sendmsg+0xd4/0x160 [ 388.525866][T19256] x64_sys_call+0x191e/0x2ff0 [ 388.525893][T19256] do_syscall_64+0xd2/0x200 [ 388.525989][T19256] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 388.526022][T19256] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 388.526055][T19256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.526079][T19256] RIP: 0033:0x7feb2ad2ebe9 [ 388.526104][T19256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 388.526163][T19256] RSP: 002b:00007feb2978f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 388.526187][T19256] RAX: ffffffffffffffda RBX: 00007feb2af55fa0 RCX: 00007feb2ad2ebe9 [ 388.526274][T19256] RDX: 0000000000000850 RSI: 00002000000002c0 RDI: 0000000000000003 [ 388.526290][T19256] RBP: 00007feb2978f090 R08: 0000000000000000 R09: 0000000000000000 [ 388.526307][T19256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.526323][T19256] R13: 00007feb2af56038 R14: 00007feb2af55fa0 R15: 00007ffd1257d3c8 [ 388.526351][T19256] [ 388.630238][T19261] loop9: detected capacity change from 0 to 128 [ 388.681527][T19265] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 388.767734][T19265] SELinux: failed to load policy [ 388.944013][T19267] lo speed is unknown, defaulting to 1000 [ 389.258167][T19261] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 389.266177][T19261] FAT-fs (loop9): Filesystem has been set read-only [ 389.273528][T19261] bio_check_eod: 15761 callbacks suppressed [ 389.273543][T19261] syz.9.5060: attempt to access beyond end of device [ 389.273543][T19261] loop9: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 389.295572][T19261] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 389.303582][T19261] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 389.313663][T19261] syz.9.5060: attempt to access beyond end of device [ 389.313663][T19261] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 389.328994][T19261] syz.9.5060: attempt to access beyond end of device [ 389.328994][T19261] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 389.346442][T19261] syz.9.5060: attempt to access beyond end of device [ 389.346442][T19261] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 389.360761][T19277] pimreg: entered allmulticast mode [ 389.366387][T19281] syz.9.5060: attempt to access beyond end of device [ 389.366387][T19281] loop9: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 389.379762][T19281] buffer_io_error: 15758 callbacks suppressed [ 389.379777][T19281] Buffer I/O error on dev loop9, logical block 2065, async page read [ 389.399247][T19277] pimreg: left allmulticast mode [ 389.412272][T19281] syz.9.5060: attempt to access beyond end of device [ 389.412272][T19281] loop9: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 389.425661][T19281] Buffer I/O error on dev loop9, logical block 2066, async page read [ 389.440043][T19281] syz.9.5060: attempt to access beyond end of device [ 389.440043][T19281] loop9: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 389.453421][T19281] Buffer I/O error on dev loop9, logical block 2067, async page read [ 389.463937][T19281] syz.9.5060: attempt to access beyond end of device [ 389.463937][T19281] loop9: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 389.477305][T19281] Buffer I/O error on dev loop9, logical block 2068, async page read [ 389.512110][T19287] loop5: detected capacity change from 0 to 512 [ 389.526816][T19287] EXT4-fs: Ignoring removed mblk_io_submit option [ 389.543642][T19281] syz.9.5060: attempt to access beyond end of device [ 389.543642][T19281] loop9: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 389.550737][T19287] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 389.557224][T19281] Buffer I/O error on dev loop9, logical block 2069, async page read [ 389.581016][T19287] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ee018, mo2=0002] [ 389.602036][T19281] syz.9.5060: attempt to access beyond end of device [ 389.602036][T19281] loop9: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 389.615405][T19281] Buffer I/O error on dev loop9, logical block 2070, async page read [ 389.638060][T19287] System zones: 1-12 [ 389.647938][T19281] Buffer I/O error on dev loop9, logical block 2071, async page read [ 389.672585][T19287] EXT4-fs (loop5): 1 truncate cleaned up [ 389.678893][T19290] lo speed is unknown, defaulting to 1000 [ 389.689196][T19287] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.707545][T19296] Invalid ELF header magic: != ELF [ 389.733229][T19281] Buffer I/O error on dev loop9, logical block 2072, async page read [ 389.741556][T19281] Buffer I/O error on dev loop9, logical block 2065, async page read [ 389.749838][T19281] Buffer I/O error on dev loop9, logical block 2066, async page read [ 389.772433][T19287] EXT4-fs warning (device loop5): ext4_group_extend:1862: can't shrink FS - resize aborted [ 389.811903][T19298] FAULT_INJECTION: forcing a failure. [ 389.811903][T19298] name failslab, interval 1, probability 0, space 0, times 0 [ 389.824719][T19298] CPU: 1 UID: 0 PID: 19298 Comm: syz.7.5076 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 389.824814][T19298] Tainted: [W]=WARN [ 389.824822][T19298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 389.824838][T19298] Call Trace: [ 389.824848][T19298] [ 389.824858][T19298] __dump_stack+0x1d/0x30 [ 389.824883][T19298] dump_stack_lvl+0xe8/0x140 [ 389.824909][T19298] dump_stack+0x15/0x1b [ 389.824929][T19298] should_fail_ex+0x265/0x280 [ 389.824984][T19298] should_failslab+0x8c/0xb0 [ 389.825017][T19298] kmem_cache_alloc_node_noprof+0x57/0x320 [ 389.825054][T19298] ? alloc_vmap_area+0x231/0xe50 [ 389.825096][T19298] alloc_vmap_area+0x231/0xe50 [ 389.825156][T19298] ? should_failslab+0x8c/0xb0 [ 389.825189][T19298] ? __kmalloc_cache_node_noprof+0x18a/0x320 [ 389.825290][T19298] __get_vm_area_node+0x173/0x1d0 [ 389.825331][T19298] __vmalloc_node_range_noprof+0x273/0xe00 [ 389.825364][T19298] ? kernel_read_file+0x2c3/0x500 [ 389.825412][T19298] ? avc_has_perm_noaudit+0x1b1/0x200 [ 389.825511][T19298] ? avc_has_perm+0xf7/0x180 [ 389.825544][T19298] ? selinux_kernel_load_from_file+0x1f5/0x230 [ 389.825588][T19298] ? kernel_read_file+0x2c3/0x500 [ 389.825740][T19298] vmalloc_noprof+0x82/0xc0 [ 389.825777][T19298] ? kernel_read_file+0x2c3/0x500 [ 389.825858][T19298] kernel_read_file+0x2c3/0x500 [ 389.825894][T19298] __se_sys_finit_module+0x2d3/0x460 [ 389.826099][T19298] __x64_sys_finit_module+0x3e/0x50 [ 389.826142][T19298] x64_sys_call+0x2a92/0x2ff0 [ 389.826164][T19298] do_syscall_64+0xd2/0x200 [ 389.826290][T19298] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 389.826322][T19298] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 389.826395][T19298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.826417][T19298] RIP: 0033:0x7f39b24cebe9 [ 389.826440][T19298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 389.826464][T19298] RSP: 002b:00007f39b0f2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000139 [ 389.826489][T19298] RAX: ffffffffffffffda RBX: 00007f39b26f5fa0 RCX: 00007f39b24cebe9 [ 389.826506][T19298] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000003 [ 389.826523][T19298] RBP: 00007f39b0f2f090 R08: 0000000000000000 R09: 0000000000000000 [ 389.826539][T19298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 389.826555][T19298] R13: 00007f39b26f6038 R14: 00007f39b26f5fa0 R15: 00007ffeb6d43528 [ 389.826590][T19298] [ 389.826602][T19298] syz.7.5076: vmalloc error: size 136, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0 [ 390.086653][T19298] CPU: 1 UID: 0 PID: 19298 Comm: syz.7.5076 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 390.086696][T19298] Tainted: [W]=WARN [ 390.086703][T19298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 390.086767][T19298] Call Trace: [ 390.086777][T19298] [ 390.086789][T19298] __dump_stack+0x1d/0x30 [ 390.086812][T19298] dump_stack_lvl+0xe8/0x140 [ 390.086832][T19298] dump_stack+0x15/0x1b [ 390.086848][T19298] warn_alloc+0x12b/0x1a0 [ 390.086902][T19298] __vmalloc_node_range_noprof+0x297/0xe00 [ 390.087017][T19298] ? avc_has_perm_noaudit+0x1b1/0x200 [ 390.087049][T19298] ? avc_has_perm+0xf7/0x180 [ 390.087083][T19298] ? selinux_kernel_load_from_file+0x1f5/0x230 [ 390.087113][T19298] ? kernel_read_file+0x2c3/0x500 [ 390.087198][T19298] vmalloc_noprof+0x82/0xc0 [ 390.087237][T19298] ? kernel_read_file+0x2c3/0x500 [ 390.087302][T19298] kernel_read_file+0x2c3/0x500 [ 390.087351][T19298] __se_sys_finit_module+0x2d3/0x460 [ 390.087443][T19298] __x64_sys_finit_module+0x3e/0x50 [ 390.087504][T19298] x64_sys_call+0x2a92/0x2ff0 [ 390.087602][T19298] do_syscall_64+0xd2/0x200 [ 390.087639][T19298] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 390.087671][T19298] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 390.087739][T19298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.087761][T19298] RIP: 0033:0x7f39b24cebe9 [ 390.087776][T19298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 390.087800][T19298] RSP: 002b:00007f39b0f2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000139 [ 390.087835][T19298] RAX: ffffffffffffffda RBX: 00007f39b26f5fa0 RCX: 00007f39b24cebe9 [ 390.087852][T19298] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000003 [ 390.087868][T19298] RBP: 00007f39b0f2f090 R08: 0000000000000000 R09: 0000000000000000 [ 390.087882][T19298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 390.087898][T19298] R13: 00007f39b26f6038 R14: 00007f39b26f5fa0 R15: 00007ffeb6d43528 [ 390.088005][T19298] [ 390.088026][T19298] Mem-Info: [ 390.295334][T19298] active_anon:9635 inactive_anon:46 isolated_anon:0 [ 390.295334][T19298] active_file:19316 inactive_file:2648 isolated_file:0 [ 390.295334][T19298] unevictable:1 dirty:371 writeback:0 [ 390.295334][T19298] slab_reclaimable:3891 slab_unreclaimable:19101 [ 390.295334][T19298] mapped:37568 shmem:3758 pagetables:2958 [ 390.295334][T19298] sec_pagetables:0 bounce:0 [ 390.295334][T19298] kernel_misc_reclaimable:0 [ 390.295334][T19298] free:1870881 free_pcp:11455 free_cma:0 [ 390.307423][T19293] __nla_validate_parse: 1 callbacks suppressed [ 390.307444][T19293] netlink: 56 bytes leftover after parsing attributes in process `syz.6.5074'. [ 390.340420][T19298] Node 0 active_anon:38540kB inactive_anon:184kB active_file:77264kB inactive_file:10592kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:150272kB dirty:1484kB writeback:0kB shmem:15032kB kernel_stack:4448kB pagetables:11832kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 390.340484][T19298] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 390.411884][T19298] lowmem_reserve[]: 0 2883 7862 7862 [ 390.417277][T19298] Node 0 DMA32 free:2949304kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952836kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:0kB free_cma:0kB [ 390.447477][T19298] lowmem_reserve[]: 0 0 4978 4978 [ 390.452610][T19298] Node 0 Normal free:4517816kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:38656kB inactive_anon:184kB active_file:77264kB inactive_file:10592kB unevictable:4kB writepending:1484kB present:5242880kB managed:5098240kB mlocked:4kB bounce:0kB free_pcp:43044kB local_pcp:35276kB free_cma:0kB [ 390.484916][T19298] lowmem_reserve[]: 0 0 0 0 [ 390.489628][T19298] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 390.502446][T19298] Node 0 DMA32: 4*4kB (M) 5*8kB (M) 4*16kB (M) 2*32kB (M) 4*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949304kB [ 390.518873][T19298] Node 0 Normal: 760*4kB (U) 596*8kB (UE) 348*16kB (UME) 322*32kB (UE) 187*64kB (UME) 296*128kB (UM) 446*256kB (UME) 363*512kB (UM) 233*1024kB (UME) 107*2048kB (UME) 900*4096kB (UM) = 4517696kB [ 390.538286][T19298] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 390.547647][T19298] 25769 total pagecache pages [ 390.552521][T19298] 50 pages in swap cache [ 390.556820][T19298] Free swap = 124796kB [ 390.561006][T19298] Total swap = 124996kB [ 390.565208][T19298] 2097051 pages RAM [ 390.569082][T19298] 0 pages HighMem/MovableOnly [ 390.573834][T19298] 80442 pages reserved [ 390.579168][T19300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.587685][T19300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.685209][T19314] lo speed is unknown, defaulting to 1000 [ 390.803843][T19314] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5079'. [ 391.010823][T19329] sctp: [Deprecated]: syz.7.5081 (pid 19329) Use of struct sctp_assoc_value in delayed_ack socket option. [ 391.010823][T19329] Use struct sctp_sack_info instead [ 391.107224][T19330] loop7: detected capacity change from 0 to 8192 [ 391.122660][ T29] kauditd_printk_skb: 256 callbacks suppressed [ 391.122679][ T29] audit: type=1400 audit(1755897118.468:24362): avc: denied { mount } for pid=19328 comm="syz.7.5081" name="/" dev="loop7" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 391.152172][ T29] audit: type=1400 audit(1755897118.508:24363): avc: denied { create } for pid=19328 comm="syz.7.5081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 391.245613][ T29] audit: type=1400 audit(1755897118.588:24364): avc: denied { watch watch_reads } for pid=19328 comm="syz.7.5081" path="/386/file1" dev="loop7" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 391.322456][ T29] audit: type=1400 audit(1755897118.668:24365): avc: denied { unmount } for pid=16192 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 391.354441][T19338] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5083'. [ 391.361831][ T29] audit: type=1400 audit(1755897118.698:24366): avc: denied { write } for pid=19337 comm="syz.9.5083" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 391.386626][ T29] audit: type=1400 audit(1755897118.708:24367): avc: denied { create } for pid=19337 comm="syz.9.5083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 391.407578][ T29] audit: type=1400 audit(1755897118.708:24368): avc: denied { write } for pid=19337 comm="syz.9.5083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 391.475349][T19338] netdevsim netdevsim9: Direct firmware load for ./file0/file1 failed with error -2 [ 391.521971][ T29] audit: type=1400 audit(1755897118.868:24369): avc: denied { create } for pid=19349 comm="syz.9.5086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 391.547213][ T29] audit: type=1400 audit(1755897118.878:24370): avc: denied { ioctl } for pid=19349 comm="syz.9.5086" path="socket:[64792]" dev="sockfs" ino=64792 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 391.614773][T19359] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5090'. [ 391.627137][ T29] audit: type=1400 audit(1755897118.988:24371): avc: denied { execmem } for pid=19358 comm="syz.0.5090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 391.708466][T19368] loop0: detected capacity change from 0 to 1024 [ 391.715616][T19368] EXT4-fs: Ignoring removed orlov option [ 391.725661][T19368] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.829444][T19376] lo speed is unknown, defaulting to 1000 [ 391.935954][T19373] Invalid ELF header magic: != ELF [ 391.947111][T19377] netlink: 56 bytes leftover after parsing attributes in process `syz.6.5095'. [ 392.086936][T16315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.110727][T19381] loop9: detected capacity change from 0 to 128 [ 392.122601][T19383] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5097'. [ 392.167396][T19385] loop0: detected capacity change from 0 to 512 [ 392.178946][T19385] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 392.190204][T19385] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 392.199365][T19385] EXT4-fs error (device loop0): ext4_orphan_get:1392: comm syz.0.5098: inode #15: comm syz.0.5098: iget: illegal inode # [ 392.212445][T19385] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.5098: couldn't read orphan inode 15 (err -117) [ 392.225096][T19385] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 392.245836][T19381] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 392.253757][T19381] FAT-fs (loop9): Filesystem has been set read-only [ 392.261070][T19381] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 392.263643][T16315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.268995][T19381] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 392.434047][T19398] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5103'. [ 392.518610][T16435] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.555160][T19405] sctp: [Deprecated]: syz.5.5106 (pid 19405) Use of struct sctp_assoc_value in delayed_ack socket option. [ 392.555160][T19405] Use struct sctp_sack_info instead [ 392.612159][T19407] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5107'. [ 392.629925][T19407] netdevsim netdevsim0: Direct firmware load for ./file0/file1 failed with error -2 [ 392.734268][T19408] loop5: detected capacity change from 0 to 8192 [ 392.789811][T19414] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5109'. [ 392.870418][T19422] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5113'. [ 392.961848][T19433] loop6: detected capacity change from 0 to 512 [ 392.988129][T19433] EXT4-fs: Ignoring removed mblk_io_submit option [ 393.004336][T19433] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 393.028912][T19436] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 393.038869][T19436] SELinux: failed to load policy [ 393.050790][T19442] lo speed is unknown, defaulting to 1000 [ 393.063527][T19433] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ee018, mo2=0002] [ 393.072908][T19433] System zones: 1-12 [ 393.076685][T19445] loop0: detected capacity change from 0 to 512 [ 393.083660][T19445] EXT4-fs: Ignoring removed oldalloc option [ 393.091027][T19433] EXT4-fs (loop6): 1 truncate cleaned up [ 393.108171][T19445] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.109479][T19433] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.151359][T19433] EXT4-fs warning (device loop6): ext4_group_extend:1862: can't shrink FS - resize aborted [ 393.171801][T19445] ext4 filesystem being mounted at /179/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 393.218771][T19445] hub 9-0:1.0: USB hub found [ 393.223586][T19445] hub 9-0:1.0: 8 ports detected [ 393.262655][T19450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.278830][T19450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.350978][T16315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.512956][T19461] FAULT_INJECTION: forcing a failure. [ 393.512956][T19461] name failslab, interval 1, probability 0, space 0, times 0 [ 393.525735][T19461] CPU: 0 UID: 0 PID: 19461 Comm: syz.5.5121 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 393.525776][T19461] Tainted: [W]=WARN [ 393.525843][T19461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 393.525856][T19461] Call Trace: [ 393.525922][T19461] [ 393.525931][T19461] __dump_stack+0x1d/0x30 [ 393.525954][T19461] dump_stack_lvl+0xe8/0x140 [ 393.525999][T19461] dump_stack+0x15/0x1b [ 393.526016][T19461] should_fail_ex+0x265/0x280 [ 393.526038][T19461] should_failslab+0x8c/0xb0 [ 393.526064][T19461] kmem_cache_alloc_node_noprof+0x57/0x320 [ 393.526116][T19461] ? __alloc_skb+0x101/0x320 [ 393.526151][T19461] __alloc_skb+0x101/0x320 [ 393.526239][T19461] netlink_alloc_large_skb+0xba/0xf0 [ 393.526280][T19461] netlink_sendmsg+0x3cf/0x6b0 [ 393.526354][T19461] ? __pfx_netlink_sendmsg+0x10/0x10 [ 393.526384][T19461] __sock_sendmsg+0x145/0x180 [ 393.526422][T19461] ____sys_sendmsg+0x31e/0x4e0 [ 393.526504][T19461] ___sys_sendmsg+0x17b/0x1d0 [ 393.526550][T19461] __x64_sys_sendmsg+0xd4/0x160 [ 393.526584][T19461] x64_sys_call+0x191e/0x2ff0 [ 393.526612][T19461] do_syscall_64+0xd2/0x200 [ 393.526706][T19461] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 393.526731][T19461] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 393.526836][T19461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.526857][T19461] RIP: 0033:0x7feb2ad2ebe9 [ 393.526873][T19461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 393.526893][T19461] RSP: 002b:00007feb2976e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 393.526974][T19461] RAX: ffffffffffffffda RBX: 00007feb2af56090 RCX: 00007feb2ad2ebe9 [ 393.526996][T19461] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000008 [ 393.527012][T19461] RBP: 00007feb2976e090 R08: 0000000000000000 R09: 0000000000000000 [ 393.527027][T19461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 393.527043][T19461] R13: 00007feb2af56128 R14: 00007feb2af56090 R15: 00007ffd1257d3c8 [ 393.527071][T19461] [ 393.565900][T19462] team0: No ports can be present during mode change [ 393.748098][T19461] team0: Device veth1_vlan failed to register rx_handler [ 393.806992][T19425] syz.9.5114 (19425) used greatest stack depth: 6376 bytes left [ 393.902671][T19470] bridge_slave_0: left allmulticast mode [ 393.908425][T19470] bridge_slave_0: left promiscuous mode [ 393.914223][T19470] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.924722][T19470] bridge_slave_1: left allmulticast mode [ 393.930403][T19470] bridge_slave_1: left promiscuous mode [ 393.936133][T19470] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.946216][T19470] bond0: (slave bond_slave_0): Releasing backup interface [ 393.954455][T19470] bond_slave_0: left promiscuous mode [ 393.962113][T19470] bond0: (slave bond_slave_1): Releasing backup interface [ 393.972378][T19470] bond_slave_1: left promiscuous mode [ 393.983461][T19470] team0: Port device team_slave_0 removed [ 394.008561][T19470] team0: Port device team_slave_1 removed [ 394.017239][T19470] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 394.024794][T19470] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 394.043498][T19470] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 394.050985][T19470] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 394.073596][T19472] team0: Mode changed to "loadbalance" [ 394.087457][T19466] team0: Device veth1_vlan failed to register rx_handler [ 394.127228][T19475] loop9: detected capacity change from 0 to 1024 [ 394.217075][ T12] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.262724][ T12] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.271842][ T12] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.303301][ T12] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.413885][T19491] sd 0:0:1:0: device reset [ 394.486775][T19493] loop9: detected capacity change from 0 to 512 [ 394.495449][T19493] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 394.504947][T19493] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 394.514746][T19493] EXT4-fs error (device loop9): ext4_orphan_get:1392: comm syz.9.5132: inode #15: comm syz.9.5132: iget: illegal inode # [ 394.527869][T19493] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.5132: couldn't read orphan inode 15 (err -117) [ 394.548897][T19493] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 394.597748][T16192] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.846764][T19508] lo speed is unknown, defaulting to 1000 [ 395.018996][T19511] loop9: detected capacity change from 0 to 512 [ 395.042635][T19511] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 395.103509][T19511] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 395.111989][T19511] EXT4-fs error (device loop9): ext4_orphan_get:1392: comm syz.9.5133: inode #15: comm syz.9.5133: iget: illegal inode # [ 395.129198][T19511] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.5133: couldn't read orphan inode 15 (err -117) [ 395.141825][T19511] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 395.185125][T16192] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.358483][T19508] __nla_validate_parse: 5 callbacks suppressed [ 395.358502][T19508] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5136'. [ 395.420884][T19528] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5141'. [ 395.496982][T19539] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5145'. [ 395.576812][T19550] loop7: detected capacity change from 0 to 512 [ 395.617332][T19550] EXT4-fs (loop7): too many log groups per flexible block group [ 395.625167][T19550] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 395.635432][T19550] EXT4-fs (loop7): mount failed [ 395.697638][T19560] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5154'. [ 395.763339][T19564] loop9: detected capacity change from 0 to 8192 [ 395.770983][T19564] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 395.789129][T19564] 8021q: adding VLAN 0 to HW filter on device bond2 [ 395.801337][T19569] ================================================================== [ 395.809463][T19569] BUG: KCSAN: data-race in mas_state_walk / mas_wmb_replace [ 395.816958][T19569] [ 395.819300][T19569] write to 0xffff88812aec7a00 of 8 bytes by task 19567 on cpu 1: [ 395.827032][T19569] mas_wmb_replace+0x20d/0x14a0 [ 395.831912][T19569] mas_wr_store_entry+0x1773/0x2b50 [ 395.837119][T19569] mas_store_prealloc+0x74d/0x9e0 [ 395.842154][T19569] vma_iter_store_new+0x1c5/0x200 [ 395.847229][T19569] vma_complete+0x125/0x580 [ 395.851739][T19569] __split_vma+0x5d9/0x650 [ 395.856201][T19569] vma_modify+0x3f2/0xc80 [ 395.860544][T19569] vma_modify_flags+0x101/0x130 [ 395.865405][T19569] mprotect_fixup+0x2cc/0x570 [ 395.870100][T19569] do_mprotect_pkey+0x6d6/0x980 [ 395.874964][T19569] __x64_sys_mprotect+0x48/0x60 [ 395.879828][T19569] x64_sys_call+0x274e/0x2ff0 [ 395.884523][T19569] do_syscall_64+0xd2/0x200 [ 395.889044][T19569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.894946][T19569] [ 395.897274][T19569] read to 0xffff88812aec7a00 of 8 bytes by task 19569 on cpu 0: [ 395.905273][T19569] mas_state_walk+0x485/0x650 [ 395.909967][T19569] mas_walk+0x60/0x150 [ 395.914046][T19569] lock_vma_under_rcu+0x8d/0x160 [ 395.919003][T19569] do_user_addr_fault+0x233/0x1090 [ 395.924135][T19569] exc_page_fault+0x62/0xa0 [ 395.928650][T19569] asm_exc_page_fault+0x26/0x30 [ 395.933510][T19569] [ 395.935838][T19569] value changed: 0xffff8881555f9181 -> 0xffff88812aec7a00 [ 395.942945][T19569] [ 395.945274][T19569] Reported by Kernel Concurrency Sanitizer on: [ 395.951433][T19569] CPU: 0 UID: 0 PID: 19569 Comm: syz.7.5156 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 395.962822][T19569] Tainted: [W]=WARN [ 395.966635][T19569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 395.976697][T19569] ================================================================== [ 396.000204][T19568] bridge0: port 3(gretap0) entered blocking state [ 396.006737][T19568] bridge0: port 3(gretap0) entered disabled state [ 396.023671][T19568] gretap0: entered allmulticast mode [ 396.030426][T19568] gretap0: entered promiscuous mode [ 396.086277][T12466] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.