last executing test programs: 2m45.021493778s ago: executing program 32 (id=26): mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000380)={0xc, 0x8, 0x144, {&(0x7f0000001140)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x1, @local, 0x100009}, {0xa, 0x4e22, 0xfffffffc, @mcast1}, r0}}, 0x48) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000940)={0xa, 0x4, 0xfa00, {r0}}, 0xc) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x85}], 0x1, 0x40, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r1, &(0x7f00000044c0), 0x4000000000001c0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r3, {0xfffffff7}}, './file0\x00'}) connect$bt_sco(r4, &(0x7f0000000900), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) recvfrom(r2, &(0x7f0000000040)=""/60, 0xdb, 0x40, 0x0, 0x0) 2m43.396317742s ago: executing program 33 (id=42): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x200000000000011b, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x84, '\x00', r0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) rt_sigqueueinfo(0x0, 0x21, &(0x7f0000000180)={0x33, 0x40000020, 0xfffffffb}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000005000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r5}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) perf_event_open(&(0x7f0000000ac0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20120, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x1, 0x7}, 0x1184c, 0x9, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0xfd44) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1841680918ce58514db0ea09565434d1330f718c498d6100"], &(0x7f0000000300)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000400)='pwc_handler_enter\x00', r7, 0x0, 0x2}, 0x18) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) msync(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8, 0x0, 0x5f}, 0x18) socket$nl_route(0x10, 0x3, 0x0) 2m42.735593791s ago: executing program 3 (id=48): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m42.606434352s ago: executing program 3 (id=50): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x2, 0x80805, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x4}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_RATE={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x24048084}, 0x4006) bind$inet6(r0, 0x0, 0x0) socket(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_emit_ethernet(0x72, &(0x7f0000000f00)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60000210003c3a00fe8000000000000000000000000000bbff020000000000000000000000000001"], 0x0) 2m42.1804888s ago: executing program 3 (id=51): openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x101902, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c854) r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) r1 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) request_key(&(0x7f0000000180)='logon\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='\x00', r1) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r7 = syz_open_dev$loop(&(0x7f0000000840), 0x4, 0x2000) ioctl$int_in(r7, 0xfc85, &(0x7f0000000880)=0x7fffffff) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYRES8=r4, @ANYRESDEC=r5, @ANYRES64=r5], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e25, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0xfdff, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @multicast1}}}], 0x20, 0x3f}}], 0x1, 0xc0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000680)={0x3, 0x0}, 0x8) r9 = open(0x0, 0x145142, 0x0) preadv2(r9, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0x1d, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x81}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_idx={0x18, 0x6, 0x5, 0x0, 0x7}, @map_fd={0x18, 0x4, 0x1, 0x0, r2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd57}}, @call={0x85, 0x0, 0x0, 0xba}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='GPL\x00', 0x24000, 0x44, &(0x7f0000000500)=""/68, 0x40f00, 0x2, '\x00', r6, @fallback=0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0xf, 0x9, 0x1}, 0x10, r8, r9, 0x0, &(0x7f00000006c0)=[r2], 0x0, 0x10, 0x55}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) io_uring_setup(0x22e6, &(0x7f0000000100)={0x0, 0xedd, 0x0, 0x2, 0x34d, 0x0, r0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r12, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @multicast1}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x18) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m41.893772405s ago: executing program 3 (id=53): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x17, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000ac0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000004000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x70, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x312808, &(0x7f0000000ac0)={[{@debug}, {@data_err_ignore}, {@data_err_ignore}, {@nobarrier}, {@inlinecrypt}, {@usrquota}, {@data_err_abort}, {@usrjquota}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f0000000c40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x18) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000005c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000080)={r4, 0x1, r3, 0x180}) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000300)={0x0, "1e4e1557a609bff6a596dea0fb0503f22231b15d27fce60137b6c6cbf512f89b431f5dd9b4ae337bbf37b108c1ec26396567359e079aae967f5d8aad34301a48", 0x13}, 0x48, 0xfffffffffffffffc) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b000000ffffff7f000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000004000b702000000000000850000008400000097000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getrlimit(0xc, 0x0) r6 = shmget$private(0x0, 0x400000, 0x20, &(0x7f0000c00000/0x400000)=nil) shmctl$IPC_INFO(r6, 0x3, &(0x7f0000000140)=""/112) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00'}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000007a80)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f00000033c0)=0xf44, 0x12) modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d2d, 0x0, 0x4000, 0x1}, 0x10) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000000000000000400000000000a00000008e6008004006380"], 0x1c}}, 0x0) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 2m41.028794441s ago: executing program 3 (id=60): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000380), &(0x7f00000003c0)='%-010d \x00'}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigqueueinfo(0x0, 0x38, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd29, 0x25dfdaff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {}, {0xd}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x27, 0xe, 0xf, 0x4}]}}]}}]}, 0x44}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="070000000400000008020000d9"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usbip_server_init(0x0) syz_usbip_server_init(0x1) syz_usbip_server_init(0x2) syz_usbip_server_init(0x228f32efe1f2a64d) syz_usbip_server_init(0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r9}, 0x18) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_RATE={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 2m40.831693449s ago: executing program 3 (id=61): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x2a, 0x803, 0x9) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x20006, 0x8, 0x0, 0xd99d}}]}]}}}]}, 0x70}}, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0x36, 0x830, &(0x7f0000000440)={0x11, 0x8100, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) sendmsg$ETHTOOL_MSG_RINGS_SET(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r5, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x40004}, 0x48000) 2m40.770003824s ago: executing program 34 (id=61): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x2a, 0x803, 0x9) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x20006, 0x8, 0x0, 0xd99d}}]}]}}}]}, 0x70}}, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0x36, 0x830, &(0x7f0000000440)={0x11, 0x8100, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) sendmsg$ETHTOOL_MSG_RINGS_SET(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r5, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x40004}, 0x48000) 1m57.200976569s ago: executing program 7 (id=843): r0 = getpgrp(0x0) syz_pidfd_open(r0, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b0000000700000008000000a6ad6a1a05"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdffff"], 0xfc}}, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)={0x5c, 0x12, 0x0, 0x70bd26, 0x25dfdbfc, {0x8, 0x6, 0xa, 0x1, {0x4e24, 0x4e23, [0xfffffff8, 0x3, 0x6], [0x1ff, 0x9, 0x8, 0x9], 0x0, [0x7]}, 0x4, 0xb}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "f102dcf29effae15cd"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114, 0x2000000}, 0xa8) 1m56.935386813s ago: executing program 7 (id=845): r0 = open(&(0x7f0000000340)='./file0\x00', 0x8060, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x3, 0x2, 0x1, 0x9, 0x8}) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000700)=ANY=[@ANYBLOB="f4000000", @ANYRES16=r2, @ANYBLOB="cd3e0000000000000000010000000800020005000000ce00010043ecf8a077"], 0xf4}}, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r4, @ANYRESDEC=r0], 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xf1f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x8001, 0xa9, 0x0, 0x8}]}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = epoll_create1(0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) r11 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r12}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=ANY=[@ANYRES16, @ANYBLOB="8a900e7a81ccfcb5831d78d4c03f2d2200fa7c96df3cdb6e576444116fde0b4bbafc930bccd935e53c1eaaff81ce3d9b2948d96c991c73dab26395de20c74fd2d38c6a6c9002f9768c9da8772c70f30c7e82c31c056996c20557ece6b474d19b7a4ee84d908aa8257a75a2abf467d582570fea71b0ef33e27f6ec914e4d4909f0b42a12ad894b8815fbbab460e92a8f2", @ANYBLOB="010000000000fedbdf25080000001800028014000380100001800400030008000100050000000c00018008000100", @ANYRES32=r10], 0x38}, 0x1, 0x0, 0x0, 0x4000814}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r6, &(0x7f0000000000)={0x2000001c}) dup3(r6, r7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xd, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r13}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r14 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$TIOCMIWAIT(r14, 0x545c, 0x0) (fail_nth: 3) 1m56.922521614s ago: executing program 7 (id=846): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {0x0, 0xff}}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000020000000000000000000000cfc25385039b55b2a2956b93bafdd13e2b148b21663921609c6aee1b47f793671e5d916a5b827421209470c49985b81fa87c03e409fa3a9d70f1f68bc2e4a74df5ae31b15f64bb654e2656b5633e51eb4aa54bb9c3dcd4f958d34e154d9db09566e256aa2538522fa5e3505a6c05b2459ab326f68b05542e3258488607d3e989633648f812ea2793c860f3d01597d953657957bc0da9c2ba035200"/182], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000001640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9ce}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) sendmmsg$inet(r6, &(0x7f0000001480)=[{{&(0x7f0000000100)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r6, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x4, 0x40, 0x3, 0x0, 0x4000000000, 0xd4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x100882, 0x7ff, 0x6, 0x3, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r7, &(0x7f0000000280)='memory.swap.events\x00', 0x0, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) pipe2$9p(0x0, 0x0) lgetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)=@known='system.advise\x00', &(0x7f0000000180)=""/173, 0xad) sendmmsg(r0, &(0x7f000000a200)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="220733d69b", 0x5}, {0x0}], 0x2}}], 0x1, 0x60000800) 1m56.894450857s ago: executing program 7 (id=848): syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8080, &(0x7f0000000b80)=ANY=[@ANYBLOB="636865636b3d7374726963742c757466383d312c757466383d302c757466383d312c6e66732c6572726f72733d72656d6f756e742d726f2c73686f72746e616d653d77696e6e742c00043518f9aad8a4f2c1cdb3e993cf0444d9d2d40bb509d4da042c2c85e3650de97db42c38cafa7a9d7503c3c985486cf7fc80515e9bef7e9e56fb346de370b3eb3ecbc59d343c36bf04efc3d68033308b0014b0c677ae5ef2932cc05f566112668fa4f6844dcf823618a2993da771384e8fc12467a56b33e3b00030dbfd82ea2f8ddbeb1d04bac86815ebe0b9d084d60edf56b15e74589892dce86962f611a4313120b738dddfd38d20b443570197dc795020ecf541601ef9a5618869febf769dd50261849a47e170ba166b97e76a0261d0dc1fb3e2646595f1c8b49057d94f10f7b5e35ead0a38", @ANYRES8=0x0], 0x3, 0x21f, &(0x7f0000000940)="$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") timer_create(0x0, &(0x7f0000000000)={0x0, 0x13, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r0, 0x1, &(0x7f0000000300)={{}, {0x77359400}}, &(0x7f0000000340)) syz_emit_ethernet(0x88, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaa"], 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='\x00', 0x89901) mount_setattr(r1, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x9, 0xd, 0x80000}, 0x20) r2 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, r2) syz_clone3(&(0x7f00000040c0)={0x2200000, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) r3 = socket(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYRES64=r8, @ANYRES16=r7, @ANYRES8=r5, @ANYRES32=r8], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x4, 0x8, 0x3, 0x8084, r1, 0x1, '\x00', r8, 0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0, @value=r1}, 0x50) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x9, 0x9}, &(0x7f0000000180)=0x14) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000002c0)={r9, @in6={{0xa, 0x4e22, 0x715e, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}}}, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000021c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xf}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x8}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r11 = socket$xdp(0x2c, 0x3, 0x0) r12 = socket$inet_smc(0x2b, 0x1, 0x0) r13 = socket(0x2, 0x2, 0x7) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000cc0)=@newtclass={0xdbc, 0x28, 0x100, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0xfff1, 0xffff}, {0x3, 0x23584e3a3ffd167f}, {0xb, 0xe}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0xcb}}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x10}}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0xa}}}, @c_cbq={{0x8}, {0x14, 0x2, [@TCA_CBQ_FOPT={0x10, 0x3, {{0x2, 0xfff3}, 0x1b9c, 0x9}}]}}, @c_atm={{0x8}, {0x14, 0x2, [@TCA_ATM_FD={0x8, 0x1, r11}, @TCA_ATM_FD={0x8, 0x1, r12}]}}, @c_atm={{0x8}, {0xc, 0x2, [@TCA_ATM_FD={0x8, 0x1, r13}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x9}}}, @c_cbq={{0x8}, {0xc60, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x10, 0x40, 0x672b2e54, 0x81, 0x1000, 0x3, 0x0, 0x4, 0xd, 0x5, 0x6, 0x6, 0x3, 0x6, 0x2, 0x3b, 0x3, 0xfffffff7, 0x1, 0x1, 0x4, 0x7, 0x6, 0x0, 0xffff0001, 0x2, 0x3, 0x1ab3, 0x5, 0x9, 0xf, 0x7, 0x7, 0xfffffff7, 0xa, 0xffffffff, 0x8001, 0x4040, 0x0, 0x80000000, 0x4992, 0x2, 0x2, 0x8, 0x0, 0x5, 0x1000, 0xfffffff7, 0x6, 0xc, 0x8, 0x6, 0x1, 0x1a, 0xfff, 0x3, 0x550f4744, 0xf96, 0x578, 0x7ff, 0x40, 0xff000000, 0x1, 0x7, 0xffff8b1f, 0x5, 0x6, 0x9, 0x80, 0x6, 0x6, 0x2, 0xfcd, 0x5, 0xfffffffd, 0x9, 0x8, 0x4, 0x8, 0x3d0e, 0x4, 0x49, 0x100, 0x4, 0x815, 0x5, 0x5, 0x18db, 0xfffffe01, 0x1ffc, 0xd, 0x7, 0x5, 0x0, 0x5, 0x3, 0x18000000, 0x7, 0x3, 0x5, 0x384a, 0xfc55, 0x6000, 0xe23a, 0x6, 0x7fff, 0x7fff, 0xd38e, 0x6, 0x1ff, 0x80000001, 0xc, 0x81, 0x1, 0x7, 0x1000, 0x0, 0xb, 0xd, 0x8, 0x0, 0xa, 0x29a4, 0x4, 0x1, 0xa8, 0x9, 0x30a, 0x0, 0x9, 0x7, 0x4, 0xffffffc0, 0x8, 0x8, 0x10000, 0x4, 0xb8, 0xd8f, 0x6, 0x5, 0x2b91, 0x7, 0xf3d, 0xf0, 0x3ff, 0x3ff, 0x8c, 0x800, 0x9, 0x8, 0x2, 0x9, 0x7, 0x8, 0x2, 0xe7, 0x7fff, 0xffff8001, 0x6, 0x4, 0x10000, 0x81, 0xb1, 0x2, 0x5, 0x3, 0x6, 0xfffffff8, 0xd, 0x8, 0x0, 0xfffffffa, 0x48, 0xed04, 0xaf, 0x10aa, 0x9, 0x9a, 0xfffffffe, 0x1f, 0x4000000, 0x8, 0x0, 0x2, 0xf, 0x4, 0x9, 0x8, 0x80, 0xffffffff, 0x7b, 0x1b9, 0xa, 0x80000001, 0x4, 0x3b5c, 0xfffffff9, 0xa0000000, 0x81, 0x7ff, 0x7fff, 0xd, 0xb1, 0x8, 0x8, 0x52caaed2, 0xd2, 0xfffffff7, 0x4, 0x8, 0x7, 0x3, 0x6, 0x6a, 0x9, 0xfffffffb, 0x5, 0x2, 0x1ff, 0xffff, 0xffffff00, 0x10001, 0x400, 0x10000, 0x6, 0x5, 0x6, 0x1, 0x7afb, 0x140000, 0x8e, 0x1, 0x19, 0x9, 0x7fff, 0x1, 0x4, 0x2, 0x65b0, 0xfffffffb, 0x1, 0x1000, 0x43bb4455, 0x10, 0x5, 0x99, 0x2, 0x10000, 0x2, 0x3e02, 0xffffff80, 0x8, 0x1f, 0x8, 0x6]}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x3, 0x7, 0x0, 0x5, 0x9, 0x3}}, @TCA_CBQ_RTAB={0x404, 0x6, [0xd5, 0xb73, 0x1, 0xe5a5, 0x7, 0x2, 0x40, 0x9, 0x6, 0x2, 0xffffffff, 0x6, 0x4, 0x7, 0x7, 0x3, 0x7, 0x3ff, 0x5, 0x10, 0x4, 0x4113f140, 0x7, 0x3, 0x3f25, 0x6, 0x1, 0x2, 0x3ff, 0xc, 0x80000001, 0x9, 0x7, 0x80000001, 0x8, 0x7, 0x9, 0x9, 0x80, 0x0, 0x9, 0x10000, 0x5d5, 0x1, 0x4, 0x2405, 0x9, 0xa, 0x10001, 0xf65, 0x1, 0xfff, 0x9, 0x7, 0x0, 0xe3df, 0x34800, 0x7f000, 0xec, 0x5, 0x8001, 0xc, 0x7d99, 0x3, 0x7, 0x9, 0x9, 0x2, 0x6, 0x7, 0x3, 0x6e, 0x6a79, 0xc0000000, 0x3, 0x0, 0xcc, 0x5, 0x7fffffff, 0x2, 0x9, 0x7, 0x3, 0x6, 0xf3b, 0x80, 0x0, 0x6, 0x40, 0x800, 0x100, 0x6, 0x9182, 0xfffff2c2, 0x7, 0x40, 0x9, 0xa00, 0xe, 0x8, 0x9b61, 0x5, 0x1, 0x854, 0x8, 0x800, 0x3ff, 0x5, 0x1, 0x0, 0x3ff, 0x4, 0x19c, 0x101, 0x7, 0x4, 0x414, 0x0, 0x9017, 0x8, 0x1ff, 0xffffffff, 0x6, 0x7, 0x800, 0x7, 0x2, 0x3, 0x6, 0x6, 0xa563, 0x7, 0xfffff164, 0x9, 0x9, 0x7fffffff, 0x1000, 0x2, 0x3, 0x1ff, 0x7, 0x101, 0x2, 0xb71384e0, 0x713568eb, 0x8, 0x3, 0xff, 0x4, 0x1, 0x8000, 0x0, 0x3, 0x4, 0x34cc998f, 0x4, 0x1, 0x1ff, 0x7, 0xb9, 0x401, 0xffffff01, 0x2a, 0x9, 0xa, 0x3, 0x8001, 0x4, 0x8001, 0x8, 0xd354, 0x0, 0x2, 0x6, 0x6, 0x997, 0x16, 0xe7, 0x8, 0x4, 0x1, 0xfff, 0x4, 0x10001, 0x3, 0x0, 0x200, 0xfffffffe, 0x5, 0x8, 0x0, 0xff, 0x40, 0x8, 0x3, 0xe, 0x713, 0x80, 0x9, 0x3, 0x8a0b, 0x7, 0x8, 0x7, 0x9c, 0xc91, 0xfffffffa, 0xffffff00, 0x10001, 0x0, 0x77b, 0x6, 0x70000, 0x8000, 0xffff, 0xb, 0x4, 0x0, 0x4, 0x6000000, 0x2, 0x8000, 0xd, 0x7, 0xfffffff9, 0x3, 0x7ff, 0x1, 0xcba, 0x201, 0x3, 0x4, 0x10000, 0xfffffff7, 0x0, 0x1, 0x80000001, 0x5e11, 0x23, 0x9, 0x6, 0x9, 0x2, 0x6, 0x1, 0xfff, 0x396, 0x6, 0x3, 0x9, 0x0, 0xf10, 0x2, 0x5, 0x6, 0x8]}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x10, 0x4}, 0x6, 0x10001}}, @TCA_CBQ_RTAB={0x404, 0x6, [0xfffff801, 0x4, 0x40, 0x228, 0x10001, 0x1, 0x3, 0x10000, 0x2, 0x1, 0x9, 0x9c, 0x1, 0x9d, 0x3, 0x68e86a68, 0x0, 0xa, 0x8, 0x4, 0x40, 0x200, 0x8000, 0xfffffff7, 0x9806, 0x39cd, 0x1, 0xffffffc0, 0xfe, 0xfffffff1, 0x2, 0xa, 0x1, 0x3, 0x5, 0x8, 0x6, 0x81, 0x1f84, 0x1, 0x1, 0x3, 0x4, 0x6, 0x2, 0x35, 0x4, 0x7, 0x5, 0x8000, 0x8, 0x0, 0x0, 0x20000, 0x3, 0x3bc162b4, 0x4, 0x0, 0xfff, 0x92, 0x1, 0xf, 0x2, 0x10000, 0x3, 0x5, 0x46942118, 0x7ce, 0x4, 0x7, 0x9, 0xffffffd5, 0x7, 0x240, 0xa, 0x8000, 0xe32, 0xa, 0xcfd2, 0x9, 0x200, 0x8, 0xdaba, 0x3, 0x1000, 0x1, 0xe, 0xfa5, 0x10000, 0x2, 0x7, 0x7, 0x8, 0x0, 0x400, 0x3, 0x4, 0xc106, 0x8, 0x8, 0x4, 0xfffffff9, 0x7fffffff, 0x7, 0x3, 0x1, 0x762, 0x400, 0x4, 0x3, 0x4, 0xfffff44e, 0x10000, 0x5, 0x5, 0x47c, 0x0, 0x3, 0x7, 0x0, 0x3, 0xf831, 0x9, 0x800, 0xffff7fff, 0x4, 0x8, 0x6, 0x480000, 0x80000001, 0xb, 0x5, 0x5, 0x2, 0xb22e, 0x8, 0x948, 0x7, 0x3ff, 0x1, 0xc00f, 0x3, 0x8, 0x1, 0x400, 0x9, 0x7ff, 0x9, 0x10001, 0x8, 0x1, 0x9b4b, 0x2834234a, 0x9, 0x1, 0x401, 0xff, 0x9, 0x3, 0x0, 0x0, 0x7, 0x2, 0x5, 0xd0, 0x8, 0x4, 0xfff, 0x3, 0x9, 0xffff, 0x9, 0x2, 0x68, 0x10000, 0x5, 0x7, 0xbd33, 0x0, 0x7fffffff, 0x2, 0x0, 0x7, 0x8, 0x6, 0xb, 0x3, 0x2, 0x0, 0x9, 0x8, 0x3ff, 0x1, 0xd, 0xffffffab, 0xc87, 0x1, 0x68, 0x12b2, 0x0, 0x1, 0x5, 0x8001, 0x7fff, 0x3, 0xbc9, 0x19e09805, 0x9, 0x4, 0x1, 0xffff8d22, 0x100, 0x3804fb89, 0x4, 0xffffffff, 0x3f, 0x0, 0x5357, 0x7, 0x6, 0x4, 0x2, 0xd, 0x6, 0x7, 0xe, 0xffff, 0xc980, 0xb, 0xff, 0xaf5, 0x7, 0x648, 0x9, 0x8, 0x1, 0xc27, 0x7fffffff, 0x2eb2e860, 0x7b2, 0x10000, 0x2, 0x0, 0x800, 0x0, 0x8000, 0x9, 0x100, 0x9, 0x6, 0xb48, 0x4, 0xef, 0x7, 0xa06c, 0xffffff80]}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x6, 0x5, 0x5, 0x3, 0x2, 0x200}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x6, 0x0, 0x5d, 0x8, 0x2, 0x8}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x5, 0xf}, 0xff000, 0x4}}]}}, @c_cbq={{0x8}, {0x7c, 0x2, [@TCA_CBQ_FOPT={0x10, 0x3, {{0x4, 0xfff1}, 0x7, 0x2}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x6, 0x0, 0x10, 0x9, 0x8, 0x4}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x1, 0x0, 0xf9, 0x2, 0x3, 0x6}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0xff, 0x8, 0x7, 0x2, 0x1, 0x2}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0xf, 0x1, 0x8, 0xb3, 0xff, 0x3, 0xfffffb6e, 0x5}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0xf9, 0x2, 0xf6, 0x7, 0xfffffff9, 0xe}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x0, 0x4}, 0x8, 0x7}}]}}]}, 0xdbc}, 0x1, 0x0, 0x0, 0x20000000}, 0xc880) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 1m56.750141949s ago: executing program 7 (id=853): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000e0000002000000000000000000000000000000000000000000000000000000000000000300000000020000205e000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000000000000000800000000000000000000000000000700000000000000000000000000000000000000000000000300000000000000070000000000000000000000000000000000000000000000e02700000000000000000000000000002d00000000000000000000000000000084010500ac1414bb000000000000000000000000000000006c00000000000000ac14142c000000000000000000000000000000000000560000000000fdffffff01000000ac141410000000000000000000000000000000003200000000000000fe800000000000000000000000000500023500000000000000000000feffffff00000000ff010000000000000000000000000001000000003c00000002000000ff0200000000000000000000000000010000000001030000000000000000000000000000ff020000000000000000000000000001000004d33c"], 0x23c}, 0x1, 0x0, 0x0, 0x4000014}, 0x4154) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_bp={0x0, 0x1}, 0x419, 0x40000000, 0x0, 0x8, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0xb) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000000)={0x1, 0x1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000f82000/0x1000)=nil, 0x1000, 0x2, 0x13, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x22020600) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r3) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r3, &(0x7f0000000a00)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x20, r4, 0x3b58f1a4c78df49c, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xc, 0x5d}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) unshare(0x2a000600) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r6, 0x0, 0x14, 0x8c, &(0x7f0000000200)="70150b1f041e5553d93dd747bddf426afe60eb6e", &(0x7f0000000240)=""/140, 0x8, 0x0, 0x90, 0xfb, &(0x7f0000000600)="177026c5bf889898b01728676358d258b6a8c61790a2fd1d943ace492e7e4199b6be5caeec87c092c8b0c5635bf54e5a6437bf10a76da4a2e3dadcfbb428a3ba0f8ef664428c1c280f032e98a77cb9bfc607e7dc64d3d47ddda8bd424bdd041afbdab17f2cd9f46c9088d668ca4a6bd87ac8be046543735de1bab0d2adef7ff9defe18ee5797b5640c524ca91a71f866", &(0x7f0000000800)="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", 0x0, 0x0, 0x3}, 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1c917, &(0x7f0000000740)={[{@nodelalloc}, {@noblock_validity}, {@errors_remount}, {@data_err_ignore}, {@debug}, {@resgid={'resgid', 0x3d, 0xee01}}, {@noinit_itable}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0xafb}, 0x32}]}, 0x9b, 0x4ef, &(0x7f0000000a40)="$eJzs3d9rHFsdAPDvTLL9mZoUfagFa7GVpGh3k8a2wYdaRfSpoNZn25hsQsgmG7KbtglFU/wDBBEVBMEnXwT/AEH6J4hQ0HdRUUTbex/6cG/3sruz/ZHuJindZEP284GTOXNmJt9zdpjZPTOHmQD61vmIuBkRL2q12qWIGM7K0yzFZjPV13v29OFMPSVRq93+XxKRNMvqq4299j9PZpsdi4jvfTvih8nbcSvrG4vTpVJxNZsvVJdWCpX1jcsLS9Pzxfni8uTkxLWp61NXp8a70s6hiLjxzX/94qe/+9aNP335/t/v/GfsR0lWHvGqHd3WbHqu8Vm0DEbE6l4E64GBrD25VkGbfQ0AwMHR+p3/hYi4FMMx0Pg1BwAAABwmta8NxUdJRA0AAAA4tNLGGNgkzWfjAIYiTfP55hjez8SJtFSuVL80V15bnm2OlR2JXDq3UCqOZ2OFRyKX1OcnGvlX81e2zE9GxOmI+Pnw8cZ8fqZcmu31xQ8AAADoEye39P8/HG72/wEAAIBDZqTXFQAAAAD2nP4/AAAAHH76/wAAAHCofefWrXqqtd5/PXtvfW2xfO/ybLGymF9am8nPlFdX8vPl8nzjmX1LO/2/Urm88pVYXntQqBYr1UJlfePOUnltuXpn4Y1XYAMAAAD76PTnH/8tiYjNrx5vpLojva4UsC8G32Xlf+5dPYD9N9DrCgA9807f/8Chkut1BYCeSyLiN9ss7zh45897Ux8AAKD7Rj/b/v5/uuO1gc10n6oI7BHX/6B/uf8P/cv9f+hfuRgIHXnob8kOy9///n+t9k4VAgAAum6okZI0n93zH4o0zecjTjVeC5BL5hZKxfGI+FRE/HU4d7Q+P9HYMtmxzwAAAAAAAAAAAAAAAAAAAAAAAAAANNVqSdQAAACAQy0i/XeSvf9rdPji0NbrA0eS58ONaUTc//XtXz6YrlZXJ+rl/39ZXv1VVn6lF1cwAAAAgK1a/fRWPx4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuunZ04czrbSfcf/79YgYaRd/MI41psciFxEnPkhi8LXtkogY6EL8zUcR8Y0ftImf1KsVI1kt2sU/3q34Z9q1f/v4aUSc7EJ86GeP6+efm+2OvzTON6Zbj7+jL7cd7EL8zue/9OX5b6DN8V8vO7XLGGef/KHQMf6jiLOD7c8/rfhJh/PfhV3Gv/v9jY1Oy2q/jRht+/2TvBGrUF1aKVTWNy4vLE3PF+eLy5OTE9emrk9dnRovzC2UitnftjF+9rk/vtiu/Sc6xB/Zof0Xd9n+j588ePrpZjbXLv7Yhfb7/0yH+Gm2/7+Y5evLR1v5zWb+ded+/5dz27V/tkP7d9r/Y7ts/6Xv/uQfu1wVANgHlfWNxelSqbja15n3+jTqP4sORCtkdsrUss5bq+THB6ViBzDTOiae9+bEBAAAdN3bfeDduLt3FQIAAAAAAAAAAAAAAAAAAIA+1J1nhrWeib390/VaNpuTt56FDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQS58EAAD//43V0Tc=") 1m56.086553038s ago: executing program 7 (id=868): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000003f40000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374000000006c000280080001400000000508000140000000090c0002"], 0x140}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1m56.002011536s ago: executing program 35 (id=868): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000003f40000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374000000006c000280080001400000000508000140000000090c0002"], 0x140}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1m49.28825235s ago: executing program 4 (id=996): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r2}, 0x8) r3 = socket(0x10, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x97a3}, 0x18) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000340)={0xa, 0x5, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000a40)="fb", 0xffffff4f}], 0x1) close_range(r3, r4, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r6}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r0, @ANYBLOB="06001500070000000c0016"], 0x38}}, 0x10) 1m49.019742493s ago: executing program 4 (id=999): prctl$PR_SET_NAME(0xf, &(0x7f0000000980)='\xff\x00\x00\x00\x00\x00\x000`\x14\x99\x06\xc0\x7fs\x00\t\x14\x17\xc3\xf5\xc9\v\x85\xe7\x00\x00\x18\x88\x06\x94\x98\xa9\xe7\x1c\x8a\x89\xdc\xcc\xf7L\xbd%\xc3!\x0e\x91S\xb2~8\"\xe2\xed\xbf\x12\x1a\\6p\'p\xef\x1a\n\x99\x12\xe8\'\x1c\x97M\xa5N\xd9\xbeV&\x1c2K?\x95\xd9\"\xbe\x050+\xca\xea\'\xe9)\xfe\xeb\x9c\xb5\xa0F`\xe4D\x10F\x831\xec\\v\xf0\xab_M\b\x03\xc3\n\x89\x01E`\xd35Q2\xecZz\xdc\x065p\x1c\x8f\x9b\x99IGXO\x00\x00\v\xed\xb0\xc5\xd4\xc7,\x1a\xb3}CMOO\x8a\xa8kh\x7f\x05c\xfc\xebb\xc8\xa2\xa9\xbf\xb3\x9b\xafE\xbd\xc5\xdc\xde\xbe_') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x3}, 0x18) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="73686f72746e616d653d6d697865642c666d61736b3d30303030303030303030303030303030303030303036362c696f636861727365743d69736f383835392d312c6572726f72733d636f6e74696e75652c756e695f786c6174653d302c696f636861727365743d61736369692c726f6469722c73686f72746e616d653d6d697865642c756e695f786c6174653d302c757466383d302c757466383d302c756e695f786c6174653d312c64656275672c756e695f786c6174653d312c666d61736b3d30303030303030303030303030303030303030303030332c6e6f63617365aec489af6ba9723d4b17106f6d47b9ade1c253d4e3b08066427cae9f41fd1e1dd25a22ec22ad6e8bf6f67e052de91b544f2f4541f87a0c0b36e8d444150b35c110bda57fe7a9c06ba087cc975447082aaf95213301f3e04b70ea67a8aa0d582ca1a9525dba7116d80f126f782a78428b878fc79c0be9ad98cb6950995e6edba78e5301e8c8e69cc85beceb8b54f84a84787815ef9a18f1fe1c81b4c1830102f7e3236e2533e486ecb46ee53991c5bfe6289a474582b2e57741fd8de78f42097851bee74d4201c7767e0e0f4b34523150639b1291441ad01f2f72ed3679d7bca0e8b4e0689f883196af0d0dfe7344f276c1b4bd333882cf7879248ad423e3f21cd0cae2309519f9d40df23cf05d9c8d8f9d07da771ea1e3bcd8478fb989f770da17f700000000000000"], 0x6, 0x2c0, &(0x7f0000000900)="$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") openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x1, 0x4}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000770000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x10, 0x0, 0x7ffc0002}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x18) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200001, &(0x7f0000000240), 0x1, 0xb9f, &(0x7f0000000c00)="$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") fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=@newlink={0x58, 0x10, 0x403, 0x300, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0xc}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffe}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x58}}, 0x8000) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r9}, 0x18) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r10, 0x400455c8, 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) ioctl$TIOCVHANGUP(r10, 0x5437, 0x100000000000000) r11 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x0, 0x6, 0x30e}, &(0x7f0000000100), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r11, 0xb, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) 1m46.35212531s ago: executing program 4 (id=1058): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000020000000b00000000000000020000000000"], 0x0, 0x1a}, 0x20) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r1, 0x1000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000340)='name', &(0x7f00000000c0)='ccnA\xf6gro.p\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000804}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@RTM_GETNSID={0x1c, 0x5a, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@NETNSA_NSID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r5 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a242) poll(&(0x7f0000000040)=[{r5, 0x1}], 0x1, 0x101) sendmmsg(r4, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000900)="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", 0x1000}, {&(0x7f0000000280)="d0a3328a768128256e389b1e19baf62e70349df9cf579efba833614e9bfe2f41f74dc83771b828111e14f52afdbbf7792ccc2adede8c58a897ca922957d56eec5ee85cd4756c4a8361515e5e23b66f8a9d8af1", 0x53}, {&(0x7f0000000340)="bdb39c67b0d0bbbf51cc19933c17f4cb0c2a3d5befa24387241d6de60fd80faa17ca4a4e69d9d2a482517edfe456c9a4f6a06e92ecfba818c0c40fb5e64fee7b52e8a160260fe41b43b4f57e3f21855f428099bf86ed5984a5d7bfecb09b437313fee0cf844b69f9a9a62cc5af9bb82e39d6629ab45c288b0c20f1f71621da0f77e66205b593be422e9d0cb236ed964c79b9e7173e102bcee906ba539d6f04f9d5d5388041bb2f0bbff12a53b6a786c6fad6d9cdb1d533249bd8", 0xba}], 0x3, &(0x7f0000000500)=[{0x88, 0x111, 0x9, "79622e72448b0cdb2d712da84c538b6c9175d04c5ffc8c7185602764332f59aa0363a4dd0091b8c1a9a5faea8ec2170c78bdf2670d0105bb7ae6ac90b942a16f3c38f940f848fbe9dac1390dadfeb8fae81ae16f1326c1e48714c389f44ef244b34898d798abd7d8780e77e176a040981ed9d0"}, {0x20, 0x102, 0x1ff, "95a6290db5a33ae26f"}], 0xa8}}, {{&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000640)="0edbb55a2188090a2a0d4c98aec6cd04db569565780c98cc7f12176838d7c8d1ff709f35a605cf46257d1242a735b9d28da12980a5fe4613056134911b27ef3bbf34758d537689423f355c81", 0x4c}], 0x1, &(0x7f0000001900)=[{0xf8, 0x6, 0x6, "bf7d47fb0da06b52dbffcb415a9c1d98eb0303f80daf8e072c7dbaceec5b0b4adae5c7e70c555c287a7682e6c99967442786da0d7676448f3d94a37e6bdd1cef7dde8e2a2a2ab282cbaa7438d0df71d6f3104fe6f6920e2388a8ab2df9f235e219e1cc4ed2029c09ee86af456b71807376b525037f7042a1a0394b0e2df60635a52128332f3d534d060f6f8b24b673faab66e3ca693fa2933f78f5bf80dac1bedcdd142fe39cde7957c47ce8a39919ef53d837abe15788b5e8ad59dc7307e9ee81d7f18f4f355ff1d7fead253d1b4db2ce0092ba207829f80f54bb785afa4e864703728528cf"}, {0xd8, 0x116, 0x6, "a1a5a7a51907bebf0b9e6f36faa34ff2daed8abb5b3f859b40b5249ec9fa1ca708998dbee270a520e59941f9df664e548582507db2f4c7cd18574ba3d5a6aea9b9dedf9dbd45d69ee3aa8241d8f3ec1eebae4dd5e34f44f56571b83f57dc638546f504069e2653e675505de7b2320ee31a7e1d2b1367bfb66fdb3418be6ec28241166d3dd43229003d1de05a49ce165e74086ee6ad256a2c2f63505887eae86e43a726e4ad16eae40648b1dfc75db0b4f3f361cda42a79b0403d30efa89abc31d1029ff8"}, {0x100, 0x88, 0x6, "32f087feb01024f0ce6a2c88eef2fb4cd895aa6983cd923ddc4cabf298c60e46b1f4dbdbb636f503e8e62d7d097ba6dcc038cf6abcd107b283fa4d3f80d9575d39fc5135bdb4df65169a7465c0f74004cd5c3f739b51895f1bdb30a52e303696792fbf70d26487b36f16c01b4046c9258ccc66c8298536848168f798fd4aeae9ac10dd4afa078cf8040b1370fdf8cb1a32217a6d3229bfca33d18ef61ac164e8c223038ef111a709782ee64092b784cfcbf9e71d772adba26feb3329aa2073cab89c6809fd7a93305aa477bf04a9f3b1123de44e15e45df1b5a8c0d3e2bb35a3da664dd1d1510f6098b58e7b"}], 0x2d0}}, {{&(0x7f00000006c0)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000001c00)="de7cd6129e5171fa53024dee1eeb22321d5fa8a6ac022f8066916fa377971be802827db6d39db20be68be25c1b7dbc7c81415c5abfa51f769896275f223c8955679a9c16e399a06de62cdbbfc9282373704c8dd488e19f0c681bfe48ce4133fe29f34f333002ea86e851f2d9ddca6b4c8448472f512af2ddb0ab7e6b7b949b4118abd3cfd94d5254b0ddfd62a5be7a081dad4eb584f0130e4bb70faa82a7f89b1b0d0c0f05298e6945657387b295e3bb8190cabd904dd3814d2a5ec8283a711ed223517b379a291fa26f87437fcc7fc72273727b48a6babf69ce3e4ef901dc9ce0", 0xe1}, {&(0x7f0000001d00)="3223f934a1e71a19791339989928205b51d86f7762470d06ec6234b4cd1c4d22e16eecc01e69bcdd8c042999a461beec7fdc25a424543f6bce7835f1487bd3b11493b055eb93c1d3f4d01e05d170c524ddb74ac9f5ca922b0dfa45192c35344fbc8c4a4aef48d7658f12e52412986c9fb5db5099cd4e9a807589c40fa561d48c8499058fdbd3478736c03c80d7bf9db9b7fe95286235fce572a4d9b2fe782422e58820f5c597d9fc74f63a7802507a3e8cab5505d8aa2a3ce37e16d74219fe837339d07925e62c756a7ae7fc69774c80aa56b2ed84209618b5e2cc7934b04f3b8ff4d487f163ea79086f03", 0xeb}, {&(0x7f0000001e00)="8a19a5bdd1aea10a662040c9b768743351bd754f33b3c474e2ae4cf2ccf7ce024b6c1e5ce3c367737511333a77225abc2bae4c637f79ef912d4e98a4e6037fc7046b990b498f2f0a9de588ad78f45240c9c7e9f96f56fec8cbfe6f776ce703866022c6f9f0a20a935394b5b005c1df37be97f62ec6aa61ab590dad8eba7f4cd0f9772914ebfd97f1a0c3d0baf4c4a1e8ab0bf126d5a39b1b3cb96c98bce1", 0x9e}, {&(0x7f0000000740)="818eb4196c214b", 0x7}, {&(0x7f0000000780)="51a83e02547670566a097bb3459117632e205af35ad3e3c805feb88bedf6fc", 0x1f}, {&(0x7f0000001ec0)="a2129f665dd72c193b31b369f36406f28724cfed876512453895242efbb69e7911f0b8ab7d8295dc9b3f76fa74e3212f50c27bdfa16681d1853370ce650da4b11c427f6e6466f712828b9e6d", 0x4c}], 0x6, &(0x7f0000001fc0)=[{0x90, 0x11, 0x7, "6bd31e6555448ee704db115095acc52829dafa27a617f5f8b3257abcfc20e4cca34d5955880ac3b927d0423c06c32bebfeb64d1db207759b67c4bc126ea4b8d9253c17c5ff4b144cb702719246c02d928924adcca7ef489fea0093106f66a628f16fb14670e142889b9af2dbe515d40a6754cf2dc8fa5398255fd42ae717ca"}, {0x70, 0x102, 0x1, "42ff1b143f0904ffe21e6b8f3d577aafc8795328a133ff4546709e12a9474d9028aa8f70124fee006252860f1e225f3b7f3f1b3828c5e689cc34df7d291697e8f95b71206ba2200bddab65bbf31f50d08e71637b17be3fd03b5b6c18bc"}, {0xa8, 0x118, 0x2, "1d0d6c425c481cb36cbdbdfa0fbbfceb2cb6da508af59213ed14465c0e7d038465984989e03d41f85f505bbca6479a4949c0f3b00a729129a8026009b0d0a7d62f8ec762c58ca16e58b2e9e8f9d871ccf665d68ee66970eacfb8813262a2587d4e07eb64b8cc43e34e026e90ee29849405ff36e0061f11a35b16afe073eedf95ba1fbd49ea57e5c24fa0058ce72fa50414053a57db41"}], 0x1a8}}], 0x3, 0x4004001) close_range(r0, 0xffffffffffffffff, 0x0) 1m45.760647952s ago: executing program 4 (id=1069): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x1}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x80080) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0xc058534f, &(0x7f00000002c0)={{0x6, 0x7}, 0x0, 0x7fff, 0xa, {0x0, 0xfa}, 0x5, 0xd0aa}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) r6 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x45, &(0x7f0000000080), 0x67, 0x52e, &(0x7f0000000480)="$eJzs3U9vI2cZAPBnHHvZ7GabFDhAJUqhRdkVrJ00tI04lCIhOFUCyr2ExImiOHEUO+0mqtis+ABICAESJ7hwQeIDIKFKXDgipEpwBgECIdjCgQN00NjjNJv4X7tOnE1+P2ky78y8M8/zOprxvJ7RTACX1lMR8VJEvJOm6a2ImM7nF/IhDtpDVu/t+28sZ0MSafrKP5JI8nmdbSX5+Hq+2tWI+NqXI76ZnIzb2NvfWKrVqjv5dKW5uV1p7O3fXt9cWquuVbcWFuafX3xh8bnFuZG080ZEvPjFv3z/Oz/90ou//Mzrf3z1bze/laU1lS8/2o73qNhvYbvppdZncXSFnfcZ7DwqtlqYm+xWY+LEnHunnBMAAN1l5/gfjIhPRsStmI6J/qezAAAAwCMo/fxU/DeJSLu70mM+AAAA8AgptO6BTQrl/F6AqSgUyuX2PbwfjmuFWr3R/PRqfXdrpX2v7EyUCqvrtepcfq/wTJSSbHq+VX53+tlj0wsR8XhEfG96sjVdXq7XVsb94wcAAABcEteP9f//Pd3u/3fcHWdyAAAAwOjMjDsBAAAA4NQN2/+/dsp5AAAAAKfH9X8AAAC40L7y8svZkHbef73y2t7uRv212yvVxkZ5c3e5vFzf2S6v1etrrWf2bQ7aXq1e3/5sbO3eqTSrjWalsXc1Nuu7W81X1x94BTYAAABwhh7/+Ju/TyLi4HOTrSFzZbhVh6wGnFfFw1KSj7vs1n94rD3+8xklBZyJiXEnAIxNcdwJAGNTGncCwNglA5b3vHnnN/n4E6PNBwAAGL3Zj/a+/l/ou+ZB/8XAuWcnhsvL9X+4vFrX/4e9k7fgbeBwkZQGnQH07SA4HsBF8NDX/wdK0/eUEAAAMHJTrSEplIud6UKhXI640XotQClZXa9V5yLisYj43XTpA9n0fKtmMrDPAAAAAAAAAAAAAAAAAAAAAAAAAAC0pWkSKQAAAHChRRT+mvyq/Sz/2elnpo7/PnAl+c905K8Iff1Hr/zgzlKzuTOfzf/n4fzmD/P5z47jFwwAAAC4FAa8wP9BnX56px8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKP09v03ljvDWcb9+xciYqZb/GJcbY2vRikirv0rieKR9ZKImBhB/Mnsz0e6xU+ytA5Ddos/OYL4B/f6xo+D/FPoFv/6COLDZfZmdvx5qdv+V4inWuPu+18x4oHp96v38S8Oj38TPfb/G0PGeOKtn1d6xr8X8UTxRPy7WYRO/KRH/KeHjP+Nr+/v91qW/jhituv3T9Kpkh0ho9Lc3K409vZvr28urVXXqlsLC/PPL76w+NziXGV1vVbN/3aN8d2P/eKdfu2/1iP+zID2P3Nia1e6xvjfW3fuf6hdLHWLf/PpLvF//ZO8xsn4hfy771N5OVs+2ykftMtHPfmz3z7Zr/0rPdo/6P9/s9dGj7n11W//aciqAMAZaOztbyzVatWdC1vIeulDVs7Ozs5FzgpDFCYefjt3R5pYmqZptk89xHaSGPenelgY95EJAAAYtXdP+sedCQAAAAAAAAAAAAAAAAAAAFxeZ/E4seMxDw5LySgeoQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBL/DwAA//9t9tlI") r7 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0x40a85323, &(0x7f0000000c80)={{0x32, 0x8}, 'port1\x00', 0x10, 0x20434, 0x4, 0x6, 0x400, 0x8, 0x7, 0x0, 0x1, 0x6}) r8 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r8, &(0x7f0000000440)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000f80)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB, @ANYRES16=r0, @ANYRESDEC=r6, @ANYRESHEX=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x4, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000002000080000000000000000061104f000000000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x8bc6bfab9230d34f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000c40)) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r9}, 0x10) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x44, 0x6, 0x4a0, 0x138, 0x0, 0x368, 0x1d0, 0x138, 0x408, 0x408, 0x408, 0x408, 0x408, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x4}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff000000, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x11, 0x0, 0x28}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x10, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0xffffff00, 'vlan1\x00', 'nr0\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0xff, 0xffffff00, 'ip6gre0\x00', 'virt_wifi0\x00', {0xff}, {}, 0x2e, 0x0, 0x1}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {0xe6d959333babc205}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) io_setup(0x3, &(0x7f0000000340)=0x0) io_pgetevents(r11, 0x9, 0x8, &(0x7f0000000b00)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, &(0x7f0000000c00)={&(0x7f0000000380)={[0xc]}, 0x8}) r12 = syz_io_uring_setup(0x10c, &(0x7f00000003c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r12, 0x2, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r13, 0x4, &(0x7f0000000080)=0xfffffffd, 0x0, 0x4) syz_io_uring_submit(r13, r14, &(0x7f00000002c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x6000, @fd_index, 0x80000001, 0x0, 0x0, 0x3f}) syz_emit_ethernet(0x4a, &(0x7f0000000d40)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) epoll_pwait(r5, &(0x7f0000000080)=[{}, {}, {}, {}, {}], 0x5, 0x7f, &(0x7f00000000c0)={[0x8]}, 0x8) 1m45.233903128s ago: executing program 4 (id=1073): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff) lstat(&(0x7f0000001800)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) write$selinux_validatetrans(r1, &(0x7f0000001cc0)=ANY=[@ANYBLOB='system_u:object_r:semanage_t system_u:object_r:fixed_disk_device_t:s0 0'], 0x79) 1m44.937002885s ago: executing program 4 (id=1082): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_io_uring_setup(0x517, &(0x7f0000000100)={0x0, 0x15d2, 0x0, 0x2000000, 0x100003a6}, &(0x7f00000001c0), &(0x7f0000000200)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x101}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000140)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) pwrite64(r3, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) 1m44.8836874s ago: executing program 36 (id=1082): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_io_uring_setup(0x517, &(0x7f0000000100)={0x0, 0x15d2, 0x0, 0x2000000, 0x100003a6}, &(0x7f00000001c0), &(0x7f0000000200)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x101}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000140)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) pwrite64(r3, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) 1m13.485810718s ago: executing program 9 (id=1760): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'macvlan1\x00', &(0x7f0000000480)=@ethtool_eee={0x19, 0x2, 0x0, 0x0, 0x14, 0xfff, 0x0, 0x0, [0x1, 0x4]}}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fchdir(r1) rmdir(&(0x7f0000000000)='./file0\x00') openat$cgroup(r1, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800002cc87f111f7982f60000008500000023000000950000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='kfree\x00', r2}, 0x18) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0) 1m13.318090453s ago: executing program 9 (id=1763): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) sendmmsg$inet(r0, &(0x7f0000001480)=[{{&(0x7f0000000100)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r0, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) 1m13.232486771s ago: executing program 9 (id=1767): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000480)={'filter\x00', 0x104, 0x4, 0x3c0, 0x0, 0x0, 0x1f0, 0x2d8, 0x2d8, 0xe8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x1, 0x0, {@mac=@local}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'macvlan0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@arp={@loopback, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00'}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f0}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r0, 0x58, &(0x7f0000000040)}, 0x10) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4094, 0xffe}], 0x1, 0xf0, 0xd215) 1m13.209935052s ago: executing program 9 (id=1768): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000540)='.\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x100, 0x100) openat(r1, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50) faccessat(r1, &(0x7f0000000000)='./file0\x00', 0x5) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x800000007, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x84, 0x10001, 0x0, 0x8, 0x401, 0x5, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = geteuid() sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="bc010000200020022bbd7000fedbdf25ff00000000000000000000000000000000000000000000000000000000000000000000014e222c004e2207790200a0205e00000007", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="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"], 0x1c9}}, 0x4050) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r3, 0x942e, 0x0) recvmsg$qrtr(r3, &(0x7f0000000580)={&(0x7f0000000100), 0xc, &(0x7f0000000500)=[{&(0x7f00000001c0)=""/169, 0xa9}, {&(0x7f0000000140)=""/57, 0x39}, {&(0x7f0000000280)=""/205, 0xcd}, {&(0x7f0000000380)=""/56, 0x38}, {&(0x7f00000003c0)=""/72, 0x48}, {&(0x7f0000000440)=""/158, 0x9e}], 0x6, 0x0, 0x0, 0x40010040}, 0x38, 0x3) 1m13.150341258s ago: executing program 9 (id=1769): socket$nl_generic(0x10, 0x3, 0x10) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1c14744, &(0x7f0000000100), 0xfa, 0x4d0, &(0x7f0000000340)="$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") (async) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r1 = accept$nfc_llcp(r0, &(0x7f0000000140), &(0x7f0000000080)=0x60) fcntl$setsig(r1, 0xa, 0x3c) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x16e) 1m13.12151237s ago: executing program 9 (id=1772): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10, 0x0}, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b7000000000000"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000640)='kfree\x00', r1, 0x0, 0x8}, 0x18) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x34, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x40040) 58.788441748s ago: executing program 37 (id=1772): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10, 0x0}, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b7000000000000"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000640)='kfree\x00', r1, 0x0, 0x8}, 0x18) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x34, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x40040) 14.410185495s ago: executing program 5 (id=2712): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) (async, rerun: 64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) (async, rerun: 64) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0xfffd, 0x0, 0x2}, {0x10000, 0x3, 0x1, 0x9, 0xfffffffffffffffc, 0x0, 0x5, 0xfffffffffffffff7}, {0x0, 0xc, 0xfffffffffffffffc, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, {{@in6=@empty, 0x2, 0x6c}, 0x2, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) (async) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) (rerun: 32) r1 = socket$packet(0x11, 0x2, 0x300) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r4, 0x0, 0x10007ffffffff}, 0x18) (async) r5 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r5) (async) getsockname$packet(r5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r6, @ANYBLOB="0100000000000000240012000c000100627269646765000e1400020008000700"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x8100, r6, 0x1, 0xfc, 0x6, @local}, 0x14) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 64) mq_unlink(&(0x7f00000000c0)='string\x00') (rerun: 64) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r9], 0x20}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r11, 0x0, 0xfffffffffffffffd}, 0x18) (async, rerun: 64) syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), 0xffffffffffffffff) (async, rerun: 64) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0x800090, &(0x7f0000000240)=ANY=[@ANYRES32=0x0], 0x1, 0x2e2, &(0x7f0000000c00)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x2, 0x8210000, 0x1, 0xa, 0xfffffffd, 0xffffffff}, 0x1c) 14.329276592s ago: executing program 5 (id=2714): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000100)='kfree\x00', r0, 0x0, 0x4}, 0x18) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x30044d1, &(0x7f0000000800)=ANY=[@ANYRES8, @ANYRESDEC, @ANYRES64, @ANYRES64, @ANYRES8=0x0, @ANYRESOCT], 0x0, 0x23e, &(0x7f0000000bc0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty=0xffffff7f, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 14.037155759s ago: executing program 5 (id=2716): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x44, 0x0, 0x6, 0x6, 0x3, 0x2}, {0x3, 0x2, 0x7, 0x4, 0x0, 0x6}, 0x90000000, 0x82b8ca3e, 0x1d24}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x9b4e7c312ffd1ff5}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) 14.007259491s ago: executing program 5 (id=2719): socket$packet(0x11, 0x3, 0x300) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$tipc(0x1e, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x800}, 0xdb01, 0x0, 0x2, 0x48000000, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000040)={&(0x7f00000005c0)={0x2, 0x4, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x1d}}], 0x30, 0x4000000}, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000700)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES64, @ANYRESDEC, @ANYBLOB="5067c22175807b5430b15a721e3b47976ddcefa9f43734713401a8704104f7940262033377dca6a8ac", @ANYRES64], 0x6, 0x306, &(0x7f0000000a80)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x2) io_setup(0x7, &(0x7f0000000280)=0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) io_submit(r4, 0x2, &(0x7f0000000b40)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0x8655, 0xffffffffffffffff, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0, 0x6}]) rename(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') getpeername$packet(r3, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000880)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) 13.861793254s ago: executing program 5 (id=2723): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pimreg0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000080000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f28bd421850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x400, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xfff3}, {}, {0xffe0, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048850) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[], 0x48) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) write$binfmt_format(r6, &(0x7f0000000100)='0\x00', 0x2) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) write$qrtrtun(r6, &(0x7f0000000300)="ca0e808bb35b", 0x6) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x2}}, 0x40) 12.941864846s ago: executing program 5 (id=2729): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000002060101000000000000000000000000050005000a0000000500010007007c4505000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x13, 0xea6, '.\x00'}}) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='veth0_to_hsr\x00', 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000000) r5 = socket$inet(0x2, 0xa, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) getsockname$inet(r5, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$TCSETS(r3, 0x4b72, &(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0xb, "0060930000efa4890200"}) 12.921210037s ago: executing program 38 (id=2729): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000002060101000000000000000000000000050005000a0000000500010007007c4505000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x13, 0xea6, '.\x00'}}) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='veth0_to_hsr\x00', 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000000) r5 = socket$inet(0x2, 0xa, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) getsockname$inet(r5, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$TCSETS(r3, 0x4b72, &(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0xb, "0060930000efa4890200"}) 5.079524641s ago: executing program 6 (id=2877): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x8}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2}, &(0x7f00000008c0), &(0x7f0000000880)=r3}, 0x20) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="180800000000000000000000000000001812002023fdbbee268f80355e0973d6e1090061ff356539e0c20a0f472f1d6a7464b74c7a85824b4a00000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085100000030000001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x1a) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/zoneinfo\x00', 0x0, 0x0) close(r5) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x50) r8 = socket$inet6(0xa, 0x1, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000ff0f00000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}, 0x1, 0x0, 0x0, 0xc001}, 0xc814) sendmsg$IPSET_CMD_DESTROY(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000a0000010500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) 4.472306495s ago: executing program 6 (id=2884): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYRES8], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x36, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r0}, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x2, 0x4, 0x6, 0x1, 0x1000, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="871000000000000000000100000008000300000001000500060000000000050005"], 0x30}, 0x1, 0x0, 0x0, 0x94}, 0x8808) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYRESDEC=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000000c0), 0x3f, 0x0) ioctl$sock_TIOCINQ(r8, 0x541b, &(0x7f0000000100)) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001100)=@newsa={0x1b0, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@private, 0x0, 0xecdf}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x800}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@algo_crypt={0x58, 0x2, {{'cbc(aes)\x00'}, 0x80, "e0fad3f10cd3a506627800000000074f"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x80}}]}, 0x1b0}}, 0x4050) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70300000088b000850000001b000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r11}, 0x18) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1818e58, &(0x7f00000003c0), 0x2a, 0x63f, &(0x7f0000000d80)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r6}, 0x10) lsm_set_self_attr(0x66, 0x0, 0x43, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000480), 0x4) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r12}, 0x10) r13 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mreqsrc(r13, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x8) 4.065703861s ago: executing program 6 (id=2890): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000500), 0x96b, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) chown(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffad) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@nouid32}]}, 0xc1, 0x7e9, &(0x7f00000017c0)="$eJzs3c1rHG8dAPDvbF42SauJIGh7CggaKN2YGlsFDxEPIlgo6Nk2bLahZpMt2U1pQqDpQfAiqHgQ9NKzL/UgePXlqv+EeJAW0TRYT7oys7t53d0kbXa3/fXzgck8M/PMPPPN88yzz+4MuwF8sKbTP7mIKxHxwyRisrk+iYiRLDUcsdDI93p3u5hOSdTr3/pnkuX57aWDYyXN+aXmwqcj4o/fi7iWO17qeHNeLq03U7O11Yez1c2t6w9WF5dLy6W1m3Pz8zduffHWzZN7val//2Xr8ssfff1zv14Yjk89/8GfkliIy81te7vbxbc8/AnTMd38n4yk/8IjvnbRhQ1YMugT4I2kl+ZQ4yqPKzEZQ1mqg7e9AAGAd8KTiKgDAB+Y5LTX/yFDBAD4aGl9DrC3u11sTYP9RKK//vHViBhrxN+6v9nYMty8ZzeW3Qed2EuO3BlJImLqAsqfjoif/+47v0yn6NF9SIB2dp425nu7+WP9f5L2f6OnHyHfccvnu+1Wb+w3fWy1/g/65/fp+OdLJ8d/V/cf6BnL/h4b/4zl21y7b+L06z/3osOuZ+ibTpeO/75y6Nm2g/Hf/kNrU0PNpY9lY76R5P6Dcint2z4eETMxkk+X57Ks7Z+Cmnn131edyj88/vvXj7/7i7T8dH6QI/diOB/1xnN5/8vG60uLtcWLiD2L/2nE1eF28Sf749/kSP0v7Ed6p+NRj1bNN778/Z91ypnGn8bbmk7G31v1ZxGfbVv/B3WZdH0+cTZrDrOtRtHGb/7204lO5R/Ufz6bp+W33gv0Q1r/E93jn0pT1c2tlcVyubRePX8Zf342+YdO2w63//bxZ+3/iLT9jybfztKtlvZ4sVZbn4sYTb55cv2Ng31by638afwzn2l//bdv/42+IH1PeG9/qbvhl6O/ah6qbfyZnU7x91Ya/9K56r9Lot7c59im569XhjqVf7b6n89SM801Z+n/TjnTt2jNAAAAAAAAAAAAAAAAAAAAAAAAAHB+uYi4HEmusJ/O5QqFxm94fzImcuVKtXbtfmVjbSmy38qeipFc66suJw99H+pc8/vwW8s3ji1/ISI+ERE/yY9ny4Vipbw06OABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOnS0d//f5LOCoXGtr/nB312AEDPjA36BACAvvP6DwAfnvO9/o/37DwAgP459/v/etKbEwEA+ubMr//3enseAED/uP8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAj925fTud6v/Z3S6my0uPNjdWKo+uL5WqK4XVjWKhWFl/WFiuVJbLpUKxstrxQDuNWblSeTgfaxuPZ2ulam22url1d7WysVa7+2B1cbl0tzTSt8gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Oyqm1sri+VyaV2iS2K8NN45TxIRAz/D0xJpXV/kAYff0ZB3/jqSteuumWPqvWn8o13yJBdZ1vjxNYd7ifFBdE0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA74X/BwAA///YTBJy") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000480)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @local, @private=0xa010102, {[@generic={0x7, 0x5, "044158"}, @timestamp_addr={0x44, 0x14, 0x6, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3ff}, {@multicast1}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000000000005000000"], 0x48) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x10d) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000880)=ANY=[@ANYBLOB, @ANYRESOCT=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7, 0x0, 0xfffffffffffffffe}, 0x18) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x7, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x101, 0x1452, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="c4000000190000000000000000000000000000000000000000000000000020190000000000009f7e04401706ab1e1800000200000000000000000000004248c90bc91721ab31cc7ef6d4f2f6800000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000700000000000000000000000000000002000000000000000000000000000000020000000000000000000000000000000000000000000000feffffffffffffffffffffffffffffff00000000000000000000000000000000000000000000000001000003000000000c0015005d073500ff010000"], 0xc4}}, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000010020"], 0x24, 0x0) 3.197365688s ago: executing program 2 (id=2900): r0 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(0x0, r0) getsockname$packet(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r1, 0x0, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000000)) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x4ffe6, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r3, 0x2f, 0x0, 0xffffffffffffffff, @void, @value=r3}, 0x14) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@fallback, 0xffffffffffffffff, 0x7}, 0x20) (fail_nth: 1) 2.911696103s ago: executing program 2 (id=2903): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000540)={0x1, &(0x7f0000000300)=[{0x200000000006, 0x3, 0x2, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002cc0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000005c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000300)}, 0x20) lsm_get_self_attr(0x64, &(0x7f0000000040), &(0x7f0000000000)=0x101, 0x0) socket$packet(0x11, 0x2, 0x300) socket$kcm(0x29, 0x2, 0x0) getcwd(0x0, 0x0) 2.615075489s ago: executing program 2 (id=2906): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0x60, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x2002, 0x0) sendfile(r2, r2, 0x0, 0x40000f63c) 2.26465567s ago: executing program 8 (id=2908): bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYRES64, @ANYRES16, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3a, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a"], 0xfdef) 2.15882486s ago: executing program 8 (id=2909): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f02, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0, 0x0, 0x1075}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x2}, 0x18) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x6) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x19) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00'}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r4, r6, 0x25, 0x0, @void}, 0x10) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) 2.126998193s ago: executing program 8 (id=2910): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYRESOCT=0x0], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f0000000040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f00000000c0), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_local\x00', r0, 0x0, 0x80000001}, 0x18) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3f, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) 2.070470257s ago: executing program 8 (id=2911): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000340)=0xc) lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280), &(0x7f0000000380)=@v3={0x3000000, [{0x3ff, 0x9}, {0xc, 0x1ff}], r1}, 0x18, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$netlink(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x100a0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2ef}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f00000001c0)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 2.065149288s ago: executing program 6 (id=2912): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000500), 0x96b, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) chown(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffad) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@nouid32}]}, 0xc1, 0x7e9, &(0x7f00000017c0)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000480)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @local, @private=0xa010102, {[@generic={0x7, 0x5, "044158"}, @timestamp_addr={0x44, 0x14, 0x6, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3ff}, {@multicast1}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000000000005000000"], 0x48) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x10d) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000880)=ANY=[@ANYBLOB, @ANYRESOCT=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7, 0x0, 0xfffffffffffffffe}, 0x18) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x7, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x101, 0x1452, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="c4000000190000000000000000000000000000000000000000000000000020190000000000009f7e04401706ab1e1800000200000000000000000000004248c90bc91721ab31cc7ef6d4f2f6800000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000700000000000000000000000000000002000000000000000000000000000000020000000000000000000000000000000000000000000000feffffffffffffffffffffffffffffff00000000000000000000000000000000000000000000000001000003000000000c0015005d073500ff010000"], 0xc4}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000010020"], 0x24, 0x0) 1.749723706s ago: executing program 0 (id=2913): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4", @ANYRES32=r0], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000300)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x11a, 0x4, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) fcntl$setlease(r3, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000040), 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) fremovexattr(r4, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00') bind$netlink(r2, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x7fd, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000006000000140008"], 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x800000000006}, 0x18) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x4600, 0x3c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffefffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x10) openat$autofs(0xffffffffffffff9c, 0x0, 0x109344, 0x0) 1.69456737s ago: executing program 0 (id=2914): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000400"/20, @ANYRES32=0xffffffffffffffff, @ANYBLOB="7b8af8ff00000000000000000000000007020000f8ffffffb703000008000000b5040000000000008500001801000020756c250000000000206248b011f8ff00ffff00bfa100000000000007010000f8ffffffb70200000800000cb703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1e, 0xc, &(0x7f00000006c0)=ANY=[@ANYRES8=r0], 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00'}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000000040000851000000200000085000000230000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 1.578992691s ago: executing program 2 (id=2915): socket$netlink(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3000046, &(0x7f00000134c0)={[{@dioread_nolock}, {@noauto_da_alloc}, {@inlinecrypt}, {@sysvgroups}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x7f}}, {@data_err_ignore}, {@grpquota}, {@dioread_nolock}, {@nobarrier}, {@mblk_io_submit}, {@quota}]}, 0x2, 0x553, &(0x7f0000001080)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc) (fail_nth: 1) 947.531437ms ago: executing program 1 (id=2918): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x5, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000100)='kfree\x00', r0, 0x0, 0x4}, 0x18) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x30044d1, &(0x7f0000000800)=ANY=[@ANYRES8, @ANYRESDEC, @ANYRES64, @ANYRES64, @ANYRES8=0x0, @ANYRESOCT], 0x0, 0x23e, &(0x7f0000000bc0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty=0xffffff7f, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 947.318957ms ago: executing program 2 (id=2919): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000180)}], 0x1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x94}, 0x40}], 0x1, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) 814.698819ms ago: executing program 1 (id=2920): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f02, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0, 0x0, 0x1075}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x2}, 0x18) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x6) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x19) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00'}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r4, r6, 0x25, 0x0, @void}, 0x10) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) 763.002063ms ago: executing program 8 (id=2921): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYRESOCT=0x0], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f0000000040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f00000000c0), 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_local\x00', r0, 0x0, 0x80000001}, 0x18) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3f, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) 747.761634ms ago: executing program 1 (id=2922): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0xd, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) sendmmsg$inet(r0, &(0x7f0000001480)=[{{&(0x7f0000000100)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r0, 0x0, 0x0, 0x12000000, 0x0, 0x0) 736.252025ms ago: executing program 8 (id=2923): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000180)}], 0x1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x94}, 0x40}], 0x1, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) 719.497737ms ago: executing program 6 (id=2924): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bond0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 675.145711ms ago: executing program 1 (id=2925): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) sendmmsg$inet(r0, &(0x7f0000001480)=[{{&(0x7f0000000100)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r0, 0x0, 0x0, 0x12000000, 0x0, 0x0) 653.302123ms ago: executing program 0 (id=2926): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000540)={0x1, &(0x7f0000000300)=[{0x200000000006, 0x3, 0x2, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000300)}, 0x20) getcwd(0x0, 0x0) 624.563655ms ago: executing program 1 (id=2927): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000540)={0x1, &(0x7f0000000300)=[{0x200000000006, 0x3, 0x2, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002cc0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000005c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000300)}, 0x20) lsm_get_self_attr(0x64, &(0x7f0000000040), &(0x7f0000000000)=0x101, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0\x00'}) socket$kcm(0x29, 0x2, 0x0) getcwd(0x0, 0x0) 573.60323ms ago: executing program 0 (id=2928): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0) preadv2(r1, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000000)=""/205, 0xcd}, {&(0x7f0000000100)=""/98, 0x62}], 0x3, 0x7ffffffe, 0x100, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1862eff5e41744549dd0020000000000000080"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TCSETSW2(r2, 0x5453, 0x0) 522.952674ms ago: executing program 1 (id=2929): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x10, 0xe40b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0xa416, 0x32, 0x43a1bd56, 0x7, 0x9, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newsa={0x138, 0x10, 0x1, 0x70bd2b, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0xfd}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0xecdf}, {@in6=@loopback, 0x4d5, 0x32}, @in6=@private1, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x400004}, {}, 0x0, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x10}, 0x4050) (fail_nth: 16) 488.897597ms ago: executing program 0 (id=2930): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x5, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000100)='kfree\x00', r0, 0x0, 0x4}, 0x18) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x30044d1, &(0x7f0000000800)=ANY=[@ANYRES8, @ANYRESDEC, @ANYRES64, @ANYRES64, @ANYRES8=0x0, @ANYRESOCT], 0x0, 0x23e, &(0x7f0000000bc0)="$eJzs3c9qE1EUB+AzSdqmukgWrkRwQBeuStsnSJEKYldKFupCi21BklCwEGgVQ1c+gU/ic7jxDXwAoTtdFEYmSZsWUm0wf0r9vk0uzP3NOTe5Iau5eX2n1dja3ds5/PA9yuUkCrWoJUcR1ShEbiEAgOvmV5bFUdYzWrJUmFRPAMBkXfL3f3GKLQEAE/bs+Ysnaxsb60/TtBzR+tSuJ9F77V1f24m30YztWI5KHEdkp3rjR4831qOU5qpxv9Vp1/Nk69XX/v3XfkR08ytRierw/Eracybfadfn4ka/fi3Pr0Ylbg3Prw7JR30+Htw70/9SVOLbm9iNZmxFnh3kP66k6cPs88/3L/OO83zSadcXuvMGsuLUPxwAAAAAAAAAAAAAAAAAAAAAAK6tpTRN0yz7kmVZ1jl3/k7xuHt9KT1RPX8+Ty9/0flAnTPn6yznJZLe/EG+FLdLUZrl2gEAAAAAAAAAAAAAAAAAAOCq2Ns/aGw2m9vvxjo4eax//Hf+10EU+601k4gr0E93sJj3M51ad2PEWrURS0Rh/6Bxsrsam0n8JVWe0CbJhmy/4oWp+TFVn7853lUkETF3+mb+aXIh5sb8TQEAAAAAAAAAAAAAAAAAAKZs8NDvkIuHM2gIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGZg8P//Iww6/fAlUzNeIgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP+B3wEAAP//bkR7Lg==") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty=0xffffff7f, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 482.512748ms ago: executing program 6 (id=2931): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000180)}], 0x1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x94}, 0x40}], 0x1, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) 3.97486ms ago: executing program 0 (id=2932): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000280)={0x0, 0x3, 0x17, 0x1, 0x0, 0x1, 0x0}) 0s ago: executing program 2 (id=2933): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f02, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0, 0x0, 0x1075}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x2}, 0x18) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x6) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x19) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00'}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r4, r6, 0x25, 0x0, @void}, 0x10) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) kernel console output (not intermixed with test programs): ock 4294967295 (level 1) [ 169.018331][T10668] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm gtp: invalid indirect mapped block 4294967295 (level 1) [ 169.032426][T10668] EXT4-fs (loop8): 2 truncates cleaned up [ 169.038919][T10668] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.057718][T10668] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.082609][ T29] kauditd_printk_skb: 931 callbacks suppressed [ 169.082626][ T29] audit: type=1326 audit(1767702597.163:15233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10626 comm="syz.2.2313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2660c02005 code=0x7ffc0000 [ 169.095462][ T3581] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.119988][ T29] audit: type=1326 audit(1767702597.173:15234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10626 comm="syz.2.2313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2660c02005 code=0x7ffc0000 [ 169.145813][ T29] audit: type=1326 audit(1767702597.173:15235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10626 comm="syz.2.2313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2660c02005 code=0x7ffc0000 [ 169.169574][ T29] audit: type=1326 audit(1767702597.173:15236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10626 comm="syz.2.2313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2660c02005 code=0x7ffc0000 [ 169.193239][ T29] audit: type=1326 audit(1767702597.194:15237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10626 comm="syz.2.2313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f2660bcf749 code=0x7ffc0000 [ 169.243005][T10668] netlink: 44 bytes leftover after parsing attributes in process `gtp'. [ 169.270982][ T29] audit: type=1326 audit(1767702597.205:15238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10665 comm="syz.6.2327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f307157f749 code=0x7ffc0000 [ 169.294643][ T29] audit: type=1326 audit(1767702597.205:15239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10665 comm="syz.6.2327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f307157f749 code=0x7ffc0000 [ 169.318356][ T29] audit: type=1326 audit(1767702597.205:15240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10665 comm="syz.6.2327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f307157f749 code=0x7ffc0000 [ 169.342193][ T29] audit: type=1326 audit(1767702597.205:15241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10665 comm="syz.6.2327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f307157f749 code=0x7ffc0000 [ 169.365972][ T29] audit: type=1326 audit(1767702597.205:15242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10665 comm="syz.6.2327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f307157f749 code=0x7ffc0000 [ 169.499430][T10686] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2334'. [ 169.606537][T10692] loop5: detected capacity change from 0 to 512 [ 169.643579][T10692] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 169.653200][T10692] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 170.241345][T10704] netlink: 'syz.6.2339': attribute type 39 has an invalid length. [ 170.486339][T10718] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2345'. [ 170.507018][T10716] FAULT_INJECTION: forcing a failure. [ 170.507018][T10716] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 170.520504][T10716] CPU: 1 UID: 0 PID: 10716 Comm: syz.2.2346 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 170.520558][T10716] Tainted: [W]=WARN [ 170.520567][T10716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 170.520583][T10716] Call Trace: [ 170.520592][T10716] [ 170.520600][T10716] __dump_stack+0x1d/0x30 [ 170.520693][T10716] dump_stack_lvl+0x95/0xd0 [ 170.520771][T10716] dump_stack+0x15/0x1b [ 170.520809][T10716] should_fail_ex+0x265/0x280 [ 170.520839][T10716] should_fail_alloc_page+0xf2/0x100 [ 170.520864][T10716] __alloc_frozen_pages_noprof+0x109/0x360 [ 170.520934][T10716] alloc_pages_mpol+0xb3/0x260 [ 170.520978][T10716] alloc_pages_noprof+0x90/0x130 [ 170.521117][T10716] alloc_skb_with_frags+0x193/0x470 [ 170.521155][T10716] sock_alloc_send_pskb+0x430/0x4e0 [ 170.521193][T10716] tun_get_user+0x9b4/0x2670 [ 170.521299][T10716] ? ref_tracker_alloc+0x1f2/0x2f0 [ 170.521331][T10716] ? selinux_file_permission+0x2ee/0x320 [ 170.521368][T10716] tun_chr_write_iter+0x15e/0x210 [ 170.521430][T10716] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 170.521458][T10716] vfs_write+0x52a/0x960 [ 170.521489][T10716] ksys_write+0xda/0x1a0 [ 170.521586][T10716] __x64_sys_write+0x40/0x50 [ 170.521606][T10716] x64_sys_call+0x2847/0x3000 [ 170.521637][T10716] do_syscall_64+0xca/0x2b0 [ 170.521675][T10716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.521782][T10716] RIP: 0033:0x7f2660bce1ff [ 170.521798][T10716] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 170.521816][T10716] RSP: 002b:00007f265f637000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 170.521836][T10716] RAX: ffffffffffffffda RBX: 00007f2660e25fa0 RCX: 00007f2660bce1ff [ 170.521847][T10716] RDX: 0000000000000fc0 RSI: 0000000000000000 RDI: 00000000000000c8 [ 170.521882][T10716] RBP: 00007f265f637090 R08: 0000000000000000 R09: 0000000000000000 [ 170.521896][T10716] R10: 0000000000000fc0 R11: 0000000000000293 R12: 0000000000000001 [ 170.521911][T10716] R13: 00007f2660e26038 R14: 00007f2660e25fa0 R15: 00007ffdf16c93f8 [ 170.521996][T10716] [ 170.747184][ T8189] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 170.793244][T10727] loop5: detected capacity change from 0 to 1024 [ 170.800952][T10727] EXT4-fs: Ignoring removed nobh option [ 170.845439][T10729] netlink: 'syz.8.2344': attribute type 1 has an invalid length. [ 170.877506][T10729] bond0: (slave vxcan1): The slave device specified does not support setting the MAC address [ 170.889032][T10729] bond0: (slave vxcan1): Error -95 calling set_mac_address [ 170.925871][T10731] macvlan2: entered promiscuous mode [ 170.931349][T10731] macvlan2: entered allmulticast mode [ 170.937388][T10731] bond0: entered promiscuous mode [ 170.942829][T10731] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 170.951119][T10731] bond0: left promiscuous mode [ 170.994342][T10727] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 171.058118][T10727] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 171.115612][T10735] netlink: 'syz.0.2350': attribute type 39 has an invalid length. [ 171.131864][T10727] EXT4-fs error (device loop5): ext4_get_journal_inode:5849: comm syz.5.2347: inode #4294967295: comm syz.5.2347: iget: illegal inode # [ 171.268134][T10727] EXT4-fs (loop5): no journal found [ 171.273727][T10727] EXT4-fs (loop5): can't get journal size [ 171.326004][T10727] EXT4-fs (loop5): failed to initialize system zone (-22) [ 171.357024][T10727] EXT4-fs (loop5): mount failed [ 171.447964][T10744] xt_TCPMSS: Only works on TCP SYN packets [ 171.564620][T10753] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.580379][T10759] netlink: 'syz.5.2360': attribute type 13 has an invalid length. [ 171.600090][T10757] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2359'. [ 171.664561][T10759] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.671943][T10759] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.734868][T10767] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 171.747234][T10759] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.780768][T10765] syz_tun: entered allmulticast mode [ 171.788335][T10751] syz_tun: left allmulticast mode [ 171.805911][ T8190] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.828354][T10753] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.855547][ T8190] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.864109][T10761] lo speed is unknown, defaulting to 1000 [ 171.876455][T10761] lo speed is unknown, defaulting to 1000 [ 171.878485][ T8190] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.893460][ T8190] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.944016][T10753] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.039695][T10753] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.050706][T10784] serio: Serial port ttyS3 [ 172.110868][T10796] loop8: detected capacity change from 0 to 256 [ 172.117698][T10796] vfat: Unknown parameter 'ÿ00000000000000000008ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ' [ 172.145613][ T8190] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.157923][ T8190] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.186055][ T8190] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.212598][ T8190] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.225445][T10800] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.2373' sets config #0 [ 172.258111][T10802] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 172.273194][T10802] SELinux: policydb version 398262310 does not match my version range 15-35 [ 172.282465][T10802] SELinux: failed to load policy [ 172.346103][T10808] FAULT_INJECTION: forcing a failure. [ 172.346103][T10808] name failslab, interval 1, probability 0, space 0, times 0 [ 172.359482][T10808] CPU: 0 UID: 0 PID: 10808 Comm: syz.2.2377 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 172.359586][T10808] Tainted: [W]=WARN [ 172.359595][T10808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 172.359612][T10808] Call Trace: [ 172.359617][T10808] [ 172.359624][T10808] __dump_stack+0x1d/0x30 [ 172.359648][T10808] dump_stack_lvl+0x95/0xd0 [ 172.359749][T10808] dump_stack+0x15/0x1b [ 172.359768][T10808] should_fail_ex+0x265/0x280 [ 172.359791][T10808] should_failslab+0x8c/0xb0 [ 172.359876][T10808] __kmalloc_cache_noprof+0x65/0x4c0 [ 172.359912][T10808] ? alloc_fdtable+0x8c/0x1d0 [ 172.359952][T10808] alloc_fdtable+0x8c/0x1d0 [ 172.359984][T10808] dup_fd+0x492/0x510 [ 172.360012][T10808] copy_files+0x98/0xf0 [ 172.360036][T10808] copy_process+0xc17/0x1ef0 [ 172.360120][T10808] kernel_clone+0x16c/0x5c0 [ 172.360145][T10808] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 172.360180][T10808] __x64_sys_clone+0xe6/0x120 [ 172.360290][T10808] x64_sys_call+0x12d0/0x3000 [ 172.360324][T10808] do_syscall_64+0xca/0x2b0 [ 172.360410][T10808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.360437][T10808] RIP: 0033:0x7f2660bcf749 [ 172.360456][T10808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.360481][T10808] RSP: 002b:00007f265f636fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 172.360572][T10808] RAX: ffffffffffffffda RBX: 00007f2660e25fa0 RCX: 00007f2660bcf749 [ 172.360588][T10808] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 172.360603][T10808] RBP: 00007f265f637090 R08: 0000000000000000 R09: 0000000000000000 [ 172.360617][T10808] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 172.360629][T10808] R13: 00007f2660e26038 R14: 00007f2660e25fa0 R15: 00007ffdf16c93f8 [ 172.360649][T10808] [ 172.587653][T10815] __nla_validate_parse: 1 callbacks suppressed [ 172.587670][T10815] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2379'. [ 172.667462][T10824] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2382'. [ 172.676578][T10824] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2382'. [ 172.757025][T10827] ref_ctr increment failed for inode: 0x984 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88810c8a5100 [ 172.844356][T10834] loop2: detected capacity change from 0 to 256 [ 172.850973][T10834] vfat: Unknown parameter 'ÿ00000000000000000008ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ' [ 173.754271][T10866] loop8: detected capacity change from 0 to 256 [ 173.761481][T10866] vfat: Unknown parameter 'ÿ00000000000000000008ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ' [ 173.790947][T10869] loop5: detected capacity change from 0 to 512 [ 173.809732][T10869] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.2397: bad orphan inode 13 [ 173.828694][T10869] ext4_test_bit(bit=12, block=18) = 1 [ 173.834128][T10869] is_bad_inode(inode)=0 [ 173.838366][T10869] NEXT_ORPHAN(inode)=2130706432 [ 173.843226][T10869] max_ino=32 [ 173.846605][T10869] i_nlink=1 [ 173.853194][T10869] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.865944][T10869] ext4 filesystem being mounted at /454/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 173.902445][ T29] kauditd_printk_skb: 430 callbacks suppressed [ 173.902463][ T29] audit: type=1326 audit(1767702602.223:15673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10879 comm="syz.8.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f333c08f749 code=0x7ffc0000 [ 173.938236][T10869] EXT4-fs error (device loop5): ext4_lookup:1785: inode #15: comm syz.5.2397: iget: bad i_size value: 360287970189639690 [ 173.951369][ T29] audit: type=1326 audit(1767702602.234:15674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10879 comm="syz.8.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f333c08f749 code=0x7ffc0000 [ 173.975195][ T29] audit: type=1326 audit(1767702602.234:15675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10879 comm="syz.8.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f333c08f749 code=0x7ffc0000 [ 173.976328][T10869] EXT4-fs error (device loop5): ext4_lookup:1789: inode #2: comm syz.5.2397: deleted inode referenced: 12 [ 173.998851][ T29] audit: type=1326 audit(1767702602.234:15676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10879 comm="syz.8.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f333c08f749 code=0x7ffc0000 [ 174.033981][ T29] audit: type=1326 audit(1767702602.234:15677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10879 comm="syz.8.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f333c08f749 code=0x7ffc0000 [ 174.057773][ T29] audit: type=1326 audit(1767702602.234:15678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10879 comm="syz.8.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f333c08f749 code=0x7ffc0000 [ 174.081430][ T29] audit: type=1326 audit(1767702602.234:15679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10879 comm="syz.8.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f333c08f749 code=0x7ffc0000 [ 174.105212][ T29] audit: type=1326 audit(1767702602.234:15680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10879 comm="syz.8.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f333c08f749 code=0x7ffc0000 [ 174.128941][ T29] audit: type=1326 audit(1767702602.234:15681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10879 comm="syz.8.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f333c08f749 code=0x7ffc0000 [ 174.152641][ T29] audit: type=1326 audit(1767702602.234:15682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10879 comm="syz.8.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f333c08f749 code=0x7ffc0000 [ 174.177587][ T3581] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.202907][T10884] loop8: detected capacity change from 0 to 2048 [ 174.216664][T10884] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 174.413526][T10891] Cannot find add_set index 0 as target [ 174.419527][T10891] FAULT_INJECTION: forcing a failure. [ 174.419527][T10891] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.432765][T10891] CPU: 1 UID: 0 PID: 10891 Comm: syz.8.2405 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 174.432878][T10891] Tainted: [W]=WARN [ 174.432887][T10891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 174.432902][T10891] Call Trace: [ 174.432911][T10891] [ 174.432920][T10891] __dump_stack+0x1d/0x30 [ 174.432949][T10891] dump_stack_lvl+0x95/0xd0 [ 174.432977][T10891] dump_stack+0x15/0x1b [ 174.433013][T10891] should_fail_ex+0x265/0x280 [ 174.433043][T10891] should_fail+0xb/0x20 [ 174.433067][T10891] should_fail_usercopy+0x1a/0x20 [ 174.433096][T10891] _copy_to_user+0x20/0xa0 [ 174.433135][T10891] simple_read_from_buffer+0xb5/0x130 [ 174.433162][T10891] proc_fail_nth_read+0x10e/0x150 [ 174.433222][T10891] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 174.433259][T10891] vfs_read+0x1a8/0x770 [ 174.433280][T10891] ? __rcu_read_unlock+0x4f/0x70 [ 174.433301][T10891] ? __fget_files+0x184/0x1c0 [ 174.433437][T10891] ? mutex_lock+0x58/0x90 [ 174.433535][T10891] ksys_read+0xda/0x1a0 [ 174.433556][T10891] __x64_sys_read+0x40/0x50 [ 174.433628][T10891] x64_sys_call+0x2889/0x3000 [ 174.433657][T10891] do_syscall_64+0xca/0x2b0 [ 174.433697][T10891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.433722][T10891] RIP: 0033:0x7f333c08e15c [ 174.433742][T10891] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 174.433780][T10891] RSP: 002b:00007f333aaf7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 174.433801][T10891] RAX: ffffffffffffffda RBX: 00007f333c2e5fa0 RCX: 00007f333c08e15c [ 174.433813][T10891] RDX: 000000000000000f RSI: 00007f333aaf70a0 RDI: 0000000000000008 [ 174.433890][T10891] RBP: 00007f333aaf7090 R08: 0000000000000000 R09: 0000000000000000 [ 174.433906][T10891] R10: 0000200000000480 R11: 0000000000000246 R12: 0000000000000001 [ 174.433922][T10891] R13: 00007f333c2e6038 R14: 00007f333c2e5fa0 R15: 00007ffd1a3867e8 [ 174.433948][T10891] [ 174.774925][ T3410] Process accounting resumed [ 175.250770][T10924] lo speed is unknown, defaulting to 1000 [ 175.257417][T10924] lo speed is unknown, defaulting to 1000 [ 175.940407][T10937] netlink: 'syz.5.2422': attribute type 39 has an invalid length. [ 176.065790][T10948] gre0: left promiscuous mode [ 176.102987][T10954] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2428'. [ 176.132557][T10954] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 176.185764][T10945] syz_tun (unregistering): left allmulticast mode [ 176.295450][T10971] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 176.351554][T10976] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 176.376207][T10977] loop8: detected capacity change from 0 to 128 [ 176.494296][T10988] 0ªî{X¹¦: left allmulticast mode [ 176.524524][T10988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2441'. [ 176.537040][T10988] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 176.560122][T10977] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 176.573050][T10977] ext4 filesystem being mounted at /354/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.609013][T10996] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 176.609991][ T6235] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 176.687776][T11002] loop2: detected capacity change from 0 to 256 [ 176.695326][T11002] vfat: Unknown parameter 'ÿ00000000000000000008ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ' [ 176.898631][T11011] loop2: detected capacity change from 0 to 2048 [ 176.933230][T11011] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 177.170396][T11019] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 177.250387][T11010] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 177.308872][T11010] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 404 with error 28 [ 177.321431][T11010] EXT4-fs (loop2): This should not happen!! Data will be lost [ 177.321431][T11010] [ 177.331184][T11010] EXT4-fs (loop2): Total free blocks count 0 [ 177.337202][T11010] EXT4-fs (loop2): Free/Dirty block details [ 177.343182][T11010] EXT4-fs (loop2): free_blocks=2415919104 [ 177.348975][T11010] EXT4-fs (loop2): dirty_blocks=416 [ 177.354363][T11010] EXT4-fs (loop2): Block reservation details [ 177.360391][T11010] EXT4-fs (loop2): i_reserved_data_blocks=26 [ 177.608029][T11045] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2463'. [ 177.702639][T11053] netlink: 'syz.8.2466': attribute type 4 has an invalid length. [ 177.733510][ T3487] lo speed is unknown, defaulting to 1000 [ 177.739373][ T3487] syz0: Port: 1 Link DOWN [ 177.950810][T11069] loop8: detected capacity change from 0 to 256 [ 177.960953][T11069] vfat: Unknown parameter 'ÿ00000000000000000008ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ' [ 177.971123][ T8185] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 118 with error 28 [ 178.087664][T11075] loop8: detected capacity change from 0 to 128 [ 178.242979][T11085] lo speed is unknown, defaulting to 1000 [ 178.249581][T11085] lo speed is unknown, defaulting to 1000 [ 178.406413][T11102] FAULT_INJECTION: forcing a failure. [ 178.406413][T11102] name failslab, interval 1, probability 0, space 0, times 0 [ 178.419100][T11102] CPU: 1 UID: 0 PID: 11102 Comm: syz.8.2483 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 178.419138][T11102] Tainted: [W]=WARN [ 178.419168][T11102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 178.419184][T11102] Call Trace: [ 178.419191][T11102] [ 178.419200][T11102] __dump_stack+0x1d/0x30 [ 178.419231][T11102] dump_stack_lvl+0x95/0xd0 [ 178.419260][T11102] dump_stack+0x15/0x1b [ 178.419285][T11102] should_fail_ex+0x265/0x280 [ 178.419386][T11102] should_failslab+0x8c/0xb0 [ 178.419481][T11102] kmem_cache_alloc_noprof+0x69/0x4b0 [ 178.419506][T11102] ? skb_clone+0x151/0x1f0 [ 178.419542][T11102] skb_clone+0x151/0x1f0 [ 178.419569][T11102] dev_queue_xmit_nit+0x13e/0x520 [ 178.419594][T11102] ? validate_xmit_xfrm+0x43/0x7a0 [ 178.419713][T11102] dev_hard_start_xmit+0xd3/0x3e0 [ 178.419747][T11102] __dev_queue_xmit+0xdc9/0x1ee0 [ 178.419796][T11102] ? __dev_queue_xmit+0x148/0x1ee0 [ 178.419828][T11102] ? refill_obj_stock+0x254/0x2e0 [ 178.419947][T11102] __netlink_deliver_tap+0x3c3/0x500 [ 178.419993][T11102] netlink_unicast+0x66b/0x690 [ 178.420031][T11102] netlink_sendmsg+0x58b/0x6b0 [ 178.420101][T11102] ? __pfx_netlink_sendmsg+0x10/0x10 [ 178.420152][T11102] __sock_sendmsg+0x145/0x180 [ 178.420175][T11102] ____sys_sendmsg+0x31e/0x4a0 [ 178.420284][T11102] ___sys_sendmsg+0x17b/0x1d0 [ 178.420340][T11102] __x64_sys_sendmsg+0xd4/0x160 [ 178.420380][T11102] x64_sys_call+0x17ba/0x3000 [ 178.420478][T11102] do_syscall_64+0xca/0x2b0 [ 178.420521][T11102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.420547][T11102] RIP: 0033:0x7f333c08f749 [ 178.420565][T11102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.420612][T11102] RSP: 002b:00007f333aaf7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 178.420637][T11102] RAX: ffffffffffffffda RBX: 00007f333c2e5fa0 RCX: 00007f333c08f749 [ 178.420652][T11102] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 178.420665][T11102] RBP: 00007f333aaf7090 R08: 0000000000000000 R09: 0000000000000000 [ 178.420680][T11102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.420694][T11102] R13: 00007f333c2e6038 R14: 00007f333c2e5fa0 R15: 00007ffd1a3867e8 [ 178.420797][T11102] [ 178.791974][T11107] netlink: 'syz.8.2487': attribute type 39 has an invalid length. [ 178.848973][ T29] kauditd_printk_skb: 494 callbacks suppressed [ 178.848991][ T29] audit: type=1326 audit(1767702607.410:16175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11114 comm="syz.8.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f333c08f749 code=0x7ffc0000 [ 179.124101][T11120] FAULT_INJECTION: forcing a failure. [ 179.124101][T11120] name failslab, interval 1, probability 0, space 0, times 0 [ 179.141036][T11120] CPU: 0 UID: 0 PID: 11120 Comm: syz.8.2490 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 179.141156][T11120] Tainted: [W]=WARN [ 179.141163][T11120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 179.141176][T11120] Call Trace: [ 179.141182][T11120] [ 179.141190][T11120] __dump_stack+0x1d/0x30 [ 179.141216][T11120] dump_stack_lvl+0x95/0xd0 [ 179.141280][T11120] dump_stack+0x15/0x1b [ 179.141302][T11120] should_fail_ex+0x265/0x280 [ 179.141330][T11120] should_failslab+0x8c/0xb0 [ 179.141353][T11120] __kmalloc_node_noprof+0xbe/0x5c0 [ 179.141425][T11120] ? qdisc_alloc+0x65/0x410 [ 179.141462][T11120] qdisc_alloc+0x65/0x410 [ 179.141495][T11120] ? nla_strcmp+0xc3/0xe0 [ 179.141579][T11120] qdisc_create+0xf5/0x9e0 [ 179.141652][T11120] tc_modify_qdisc+0xf9c/0x1480 [ 179.141683][T11120] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 179.141705][T11120] rtnetlink_rcv_msg+0x65a/0x6d0 [ 179.141768][T11120] netlink_rcv_skb+0x123/0x220 [ 179.141894][T11120] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 179.141965][T11120] rtnetlink_rcv+0x1c/0x30 [ 179.141998][T11120] netlink_unicast+0x5c0/0x690 [ 179.142061][T11120] netlink_sendmsg+0x58b/0x6b0 [ 179.142104][T11120] ? __pfx_netlink_sendmsg+0x10/0x10 [ 179.142230][T11120] __sock_sendmsg+0x145/0x180 [ 179.142270][T11120] ____sys_sendmsg+0x31e/0x4a0 [ 179.142301][T11120] ___sys_sendmsg+0x17b/0x1d0 [ 179.142362][T11120] __x64_sys_sendmsg+0xd4/0x160 [ 179.142476][T11120] x64_sys_call+0x17ba/0x3000 [ 179.142509][T11120] do_syscall_64+0xca/0x2b0 [ 179.142557][T11120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.142583][T11120] RIP: 0033:0x7f333c08f749 [ 179.142602][T11120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.142625][T11120] RSP: 002b:00007f333aaf7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 179.142650][T11120] RAX: ffffffffffffffda RBX: 00007f333c2e5fa0 RCX: 00007f333c08f749 [ 179.142690][T11120] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000006 [ 179.142702][T11120] RBP: 00007f333aaf7090 R08: 0000000000000000 R09: 0000000000000000 [ 179.142714][T11120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.142760][T11120] R13: 00007f333c2e6038 R14: 00007f333c2e5fa0 R15: 00007ffd1a3867e8 [ 179.142787][T11120] [ 179.631258][ T29] audit: type=1326 audit(1767702607.452:16176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11114 comm="syz.8.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f333c08f749 code=0x7ffc0000 [ 179.655111][ T29] audit: type=1326 audit(1767702607.452:16177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11114 comm="syz.8.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f333c08f749 code=0x7ffc0000 [ 179.678734][ T29] audit: type=1326 audit(1767702607.452:16178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11114 comm="syz.8.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f333c08f749 code=0x7ffc0000 [ 179.702696][ T29] audit: type=1326 audit(1767702607.599:16179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11114 comm="syz.8.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f333c08f749 code=0x7ffc0000 [ 179.726332][ T29] audit: type=1326 audit(1767702607.599:16180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11114 comm="syz.8.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f333c08f749 code=0x7ffc0000 [ 179.750212][ T29] audit: type=1326 audit(1767702607.599:16181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11114 comm="syz.8.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f333c08f749 code=0x7ffc0000 [ 179.773810][ T29] audit: type=1326 audit(1767702607.599:16182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11114 comm="syz.8.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f333c08f749 code=0x7ffc0000 [ 179.797453][ T29] audit: type=1326 audit(1767702607.599:16183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11114 comm="syz.8.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f333c08f749 code=0x7ffc0000 [ 179.821192][ T29] audit: type=1326 audit(1767702607.599:16184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11114 comm="syz.8.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f333c08f749 code=0x7ffc0000 [ 179.938254][T11137] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2498'. [ 179.956771][T11133] loop8: detected capacity change from 0 to 512 [ 179.963867][T11133] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 179.985872][T11133] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #16: comm syz.8.2495: invalid indirect mapped block 4294967295 (level 0) [ 180.000574][T11133] EXT4-fs (loop8): Remounting filesystem read-only [ 180.007363][T11133] EXT4-fs (loop8): 1 orphan inode deleted [ 180.013214][T11133] EXT4-fs (loop8): 1 truncate cleaned up [ 180.019724][T11133] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.046156][ T6235] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.283383][T11168] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2508'. [ 180.502514][T11188] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2517'. [ 180.516402][T11188] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2517'. [ 180.542537][T11188] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2517'. [ 180.597068][T11198] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2521'. [ 180.606028][T11198] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2521'. [ 180.619169][T11200] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2520'. [ 180.715899][T11205] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 180.744427][T11211] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2523'. [ 180.754223][T11211] veth1_macvtap: left promiscuous mode [ 180.866027][T11220] FAULT_INJECTION: forcing a failure. [ 180.866027][T11220] name failslab, interval 1, probability 0, space 0, times 0 [ 180.878756][T11220] CPU: 0 UID: 0 PID: 11220 Comm: syz.0.2528 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 180.878794][T11220] Tainted: [W]=WARN [ 180.878802][T11220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 180.878819][T11220] Call Trace: [ 180.878833][T11220] [ 180.878844][T11220] __dump_stack+0x1d/0x30 [ 180.878870][T11220] dump_stack_lvl+0x95/0xd0 [ 180.878917][T11220] dump_stack+0x15/0x1b [ 180.878943][T11220] should_fail_ex+0x265/0x280 [ 180.878974][T11220] should_failslab+0x8c/0xb0 [ 180.879002][T11220] __kmalloc_cache_noprof+0x65/0x4c0 [ 180.879033][T11220] ? ftrace_profile_set_filter+0xc2/0x1b0 [ 180.879066][T11220] ftrace_profile_set_filter+0xc2/0x1b0 [ 180.879163][T11220] perf_ioctl+0x7b3/0x12e0 [ 180.879244][T11220] ? ioctl_has_perm+0x287/0x2a0 [ 180.879276][T11220] ? do_vfs_ioctl+0x866/0xe10 [ 180.879383][T11220] ? selinux_file_ioctl+0x308/0x3a0 [ 180.879415][T11220] ? __fget_files+0x184/0x1c0 [ 180.879466][T11220] ? __pfx_perf_ioctl+0x10/0x10 [ 180.879498][T11220] __se_sys_ioctl+0xce/0x140 [ 180.879578][T11220] __x64_sys_ioctl+0x43/0x50 [ 180.879614][T11220] x64_sys_call+0x14b0/0x3000 [ 180.879695][T11220] do_syscall_64+0xca/0x2b0 [ 180.879738][T11220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.879759][T11220] RIP: 0033:0x7f26ae08f749 [ 180.879850][T11220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.879871][T11220] RSP: 002b:00007f26acaef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 180.879890][T11220] RAX: ffffffffffffffda RBX: 00007f26ae2e5fa0 RCX: 00007f26ae08f749 [ 180.879902][T11220] RDX: 0000200000000000 RSI: 0000000040082406 RDI: 0000000000000003 [ 180.879916][T11220] RBP: 00007f26acaef090 R08: 0000000000000000 R09: 0000000000000000 [ 180.879931][T11220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.880013][T11220] R13: 00007f26ae2e6038 R14: 00007f26ae2e5fa0 R15: 00007fff88880268 [ 180.880038][T11220] [ 181.259737][T11244] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 181.314401][T11244] lo speed is unknown, defaulting to 1000 [ 181.320908][T11244] lo speed is unknown, defaulting to 1000 [ 181.513307][T11248] hub 9-0:1.0: USB hub found [ 181.518087][T11248] hub 9-0:1.0: 8 ports detected [ 181.749426][T11263] loop5: detected capacity change from 0 to 512 [ 181.756650][T11263] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 181.768978][T11263] EXT4-fs (loop5): 1 truncate cleaned up [ 181.775197][T11263] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.812055][ T3581] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.923123][T11270] IPv6: Can't replace route, no match found [ 182.181083][T11288] netlink: 'syz.5.2555': attribute type 21 has an invalid length. [ 182.216576][T11293] FAULT_INJECTION: forcing a failure. [ 182.216576][T11293] name failslab, interval 1, probability 0, space 0, times 0 [ 182.229370][T11293] CPU: 0 UID: 0 PID: 11293 Comm: syz.0.2556 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 182.229437][T11293] Tainted: [W]=WARN [ 182.229444][T11293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 182.229456][T11293] Call Trace: [ 182.229463][T11293] [ 182.229472][T11293] __dump_stack+0x1d/0x30 [ 182.229502][T11293] dump_stack_lvl+0x95/0xd0 [ 182.229530][T11293] dump_stack+0x15/0x1b [ 182.229616][T11293] should_fail_ex+0x265/0x280 [ 182.229695][T11293] should_failslab+0x8c/0xb0 [ 182.229718][T11293] kmem_cache_alloc_noprof+0x69/0x4b0 [ 182.229744][T11293] ? __anon_vma_prepare+0xcd/0x2f0 [ 182.229801][T11293] __anon_vma_prepare+0xcd/0x2f0 [ 182.229863][T11293] do_wp_page+0x18ee/0x2510 [ 182.229921][T11293] ? css_rstat_updated+0xbb/0x280 [ 182.229964][T11293] ? __rcu_read_lock+0x37/0x50 [ 182.229991][T11293] handle_mm_fault+0x7b0/0x2c60 [ 182.230086][T11293] do_user_addr_fault+0x630/0x1080 [ 182.230127][T11293] exc_page_fault+0x62/0xa0 [ 182.230162][T11293] asm_exc_page_fault+0x26/0x30 [ 182.230182][T11293] RIP: 0033:0x7f26adf50943 [ 182.230198][T11293] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 182.230216][T11293] RSP: 002b:00007f26acacd4a0 EFLAGS: 00010202 [ 182.230232][T11293] RAX: 0000000000000400 RBX: 00007f26acacd540 RCX: 00007f26a46ae000 [ 182.230305][T11293] RDX: 00007f26acacd6e0 RSI: 0000000000000000 RDI: 00007f26acacd5e0 [ 182.230319][T11293] RBP: 00000000000000f9 R08: 0000000000000008 R09: 00000000000000a7 [ 182.230331][T11293] R10: 00000000000000bc R11: 00007f26acacd540 R12: 0000000000000001 [ 182.230342][T11293] R13: 00007f26ae12fc40 R14: 0000000000000020 R15: 00007f26acacd5e0 [ 182.230362][T11293] [ 182.230376][T11293] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 182.472673][T11298] __nla_validate_parse: 2 callbacks suppressed [ 182.472689][T11298] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2558'. [ 182.502454][T11300] IPv6: NLM_F_CREATE should be specified when creating new route [ 182.533550][T11298] SELinux: policydb version 398262310 does not match my version range 15-35 [ 182.544140][T11298] SELinux: failed to load policy [ 182.571209][T11300] netlink: 'syz.0.2559': attribute type 4 has an invalid length. [ 182.579031][T11300] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2559'. [ 182.681095][T11300] .`: renamed from bond0 (while UP) [ 182.772797][T11313] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2563'. [ 182.878127][T11324] loop8: detected capacity change from 0 to 256 [ 182.885564][T11324] vfat: Unknown parameter 'ÿ00000000000000000008ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ' [ 182.989040][T11333] loop5: detected capacity change from 0 to 512 [ 182.996059][T11333] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 183.008492][T11333] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.2569: invalid indirect mapped block 4294967295 (level 0) [ 183.022942][T11333] EXT4-fs (loop5): Remounting filesystem read-only [ 183.029987][T11333] EXT4-fs (loop5): 1 orphan inode deleted [ 183.035803][T11333] EXT4-fs (loop5): 1 truncate cleaned up [ 183.042259][T11333] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.069038][T11337] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=65535 sclass=netlink_audit_socket pid=11337 comm=syz.0.2571 [ 183.110956][ T3581] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.266240][T11346] lo speed is unknown, defaulting to 1000 [ 183.272488][T11346] lo speed is unknown, defaulting to 1000 [ 183.663748][ T29] kauditd_printk_skb: 369 callbacks suppressed [ 183.663763][ T29] audit: type=1326 audit(1767702612.460:16554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11355 comm="syz.0.2578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ae08f749 code=0x7ffc0000 [ 183.693764][ T29] audit: type=1326 audit(1767702612.460:16555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11355 comm="syz.0.2578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ae08f749 code=0x7ffc0000 [ 183.717576][ T29] audit: type=1326 audit(1767702612.460:16556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11355 comm="syz.0.2578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f26ae08f749 code=0x7ffc0000 [ 183.847030][ T29] audit: type=1326 audit(1767702612.576:16557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11355 comm="syz.0.2578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f26ae0865e7 code=0x7ffc0000 [ 183.870730][ T29] audit: type=1326 audit(1767702612.576:16558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11355 comm="syz.0.2578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f26ae02b829 code=0x7ffc0000 [ 183.894273][ T29] audit: type=1326 audit(1767702612.576:16559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11355 comm="syz.0.2578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f26ae0865e7 code=0x7ffc0000 [ 183.895529][T11358] netlink: 'syz.8.2579': attribute type 3 has an invalid length. [ 183.917910][ T29] audit: type=1326 audit(1767702612.576:16560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11355 comm="syz.0.2578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f26ae02b829 code=0x7ffc0000 [ 183.917951][ T29] audit: type=1326 audit(1767702612.576:16561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11355 comm="syz.0.2578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f26ae0865e7 code=0x7ffc0000 [ 183.918030][ T29] audit: type=1326 audit(1767702612.576:16562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11355 comm="syz.0.2578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f26ae02b829 code=0x7ffc0000 [ 183.996628][ T29] audit: type=1326 audit(1767702612.576:16563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11355 comm="syz.0.2578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ae08f749 code=0x7ffc0000 [ 184.023137][T11365] loop5: detected capacity change from 0 to 512 [ 184.118975][T11369] loop8: detected capacity change from 0 to 256 [ 184.147858][T11375] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2584'. [ 184.158639][T11369] vfat: Unknown parameter 'ÿ00000000000000000008ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ' [ 184.244893][T11363] lo speed is unknown, defaulting to 1000 [ 184.267857][T11363] lo speed is unknown, defaulting to 1000 [ 184.330924][T11392] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2589'. [ 184.349722][T11395] 9p: Bad value for 'wfdno' [ 184.361038][T11392] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2589'. [ 184.561213][T11408] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=65535 sclass=netlink_audit_socket pid=11408 comm=syz.6.2594 [ 184.732101][T11419] loop8: detected capacity change from 0 to 128 [ 184.866148][T11419] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 184.890035][T11419] ext4 filesystem being mounted at /385/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.926915][ T6235] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 184.941395][T11437] FAULT_INJECTION: forcing a failure. [ 184.941395][T11437] name failslab, interval 1, probability 0, space 0, times 0 [ 184.954193][T11437] CPU: 1 UID: 0 PID: 11437 Comm: syz.5.2604 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 184.954231][T11437] Tainted: [W]=WARN [ 184.954238][T11437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 184.954316][T11437] Call Trace: [ 184.954325][T11437] [ 184.954337][T11437] __dump_stack+0x1d/0x30 [ 184.954398][T11437] dump_stack_lvl+0x95/0xd0 [ 184.954421][T11437] dump_stack+0x15/0x1b [ 184.954440][T11437] should_fail_ex+0x265/0x280 [ 184.954497][T11437] should_failslab+0x8c/0xb0 [ 184.954530][T11437] kmem_cache_alloc_noprof+0x69/0x4b0 [ 184.954552][T11437] ? prepare_creds+0x39/0x550 [ 184.954572][T11437] prepare_creds+0x39/0x550 [ 184.954604][T11437] __sys_setreuid+0xdc/0x520 [ 184.954637][T11437] ? __secure_computing+0x82/0x150 [ 184.954675][T11437] __x64_sys_setreuid+0x2d/0x40 [ 184.954709][T11437] x64_sys_call+0x1e45/0x3000 [ 184.954751][T11437] do_syscall_64+0xca/0x2b0 [ 184.954788][T11437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.954815][T11437] RIP: 0033:0x7fba273df749 [ 184.954831][T11437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.954923][T11437] RSP: 002b:00007fba25e1e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000071 [ 184.954967][T11437] RAX: ffffffffffffffda RBX: 00007fba27636090 RCX: 00007fba273df749 [ 184.954979][T11437] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee01 [ 184.954991][T11437] RBP: 00007fba25e1e090 R08: 0000000000000000 R09: 0000000000000000 [ 184.955003][T11437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.955015][T11437] R13: 00007fba27636128 R14: 00007fba27636090 R15: 00007ffe5c545ec8 [ 184.955036][T11437] [ 185.193061][T11440] FAULT_INJECTION: forcing a failure. [ 185.193061][T11440] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 185.206559][T11440] CPU: 1 UID: 0 PID: 11440 Comm: syz.2.2608 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 185.206600][T11440] Tainted: [W]=WARN [ 185.206659][T11440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 185.206673][T11440] Call Trace: [ 185.206680][T11440] [ 185.206688][T11440] __dump_stack+0x1d/0x30 [ 185.206717][T11440] dump_stack_lvl+0x95/0xd0 [ 185.206744][T11440] dump_stack+0x15/0x1b [ 185.206827][T11440] should_fail_ex+0x265/0x280 [ 185.206851][T11440] should_fail_alloc_page+0xf2/0x100 [ 185.206875][T11440] __alloc_frozen_pages_noprof+0x109/0x360 [ 185.206970][T11440] alloc_pages_mpol+0xb3/0x260 [ 185.207009][T11440] vma_alloc_folio_noprof+0x1aa/0x300 [ 185.207046][T11440] do_wp_page+0xf60/0x2510 [ 185.207080][T11440] ? css_rstat_updated+0xbb/0x280 [ 185.207140][T11440] ? __rcu_read_lock+0x37/0x50 [ 185.207240][T11440] handle_mm_fault+0x7b0/0x2c60 [ 185.207283][T11440] do_user_addr_fault+0x630/0x1080 [ 185.207365][T11440] ? ksys_mmap_pgoff+0xc2/0x310 [ 185.207401][T11440] exc_page_fault+0x62/0xa0 [ 185.207436][T11440] asm_exc_page_fault+0x26/0x30 [ 185.207469][T11440] RIP: 0033:0x7f2660a90943 [ 185.207489][T11440] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 185.207550][T11440] RSP: 002b:00007f265f6363f0 EFLAGS: 00010202 [ 185.207570][T11440] RAX: 00000000000ffe00 RBX: 00007f265f636490 RCX: 00007f2657217000 [ 185.207661][T11440] RDX: 00007f265f636630 RSI: 0000000000000007 RDI: 00007f265f636530 [ 185.207692][T11440] RBP: 0000000000000011 R08: 0000000000000007 R09: 0000000000000038 [ 185.207712][T11440] R10: 0000000000000048 R11: 00007f265f636490 R12: 0000000000000001 [ 185.207729][T11440] R13: 00007f2660c6fc40 R14: 0000000000000045 R15: 00007f265f636530 [ 185.207752][T11440] [ 185.207805][T11440] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 185.415700][T11445] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2610'. [ 185.440014][T11440] loop2: detected capacity change from 0 to 2048 [ 185.485074][T11445] ªªªªª: renamed from vlan0 [ 185.541315][T11455] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2613'. [ 185.601833][T11459] loop2: detected capacity change from 0 to 1024 [ 185.622471][T11459] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 185.648692][T11459] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 185.664194][T11459] EXT4-fs (loop2): orphan cleanup on readonly fs [ 185.671300][T11459] EXT4-fs error (device loop2): __ext4_get_inode_loc:4830: comm syz.2.2615: Invalid inode table block 0 in block_group 0 [ 185.679185][T11466] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2617'. [ 185.693114][T11459] EXT4-fs (loop2): Remounting filesystem read-only [ 185.699743][T11459] EXT4-fs (loop2): 1 truncate cleaned up [ 185.712406][T11459] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 185.779512][T11470] loop5: detected capacity change from 0 to 128 [ 185.837847][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.983666][T11481] netlink: 'syz.2.2622': attribute type 39 has an invalid length. [ 186.086139][T11485] loop2: detected capacity change from 0 to 256 [ 186.092879][T11485] vfat: Unknown parameter 'ÿ18446744073709551615ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ' [ 186.229064][T11470] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 186.244068][T11470] ext4 filesystem being mounted at /491/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.411916][T11499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2630'. [ 186.422588][ T3581] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 186.444624][T11499] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.2630: corrupted inode contents [ 186.445178][T11499] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #15: comm syz.2.2630: mark_inode_dirty error [ 186.445669][T11499] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.2630: corrupted inode contents [ 186.445855][T11499] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3000: inode #15: comm syz.2.2630: mark_inode_dirty error [ 186.445985][T11499] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3003: inode #15: comm syz.2.2630: mark inode dirty (error -117) [ 186.454614][T11499] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -117) [ 186.454666][T11499] EXT4-fs (loop2): 1 orphan inode deleted [ 186.455106][T11499] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.479344][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.673379][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 186.705192][T11515] netlink: 'syz.6.2634': attribute type 39 has an invalid length. [ 186.964892][T11533] set_capacity_and_notify: 1 callbacks suppressed [ 186.964912][T11533] loop5: detected capacity change from 0 to 128 [ 187.159930][ T8177] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.169827][ T8177] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.222540][T11534] lo speed is unknown, defaulting to 1000 [ 187.236021][T11534] lo speed is unknown, defaulting to 1000 [ 187.256922][ T8177] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.266771][ T8177] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.323414][ T8177] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.333370][ T8177] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.380892][T11533] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 187.381573][ T8177] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.403234][ T8177] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.407085][T11533] ext4 filesystem being mounted at /493/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.477579][ T3581] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 187.516010][T11534] chnl_net:caif_netlink_parms(): no params data found [ 187.707365][T11534] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.714645][T11534] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.722190][T11534] bridge_slave_0: entered allmulticast mode [ 187.728893][T11534] bridge_slave_0: entered promiscuous mode [ 187.735924][ T8177] bridge_slave_1: left allmulticast mode [ 187.741804][ T8177] bridge_slave_1: left promiscuous mode [ 187.747747][ T8177] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.755270][T11574] loop5: detected capacity change from 0 to 512 [ 187.762031][T11574] EXT4-fs: Ignoring removed oldalloc option [ 187.768263][ T8177] bridge_slave_0: left allmulticast mode [ 187.774149][ T8177] bridge_slave_0: left promiscuous mode [ 187.779999][ T8177] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.788525][T11574] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 187.817228][T11574] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 187.841208][T11574] EXT4-fs (loop5): mount failed [ 187.865362][T11574] __nla_validate_parse: 7 callbacks suppressed [ 187.865378][T11574] netlink: 24 bytes leftover after parsing attributes in process `gtp'. [ 187.966548][T11454] loop8: detected capacity change from 0 to 1024 [ 187.979205][T11454] EXT4-fs: Ignoring removed bh option [ 187.985541][T11454] EXT4-fs (loop8): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 188.033976][T11584] loop5: detected capacity change from 0 to 256 [ 188.041084][T11584] vfat: Unknown parameter 'ÿ18446744073709551615ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ' [ 188.069112][T11454] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.088368][T11586] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 188.096567][T11586] vhci_hcd vhci_hcd.2: invalid port number 96 [ 188.102764][T11586] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 188.240701][ T8177] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.255016][ T8177] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.277467][ T8177] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 188.296626][ T8177] bond0 (unregistering): (slave team0): Releasing backup interface [ 188.312294][ T8177] bond0 (unregistering): Released all slaves [ 188.321187][ T8177] bond1 (unregistering): Released all slaves [ 188.328591][ T6235] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.338206][T11534] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.345479][T11534] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.353543][T11534] bridge_slave_1: entered allmulticast mode [ 188.360482][T11534] bridge_slave_1: entered promiscuous mode [ 188.379609][ T8177] tipc: Left network mode [ 188.430387][T11534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.463564][ T8177] veth1_macvtap: left promiscuous mode [ 188.469925][T11607] siw: device registration error -23 [ 188.475417][ T8177] veth0_macvtap: left promiscuous mode [ 188.512328][ T29] kauditd_printk_skb: 309 callbacks suppressed [ 188.512344][ T29] audit: type=1326 audit(1767702617.552:16870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11609 comm="syz.2.2664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2660bcf749 code=0x7ffc0000 [ 188.558397][ T29] audit: type=1326 audit(1767702617.563:16871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11609 comm="syz.2.2664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2660bcf749 code=0x7ffc0000 [ 188.582146][ T29] audit: type=1326 audit(1767702617.563:16872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11609 comm="syz.2.2664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2660bcf749 code=0x7ffc0000 [ 188.605937][ T29] audit: type=1326 audit(1767702617.563:16873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11609 comm="syz.2.2664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2660bcf749 code=0x7ffc0000 [ 188.629571][ T29] audit: type=1326 audit(1767702617.563:16874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11609 comm="syz.2.2664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2660bcf749 code=0x7ffc0000 [ 188.653299][ T29] audit: type=1326 audit(1767702617.563:16875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11609 comm="syz.2.2664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2660bcf749 code=0x7ffc0000 [ 188.677062][ T29] audit: type=1326 audit(1767702617.563:16876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11609 comm="syz.2.2664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2660bcf749 code=0x7ffc0000 [ 188.700744][ T29] audit: type=1326 audit(1767702617.563:16877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11609 comm="syz.2.2664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2660bcf749 code=0x7ffc0000 [ 188.724842][ T29] audit: type=1326 audit(1767702617.563:16878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11609 comm="syz.2.2664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2660bcf749 code=0x7ffc0000 [ 188.748684][ T29] audit: type=1326 audit(1767702617.563:16879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11609 comm="syz.2.2664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2660bcf749 code=0x7ffc0000 [ 188.821315][ T8177] team0 (unregistering): Port device team_slave_1 removed [ 188.837609][ T8177] team0 (unregistering): Port device team_slave_0 removed [ 188.900553][T11534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.944801][T11631] loop2: detected capacity change from 0 to 128 [ 188.962341][T11534] team0: Port device team_slave_0 added [ 188.975998][T11534] team0: Port device team_slave_1 added [ 188.999140][T11631] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 189.022818][T11631] ext4 filesystem being mounted at /538/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.064051][T11534] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.071104][T11534] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.097199][T11534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.379632][T11647] futex_wake_op: syz.8.2677 tries to shift op by 32; fix this program [ 189.522174][T11534] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.529179][T11534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.555214][T11534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.595153][T11534] hsr_slave_0: entered promiscuous mode [ 189.601535][T11534] hsr_slave_1: entered promiscuous mode [ 189.611153][T11534] debugfs: 'hsr0' already exists in 'hsr' [ 189.617069][T11534] Cannot create hsr debugfs directory [ 189.676900][ T3316] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 189.916924][T11534] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 189.936393][T11534] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 189.953257][T11534] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 189.970748][T11663] tipc: Started in network mode [ 189.975673][T11663] tipc: Node identity ac14140f, cluster identity 4711 [ 189.997979][T11663] tipc: New replicast peer: 255.255.255.255 [ 190.004262][T11663] tipc: Enabled bearer , priority 10 [ 190.014605][T11534] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 190.107446][T11682] batadv_slave_0: entered promiscuous mode [ 190.116961][T11677] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48933 sclass=netlink_route_socket pid=11677 comm=syz.0.2683 [ 190.136332][T11680] batadv_slave_0: left promiscuous mode [ 190.143701][T11534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.155949][T11664] FAULT_INJECTION: forcing a failure. [ 190.155949][T11664] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.169306][T11664] CPU: 1 UID: 0 PID: 11664 Comm: syz.5.2681 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 190.169340][T11664] Tainted: [W]=WARN [ 190.169354][T11664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 190.169370][T11664] Call Trace: [ 190.169378][T11664] [ 190.169386][T11664] __dump_stack+0x1d/0x30 [ 190.169413][T11664] dump_stack_lvl+0x95/0xd0 [ 190.169547][T11664] dump_stack+0x15/0x1b [ 190.169572][T11664] should_fail_ex+0x265/0x280 [ 190.169599][T11664] should_fail+0xb/0x20 [ 190.169624][T11664] should_fail_usercopy+0x1a/0x20 [ 190.169650][T11664] fpu__restore_sig+0x12d/0xaa0 [ 190.169709][T11664] ? kmem_cache_free+0xe3/0x3a0 [ 190.169809][T11664] ? should_fail_ex+0xdb/0x280 [ 190.169840][T11664] __ia32_sys_rt_sigreturn+0x29f/0x350 [ 190.169885][T11664] x64_sys_call+0x274a/0x3000 [ 190.169918][T11664] do_syscall_64+0xca/0x2b0 [ 190.169999][T11664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.170090][T11664] RIP: 0033:0x7fba273df749 [ 190.170106][T11664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.170125][T11664] RSP: 002b:00007fba25e3f038 EFLAGS: 00000246 [ 190.170142][T11664] RAX: 0000000000000001 RBX: 00007fba27635fa0 RCX: 00007fba273df749 [ 190.170212][T11664] RDX: 0000000000000001 RSI: 0000200000000540 RDI: 0000000000000005 [ 190.170225][T11664] RBP: 00007fba25e3f090 R08: 0000000000000000 R09: 0000000000000000 [ 190.170236][T11664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 190.170252][T11664] R13: 00007fba27636038 R14: 00007fba27635fa0 R15: 00007ffe5c545ec8 [ 190.170269][T11534] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.170287][T11664] [ 190.356016][ T8177] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.363185][ T8177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.374690][T11687] loop5: detected capacity change from 0 to 256 [ 190.405732][ T8177] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.413007][ T8177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.425364][T11687] vfat: Unknown parameter 'ÿ18446744073709551615ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ' [ 190.454472][T11690] loop8: detected capacity change from 0 to 1024 [ 190.461812][T11690] EXT4-fs: Ignoring removed nobh option [ 190.467536][T11690] EXT4-fs: inline encryption not supported [ 190.504767][T11694] netlink: 'syz.2.2689': attribute type 39 has an invalid length. [ 190.514342][T11690] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.567849][T11534] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.579353][T11690] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4215: comm syz.8.2688: Allocating blocks 385-513 which overlap fs metadata [ 190.606761][T11704] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=65535 sclass=netlink_audit_socket pid=11704 comm=syz.0.2691 [ 190.666931][T11712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2695'. [ 190.676014][T11712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2695'. [ 190.685049][T11690] EXT4-fs (loop8): pa ffff888107641ee0: logic 16, phys. 129, len 24 [ 190.685107][T11690] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 190.693737][T11690] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 190.715747][T11690] EXT4-fs (loop8): This should not happen!! Data will be lost [ 190.715747][T11690] [ 190.725528][T11690] EXT4-fs (loop8): Total free blocks count 0 [ 190.731749][T11690] EXT4-fs (loop8): Free/Dirty block details [ 190.737680][T11690] EXT4-fs (loop8): free_blocks=128 [ 190.743067][T11690] EXT4-fs (loop8): dirty_blocks=0 [ 190.748150][T11690] EXT4-fs (loop8): Block reservation details [ 190.754228][T11690] EXT4-fs (loop8): i_reserved_data_blocks=0 [ 190.902866][T11729] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=65535 sclass=netlink_audit_socket pid=11729 comm=syz.0.2698 [ 190.967223][T11732] netlink: 'syz.8.2699': attribute type 39 has an invalid length. [ 191.123448][T11735] lo speed is unknown, defaulting to 1000 [ 191.130562][T11735] lo speed is unknown, defaulting to 1000 [ 191.346475][T11739] FAULT_INJECTION: forcing a failure. [ 191.346475][T11739] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.359773][T11739] CPU: 0 UID: 0 PID: 11739 Comm: syz.8.2701 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 191.359855][T11739] Tainted: [W]=WARN [ 191.359864][T11739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 191.359880][T11739] Call Trace: [ 191.359887][T11739] [ 191.359895][T11739] __dump_stack+0x1d/0x30 [ 191.359923][T11739] dump_stack_lvl+0x95/0xd0 [ 191.359952][T11739] dump_stack+0x15/0x1b [ 191.360039][T11739] should_fail_ex+0x265/0x280 [ 191.360126][T11739] should_fail+0xb/0x20 [ 191.360148][T11739] should_fail_usercopy+0x1a/0x20 [ 191.360175][T11739] _copy_from_user+0x1c/0xb0 [ 191.360211][T11739] kstrtouint_from_user+0x69/0xf0 [ 191.360238][T11739] ? 0xffffffff81000000 [ 191.360256][T11739] ? selinux_file_permission+0x1e2/0x320 [ 191.360334][T11739] proc_fail_nth_write+0x50/0x160 [ 191.360363][T11739] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 191.360391][T11739] vfs_write+0x269/0x960 [ 191.360481][T11739] ? vfs_read+0x4e6/0x770 [ 191.360502][T11739] ? __rcu_read_unlock+0x4f/0x70 [ 191.360528][T11739] ? __fget_files+0x184/0x1c0 [ 191.360555][T11739] ? mutex_lock+0x58/0x90 [ 191.360581][T11739] ksys_write+0xda/0x1a0 [ 191.360603][T11739] __x64_sys_write+0x40/0x50 [ 191.360688][T11739] x64_sys_call+0x2847/0x3000 [ 191.360717][T11739] do_syscall_64+0xca/0x2b0 [ 191.360763][T11739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.360791][T11739] RIP: 0033:0x7f333c08e1ff [ 191.360807][T11739] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 191.360891][T11739] RSP: 002b:00007f333aaf7030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 191.360911][T11739] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f333c08e1ff [ 191.360923][T11739] RDX: 0000000000000001 RSI: 00007f333aaf70a0 RDI: 0000000000000004 [ 191.360936][T11739] RBP: 00007f333aaf7090 R08: 0000000000000000 R09: 0000000000000000 [ 191.360952][T11739] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 191.360968][T11739] R13: 00007f333c2e6038 R14: 00007f333c2e5fa0 R15: 00007ffd1a3867e8 [ 191.361063][T11739] [ 191.739276][ T3391] tipc: Node number set to 2886997007 [ 191.753140][T11534] veth0_vlan: entered promiscuous mode [ 191.761021][T11744] loop8: detected capacity change from 0 to 128 [ 191.763570][T11534] veth1_vlan: entered promiscuous mode [ 191.795677][T11744] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 191.809187][T11744] ext4 filesystem being mounted at /401/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.837100][T11534] veth0_macvtap: entered promiscuous mode [ 191.867818][T11534] veth1_macvtap: entered promiscuous mode [ 191.894978][T11534] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.921826][T11755] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2707'. [ 191.974097][T11534] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.999617][ T8177] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.028541][ T8177] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.084520][T11768] netlink: 'syz.5.2710': attribute type 39 has an invalid length. [ 192.085757][ T6235] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 192.109321][ T8177] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.118326][T11769] tipc: Enabled bearer , priority 0 [ 192.153375][ T8177] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.178146][T11779] netlink: 20 bytes leftover after parsing attributes in process `+°ç@'. [ 192.198953][T11779] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 192.199150][T11761] tipc: Resetting bearer [ 192.217871][T11781] loop5: detected capacity change from 0 to 256 [ 192.224430][T11781] vfat: Unknown parameter 'ÿ18446744073709551615ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ' [ 192.475696][T11761] tipc: Disabling bearer [ 192.477824][T11788] 9p: Bad value for 'wfdno' [ 192.568265][T11797] loop5: detected capacity change from 0 to 128 [ 192.573448][T11798] loop2: detected capacity change from 0 to 256 [ 192.680322][T11806] netlink: 'syz.6.2721': attribute type 39 has an invalid length. [ 192.694134][T11808] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 192.702719][T11808] vhci_hcd vhci_hcd.2: invalid port number 96 [ 192.708832][T11808] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 192.771587][T11810] loop8: detected capacity change from 0 to 2048 [ 192.844527][T11816] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 192.866732][T11810] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 193.351012][T11821] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 193.423020][T11821] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 88 with error 28 [ 193.435417][T11821] EXT4-fs (loop8): This should not happen!! Data will be lost [ 193.435417][T11821] [ 193.445117][T11821] EXT4-fs (loop8): Total free blocks count 0 [ 193.451158][T11821] EXT4-fs (loop8): Free/Dirty block details [ 193.457119][T11821] EXT4-fs (loop8): free_blocks=2415919104 [ 193.462867][T11821] EXT4-fs (loop8): dirty_blocks=96 [ 193.468038][T11821] EXT4-fs (loop8): Block reservation details [ 193.474040][T11821] EXT4-fs (loop8): i_reserved_data_blocks=6 [ 193.597156][T11828] 9p: Bad value for 'wfdno' [ 193.641659][T11832] cgroup: release_agent respecified [ 193.684612][ T29] kauditd_printk_skb: 419 callbacks suppressed [ 193.684632][ T29] audit: type=1326 audit(1767702622.991:17299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11831 comm="syz.2.2731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2660bcf749 code=0x7ffc0000 [ 193.749275][ T29] audit: type=1326 audit(1767702622.991:17300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11831 comm="syz.2.2731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f2660bcf749 code=0x7ffc0000 [ 193.773127][ T29] audit: type=1326 audit(1767702622.991:17301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11831 comm="syz.2.2731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2660bcf749 code=0x7ffc0000 [ 193.801970][T11837] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.864992][T11837] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.961801][T11837] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.017906][T11851] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2734'. [ 194.045662][ T8178] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 88 with error 28 [ 194.059209][T11851] bond0: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 194.070941][T11851] bond0: (slave ip6tnl1): Error -95 calling set_mac_address [ 194.081927][ T8187] bridge_slave_1: left allmulticast mode [ 194.087657][ T8187] bridge_slave_1: left promiscuous mode [ 194.093532][ T8187] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.103913][ T8187] bridge_slave_0: left allmulticast mode [ 194.109611][ T8187] bridge_slave_0: left promiscuous mode [ 194.115398][ T8187] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.229631][ T8187] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 194.244483][ T8187] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 194.254993][ T8187] bond0 (unregistering): Released all slaves [ 194.268669][ T8187] bond1 (unregistering): Released all slaves [ 194.278407][T11835] lo speed is unknown, defaulting to 1000 [ 194.285767][T11837] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.306291][T11835] lo speed is unknown, defaulting to 1000 [ 194.319160][ T8187] tipc: Left network mode [ 194.402425][ T8176] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.420696][ T8187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.483570][T11871] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=65535 sclass=netlink_audit_socket pid=11871 comm=syz.8.2740 [ 194.508445][ T8186] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.525061][ T8186] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.561538][ T8186] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.581117][T11835] chnl_net:caif_netlink_parms(): no params data found [ 194.656762][T11835] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.663894][T11835] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.671246][T11835] bridge_slave_0: entered allmulticast mode [ 194.681523][T11835] bridge_slave_0: entered promiscuous mode [ 194.694618][ T8187] IPVS: stop unused estimator thread 0... [ 194.700770][ T29] audit: type=1326 audit(1767702624.041:17302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11884 comm="syz.0.2744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ae08f749 code=0x7ffc0000 [ 194.724508][ T29] audit: type=1326 audit(1767702624.041:17303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11884 comm="syz.0.2744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f26ae08f749 code=0x7ffc0000 [ 194.748706][ T29] audit: type=1326 audit(1767702624.051:17304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11884 comm="syz.0.2744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ae08f749 code=0x7ffc0000 [ 194.773653][ T29] audit: type=1326 audit(1767702624.051:17305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11884 comm="syz.0.2744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ae08f749 code=0x7ffc0000 [ 194.797334][ T29] audit: type=1326 audit(1767702624.051:17306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11884 comm="syz.0.2744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f26ae08f749 code=0x7ffc0000 [ 194.822346][T11835] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.830075][T11835] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.840934][T11835] bridge_slave_1: entered allmulticast mode [ 194.847851][T11835] bridge_slave_1: entered promiscuous mode [ 194.862012][ T29] audit: type=1326 audit(1767702624.051:17307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11884 comm="syz.0.2744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ae08f749 code=0x7ffc0000 [ 194.885857][ T29] audit: type=1326 audit(1767702624.051:17308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11884 comm="syz.0.2744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ae08f749 code=0x7ffc0000 [ 194.922852][T11835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.933784][T11835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.970386][T11835] team0: Port device team_slave_0 added [ 194.982237][T11835] team0: Port device team_slave_1 added [ 195.007221][T11835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.014431][T11835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.040903][T11835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.053546][T11835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.060730][T11835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.086833][T11835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.117870][T11895] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=65535 sclass=netlink_audit_socket pid=11895 comm=syz.2.2747 [ 195.167950][T11835] hsr_slave_0: entered promiscuous mode [ 195.174434][T11835] hsr_slave_1: entered promiscuous mode [ 195.180979][T11835] debugfs: 'hsr0' already exists in 'hsr' [ 195.186764][T11835] Cannot create hsr debugfs directory [ 195.232694][T11898] 9p: Bad value for 'wfdno' [ 195.342441][T11907] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=65535 sclass=netlink_audit_socket pid=11907 comm=syz.2.2751 [ 195.399770][T11912] 9p: Bad value for 'wfdno' [ 195.554568][T11835] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 195.565158][T11835] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 195.575123][T11835] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 195.597788][T11835] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 195.656908][T11835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.680717][T11835] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.695513][ T8187] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.702802][ T8187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.755036][ T8187] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.762251][ T8187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.876021][T11953] 9p: Bad value for 'wfdno' [ 195.899052][T11835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.000474][T11966] loop6: detected capacity change from 0 to 256 [ 196.016090][T11966] vfat: Unknown parameter 'ÿ18446744073709551615ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ' [ 196.021596][T11835] veth0_vlan: entered promiscuous mode [ 196.043227][T11835] veth1_vlan: entered promiscuous mode [ 196.062237][T11835] veth0_macvtap: entered promiscuous mode [ 196.095455][T11972] syz_tun: left promiscuous mode [ 196.104471][T11972] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.111776][T11972] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.123832][T11972] $Hÿ: left promiscuous mode [ 196.128664][T11972] bond_slave_0: left promiscuous mode [ 196.134174][T11972] bond_slave_1: left promiscuous mode [ 196.249186][T11972] gtp0: left promiscuous mode [ 196.265039][ T31] netdevsim netdevsim8 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.276707][ T31] netdevsim netdevsim8 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.287472][T11835] veth1_macvtap: entered promiscuous mode [ 196.315044][ T31] netdevsim netdevsim8 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.342190][T11835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.372838][ T31] netdevsim netdevsim8 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.386131][T11835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.422052][ T8178] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.450814][ T8178] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.484220][ T8178] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.493391][ T8178] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.608206][T11999] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 196.617587][T11999] vhci_hcd vhci_hcd.2: invalid port number 96 [ 196.623745][T11999] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 196.877759][T11990] lo speed is unknown, defaulting to 1000 [ 196.885679][T11990] lo speed is unknown, defaulting to 1000 [ 197.254643][T12054] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2803'. [ 197.263724][T12054] netlink: 'syz.6.2803': attribute type 30 has an invalid length. [ 197.296394][T12059] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2807'. [ 197.305477][ T8178] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.333049][ T8178] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.352936][T12061] FAULT_INJECTION: forcing a failure. [ 197.352936][T12061] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 197.364087][ T8178] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.366409][T12061] CPU: 1 UID: 0 PID: 12061 Comm: syz.0.2808 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 197.366529][T12061] Tainted: [W]=WARN [ 197.366681][T12061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 197.366722][T12061] Call Trace: [ 197.366744][T12061] [ 197.366766][T12061] __dump_stack+0x1d/0x30 [ 197.366848][T12061] dump_stack_lvl+0x95/0xd0 [ 197.366915][T12061] dump_stack+0x15/0x1b [ 197.366986][T12061] should_fail_ex+0x265/0x280 [ 197.367084][T12061] should_fail_alloc_page+0xf2/0x100 [ 197.367168][T12061] __alloc_frozen_pages_noprof+0x109/0x360 [ 197.367325][T12061] alloc_pages_mpol+0xb3/0x260 [ 197.367483][T12061] ? css_rstat_updated+0xbb/0x280 [ 197.367606][T12061] vma_alloc_folio_noprof+0x1aa/0x300 [ 197.367711][T12061] handle_mm_fault+0xef5/0x2c60 [ 197.367887][T12061] ? mt_find+0x21b/0x330 [ 197.367980][T12061] do_user_addr_fault+0x3fe/0x1080 [ 197.368127][T12061] exc_page_fault+0x62/0xa0 [ 197.368255][T12061] asm_exc_page_fault+0x26/0x30 [ 197.368325][T12061] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 197.368410][T12061] Code: 17 02 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 197.368458][T12061] RSP: 0018:ffffc90004887b38 EFLAGS: 00050206 [ 197.368510][T12061] RAX: ffff888101664c90 RBX: ffffc90004887cd0 RCX: 0000000000000e80 [ 197.368552][T12061] RDX: 0000000000000000 RSI: ffff888008e83180 RDI: 0000200000002000 [ 197.368593][T12061] RBP: 0000000000001b80 R08: 0000000000000458 R09: 0000000000000000 [ 197.368628][T12061] R10: 0001888008e83000 R11: 0001888008e83fff R12: ffffc90004887cb8 [ 197.368702][T12061] R13: 0000000000001000 R14: 0000000000001000 R15: 0000000000001000 [ 197.368774][T12061] _copy_to_iter+0x2df/0xe70 [ 197.368860][T12061] ? should_fail_ex+0xdb/0x280 [ 197.368994][T12061] copy_page_to_iter+0x18f/0x2d0 [ 197.369100][T12061] process_vm_rw+0x672/0x960 [ 197.369286][T12061] __x64_sys_process_vm_readv+0x78/0x90 [ 197.369361][T12061] x64_sys_call+0x148a/0x3000 [ 197.369432][T12061] do_syscall_64+0xca/0x2b0 [ 197.369521][T12061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.369586][T12061] RIP: 0033:0x7f26ae08f749 [ 197.369638][T12061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.369698][T12061] RSP: 002b:00007f26acaef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 197.369832][T12061] RAX: ffffffffffffffda RBX: 00007f26ae2e5fa0 RCX: 00007f26ae08f749 [ 197.369873][T12061] RDX: 0000000000000002 RSI: 0000200000008400 RDI: 0000000000000193 [ 197.369914][T12061] RBP: 00007f26acaef090 R08: 0000000000000286 R09: 0000000000000000 [ 197.369955][T12061] R10: 0000200000008640 R11: 0000000000000246 R12: 0000000000000001 [ 197.369996][T12061] R13: 00007f26ae2e6038 R14: 00007f26ae2e5fa0 R15: 00007fff88880268 [ 197.370060][T12061] [ 197.667521][ T8178] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.723017][T12064] 9p: Bad value for 'wfdno' [ 197.856866][T12082] loop8: detected capacity change from 0 to 128 [ 197.882469][T12082] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 197.906479][T12082] ext4 filesystem being mounted at /420/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.932414][T12089] syzkaller1: entered promiscuous mode [ 197.938063][T12089] syzkaller1: entered allmulticast mode [ 197.947240][ T6235] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 198.127459][T12099] 9p: Bad value for 'wfdno' [ 198.163266][T12097] lo speed is unknown, defaulting to 1000 [ 198.169998][T12097] lo speed is unknown, defaulting to 1000 [ 198.273474][ T8177] Bluetooth: hci0: Frame reassembly failed (-84) [ 198.277188][T12107] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2825'. [ 198.623015][T12116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2828'. [ 198.666498][ T29] kauditd_printk_skb: 293 callbacks suppressed [ 198.666517][ T29] audit: type=1326 audit(1767702628.219:17602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12119 comm="syz.2.2830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2660bcf749 code=0x7ffc0000 [ 198.697095][ T29] audit: type=1326 audit(1767702628.219:17603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12119 comm="syz.2.2830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2660bcf749 code=0x7ffc0000 [ 198.720938][ T29] audit: type=1326 audit(1767702628.219:17604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12119 comm="syz.2.2830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2660bcf749 code=0x7ffc0000 [ 198.744832][ T29] audit: type=1326 audit(1767702628.219:17605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12119 comm="syz.2.2830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2660bcf749 code=0x7ffc0000 [ 198.768459][ T29] audit: type=1326 audit(1767702628.219:17606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12119 comm="syz.2.2830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2660bcf749 code=0x7ffc0000 [ 198.792100][ T29] audit: type=1326 audit(1767702628.219:17607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12119 comm="syz.2.2830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2660bcf749 code=0x7ffc0000 [ 198.815725][ T29] audit: type=1326 audit(1767702628.219:17608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12119 comm="syz.2.2830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2660bcf749 code=0x7ffc0000 [ 198.839501][ T29] audit: type=1326 audit(1767702628.219:17609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12119 comm="syz.2.2830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2660bcf749 code=0x7ffc0000 [ 198.863133][ T29] audit: type=1326 audit(1767702628.219:17610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12119 comm="syz.2.2830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2660bcf749 code=0x7ffc0000 [ 198.886767][ T29] audit: type=1326 audit(1767702628.219:17611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12119 comm="syz.2.2830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2660bcf749 code=0x7ffc0000 [ 199.005258][T12130] netlink: 83992 bytes leftover after parsing attributes in process `syz.6.2834'. [ 199.021859][T12130] netlink: zone id is out of range [ 199.027031][T12130] netlink: zone id is out of range [ 199.032385][T12130] netlink: zone id is out of range [ 199.037774][T12130] netlink: zone id is out of range [ 199.043171][T12130] netlink: zone id is out of range [ 199.048370][T12130] netlink: zone id is out of range [ 199.054351][T12130] netlink: zone id is out of range [ 199.061369][T12130] netlink: zone id is out of range [ 199.066818][T12130] netlink: zone id is out of range [ 199.079242][T12132] 9p: Bad value for 'wfdno' [ 199.084818][T12130] netlink: set zone limit has 8 unknown bytes [ 199.100624][T12136] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=65535 sclass=netlink_audit_socket pid=12136 comm=syz.2.2836 [ 199.157143][T12141] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2839'. [ 199.219087][T12141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2839'. [ 199.225630][T12150] netlink: 'syz.2.2843': attribute type 13 has an invalid length. [ 199.231760][T12141] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.248496][T12141] bridge_slave_0 (unregistering): left allmulticast mode [ 199.256378][T12141] bridge_slave_0 (unregistering): left promiscuous mode [ 199.263388][T12141] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.316472][T12150] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.323770][T12150] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.341489][T12159] loop6: detected capacity change from 0 to 256 [ 199.348268][T12159] vfat: Unknown parameter 'ÿ18446744073709551615ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ' [ 199.371583][T12150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.383730][T12150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.411241][T12150] veth1_vlan: left allmulticast mode [ 199.432316][ T8187] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.442949][ T8187] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.461531][ T8187] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.480134][ T8187] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.582258][T12169] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=65535 sclass=netlink_audit_socket pid=12169 comm=syz.2.2850 [ 199.646098][T12174] loop8: detected capacity change from 0 to 2048 [ 199.681751][T12174] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 199.902805][ T8186] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 199.928631][ T8186] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 354 with error 28 [ 199.941234][ T8186] EXT4-fs (loop8): This should not happen!! Data will be lost [ 199.941234][ T8186] [ 199.950905][ T8186] EXT4-fs (loop8): Total free blocks count 0 [ 199.957041][ T8186] EXT4-fs (loop8): Free/Dirty block details [ 199.963094][ T8186] EXT4-fs (loop8): free_blocks=2415919104 [ 199.968864][ T8186] EXT4-fs (loop8): dirty_blocks=368 [ 199.974256][ T8186] EXT4-fs (loop8): Block reservation details [ 199.980420][ T8186] EXT4-fs (loop8): i_reserved_data_blocks=23 [ 199.991807][ T8179] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 354 with max blocks 42 with error 28 [ 200.203390][ T7961] syz_tun (unregistering): left allmulticast mode [ 200.213129][T12180] lo speed is unknown, defaulting to 1000 [ 200.222738][T12180] lo speed is unknown, defaulting to 1000 [ 200.236687][ T3562] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 200.304747][T12180] chnl_net:caif_netlink_parms(): no params data found [ 200.367286][T12180] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.374517][T12180] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.381921][T12180] bridge_slave_0: entered allmulticast mode [ 200.388477][T12180] bridge_slave_0: entered promiscuous mode [ 200.395770][T12180] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.402894][T12180] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.410191][T12180] bridge_slave_1: entered allmulticast mode [ 200.416728][T12180] bridge_slave_1: entered promiscuous mode [ 200.437020][T12180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.447746][T12180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.475672][T12180] team0: Port device team_slave_0 added [ 200.482708][T12180] team0: Port device team_slave_1 added [ 200.508078][T12180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.515394][T12180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.541542][T12180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.553728][T12180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.560780][T12180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.586936][T12180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.670199][T12180] hsr_slave_0: entered promiscuous mode [ 200.685264][T12180] hsr_slave_1: entered promiscuous mode [ 200.691207][T12180] debugfs: 'hsr0' already exists in 'hsr' [ 200.697143][T12180] Cannot create hsr debugfs directory [ 200.755640][T12204] tipc: Started in network mode [ 200.760685][T12204] tipc: Node identity ac14140f, cluster identity 4711 [ 200.767562][T12204] tipc: New replicast peer: 255.255.255.83 [ 200.773757][T12204] tipc: Enabled bearer , priority 10 [ 200.881851][T12199] lo speed is unknown, defaulting to 1000 [ 200.935868][T12199] lo speed is unknown, defaulting to 1000 [ 200.992630][T12217] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=65535 sclass=netlink_audit_socket pid=12217 comm=syz.0.2862 [ 201.123882][T12227] loop8: detected capacity change from 0 to 128 [ 201.143080][T12227] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 201.156187][T12227] ext4 filesystem being mounted at /429/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.213840][ T6235] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 201.292016][T12237] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2869'. [ 201.305963][T12180] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 201.340636][T12244] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2869'. [ 201.341408][T12180] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 201.358908][T12180] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 201.418259][T12180] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 201.418362][T12248] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=65535 sclass=netlink_audit_socket pid=12248 comm=syz.0.2874 [ 201.478966][T12258] FAULT_INJECTION: forcing a failure. [ 201.478966][T12258] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 201.492115][T12258] CPU: 0 UID: 0 PID: 12258 Comm: syz.8.2876 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 201.492233][T12258] Tainted: [W]=WARN [ 201.492241][T12258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 201.492254][T12258] Call Trace: [ 201.492261][T12258] [ 201.492270][T12258] __dump_stack+0x1d/0x30 [ 201.492295][T12258] dump_stack_lvl+0x95/0xd0 [ 201.492356][T12258] dump_stack+0x15/0x1b [ 201.492378][T12258] should_fail_ex+0x265/0x280 [ 201.492407][T12258] should_fail+0xb/0x20 [ 201.492431][T12258] should_fail_usercopy+0x1a/0x20 [ 201.492519][T12258] _copy_to_iter+0xd2/0xe70 [ 201.492545][T12258] ? avc_has_perm+0xf7/0x180 [ 201.492588][T12258] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 201.492660][T12258] __skb_datagram_iter+0xc6/0x690 [ 201.492690][T12258] ? do_dentry_open+0x6d1/0xa60 [ 201.492731][T12258] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 201.492844][T12258] ? lockref_put_return+0xf7/0x130 [ 201.492928][T12258] skb_copy_datagram_iter+0x3d/0x110 [ 201.492959][T12258] virtio_transport_stream_dequeue+0x215/0x500 [ 201.493118][T12258] __vsock_connectible_recvmsg+0x50f/0x740 [ 201.493156][T12258] ? __pfx_autoremove_wake_function+0x10/0x10 [ 201.493194][T12258] vsock_connectible_recvmsg+0x80/0x90 [ 201.493230][T12258] ? __pfx_vsock_connectible_recvmsg+0x10/0x10 [ 201.493307][T12258] sock_recvmsg+0x139/0x170 [ 201.493381][T12258] __sys_recvfrom+0x122/0x1f0 [ 201.493426][T12258] __x64_sys_recvfrom+0x76/0x90 [ 201.493459][T12258] x64_sys_call+0x2918/0x3000 [ 201.493490][T12258] do_syscall_64+0xca/0x2b0 [ 201.493556][T12258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.493580][T12258] RIP: 0033:0x7f333c08f749 [ 201.493596][T12258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.493665][T12258] RSP: 002b:00007f333aaf7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 201.493689][T12258] RAX: ffffffffffffffda RBX: 00007f333c2e5fa0 RCX: 00007f333c08f749 [ 201.493724][T12258] RDX: 0000000000000026 RSI: 00002000000001c0 RDI: 0000000000000005 [ 201.493739][T12258] RBP: 00007f333aaf7090 R08: 0000000000000000 R09: 0000000000000000 [ 201.493755][T12258] R10: 0000000000010120 R11: 0000000000000246 R12: 0000000000000001 [ 201.493769][T12258] R13: 00007f333c2e6038 R14: 00007f333c2e5fa0 R15: 00007ffd1a3867e8 [ 201.493834][T12258] [ 201.632623][T12263] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2879'. [ 201.669140][T12180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.726067][T12263] FAULT_INJECTION: forcing a failure. [ 201.726067][T12263] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 201.757208][T12263] CPU: 1 UID: 0 PID: 12263 Comm: syz.0.2879 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 201.757243][T12263] Tainted: [W]=WARN [ 201.757250][T12263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 201.757262][T12263] Call Trace: [ 201.757339][T12263] [ 201.757349][T12263] __dump_stack+0x1d/0x30 [ 201.757377][T12263] dump_stack_lvl+0x95/0xd0 [ 201.757399][T12263] dump_stack+0x15/0x1b [ 201.757438][T12263] should_fail_ex+0x265/0x280 [ 201.757464][T12263] should_fail+0xb/0x20 [ 201.757483][T12263] should_fail_usercopy+0x1a/0x20 [ 201.757512][T12263] _copy_to_user+0x20/0xa0 [ 201.757562][T12263] simple_read_from_buffer+0xb5/0x130 [ 201.757613][T12263] proc_fail_nth_read+0x10e/0x150 [ 201.757644][T12263] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 201.757708][T12263] vfs_read+0x1a8/0x770 [ 201.757731][T12263] ? __rcu_read_unlock+0x4f/0x70 [ 201.757755][T12263] ? __fget_files+0x184/0x1c0 [ 201.757823][T12263] ? mutex_lock+0x58/0x90 [ 201.757850][T12263] ksys_read+0xda/0x1a0 [ 201.757896][T12263] __x64_sys_read+0x40/0x50 [ 201.757979][T12263] x64_sys_call+0x2889/0x3000 [ 201.758079][T12263] do_syscall_64+0xca/0x2b0 [ 201.758121][T12263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.758148][T12263] RIP: 0033:0x7f26ae08e15c [ 201.758219][T12263] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 201.758243][T12263] RSP: 002b:00007f26acaef030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 201.758268][T12263] RAX: ffffffffffffffda RBX: 00007f26ae2e5fa0 RCX: 00007f26ae08e15c [ 201.758332][T12263] RDX: 000000000000000f RSI: 00007f26acaef0a0 RDI: 0000000000000003 [ 201.758364][T12263] RBP: 00007f26acaef090 R08: 0000000000000000 R09: 0000000000000000 [ 201.758377][T12263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.758389][T12263] R13: 00007f26ae2e6038 R14: 00007f26ae2e5fa0 R15: 00007fff88880268 [ 201.758409][T12263] [ 201.969494][T12180] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.987807][ T3391] tipc: Node number set to 2886997007 [ 201.996210][ T8189] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.003389][ T8189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.026145][ T8189] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.033352][ T8189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.082415][T12268] syz_tun: entered allmulticast mode [ 202.101657][T12274] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2884'. [ 202.175707][T12284] loop6: detected capacity change from 0 to 1024 [ 202.186315][T12284] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 202.199182][T12284] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.2884: Invalid block bitmap block 0 in block_group 0 [ 202.223053][T12180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.230422][T12284] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.2884: Failed to acquire dquot type 0 [ 202.256825][T12284] EXT4-fs error (device loop6): ext4_free_blocks:6728: comm syz.6.2884: Freeing blocks not in datazone - block = 0, count = 4096 [ 202.286979][T12284] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.2884: Invalid inode bitmap blk 0 in block_group 0 [ 202.303575][ T8183] EXT4-fs error (device loop6): ext4_release_dquot:7022: comm kworker/u8:25: Failed to release dquot type 0 [ 202.320605][T12284] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem [ 202.339439][T12284] EXT4-fs (loop6): 1 orphan inode deleted [ 202.356430][T12180] veth0_vlan: entered promiscuous mode [ 202.365205][T12284] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.379629][T12286] lo speed is unknown, defaulting to 1000 [ 202.383090][T12180] veth1_vlan: entered promiscuous mode [ 202.391549][T12286] lo speed is unknown, defaulting to 1000 [ 202.421602][T12180] veth0_macvtap: entered promiscuous mode [ 202.439697][T11534] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.450445][T12180] veth1_macvtap: entered promiscuous mode [ 202.463241][T12302] FAULT_INJECTION: forcing a failure. [ 202.463241][T12302] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.476399][T12302] CPU: 1 UID: 0 PID: 12302 Comm: syz.8.2889 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 202.476524][T12302] Tainted: [W]=WARN [ 202.476533][T12302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 202.476564][T12302] Call Trace: [ 202.476574][T12302] [ 202.476585][T12302] __dump_stack+0x1d/0x30 [ 202.476626][T12302] dump_stack_lvl+0x95/0xd0 [ 202.476703][T12302] dump_stack+0x15/0x1b [ 202.476729][T12302] should_fail_ex+0x265/0x280 [ 202.476760][T12302] should_fail+0xb/0x20 [ 202.476856][T12302] should_fail_usercopy+0x1a/0x20 [ 202.476884][T12302] _copy_to_iter+0xd2/0xe70 [ 202.476917][T12302] ? avc_has_perm+0xf7/0x180 [ 202.476962][T12302] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 202.477054][T12302] __skb_datagram_iter+0xc6/0x690 [ 202.477085][T12302] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 202.477165][T12302] ? _raw_spin_lock_bh+0x56/0xb0 [ 202.477195][T12302] skb_copy_datagram_iter+0x3d/0x110 [ 202.477297][T12302] virtio_transport_stream_dequeue+0x215/0x500 [ 202.477345][T12302] __vsock_connectible_recvmsg+0x50f/0x740 [ 202.477471][T12302] ? __pfx_autoremove_wake_function+0x10/0x10 [ 202.477513][T12302] vsock_connectible_recvmsg+0x80/0x90 [ 202.477566][T12302] ? __pfx_vsock_connectible_recvmsg+0x10/0x10 [ 202.477679][T12302] sock_recvmsg+0x139/0x170 [ 202.477707][T12302] __sys_recvfrom+0x122/0x1f0 [ 202.477749][T12302] __x64_sys_recvfrom+0x76/0x90 [ 202.477838][T12302] x64_sys_call+0x2918/0x3000 [ 202.477863][T12302] do_syscall_64+0xca/0x2b0 [ 202.477907][T12302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.477936][T12302] RIP: 0033:0x7f333c08f749 [ 202.477956][T12302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.477985][T12302] RSP: 002b:00007f333aaf7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 202.478004][T12302] RAX: ffffffffffffffda RBX: 00007f333c2e5fa0 RCX: 00007f333c08f749 [ 202.478019][T12302] RDX: 0000000000000026 RSI: 00002000000001c0 RDI: 0000000000000008 [ 202.478035][T12302] RBP: 00007f333aaf7090 R08: 0000000000000000 R09: 0000000000000000 [ 202.478071][T12302] R10: 0000000000010120 R11: 0000000000000246 R12: 0000000000000001 [ 202.478083][T12302] R13: 00007f333c2e6038 R14: 00007f333c2e5fa0 R15: 00007ffd1a3867e8 [ 202.478156][T12302] [ 202.483915][T12180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.766342][T12315] loop6: detected capacity change from 0 to 2048 [ 202.775781][T12180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.788301][ T3905] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.803653][ T3905] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.833482][ T3905] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.851017][T12320] loop8: detected capacity change from 0 to 128 [ 202.865138][ T3905] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.877532][T12315] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 202.893200][T12320] FAULT_INJECTION: forcing a failure. [ 202.893200][T12320] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 202.906718][T12320] CPU: 1 UID: 0 PID: 12320 Comm: syz.8.2893 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 202.906761][T12320] Tainted: [W]=WARN [ 202.906818][T12320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 202.906831][T12320] Call Trace: [ 202.906839][T12320] [ 202.906847][T12320] __dump_stack+0x1d/0x30 [ 202.906878][T12320] dump_stack_lvl+0x95/0xd0 [ 202.906906][T12320] dump_stack+0x15/0x1b [ 202.906933][T12320] should_fail_ex+0x265/0x280 [ 202.906965][T12320] should_fail_alloc_page+0xf2/0x100 [ 202.907072][T12320] __alloc_frozen_pages_noprof+0x109/0x360 [ 202.907105][T12320] alloc_pages_mpol+0xb3/0x260 [ 202.907143][T12320] folio_alloc_noprof+0x97/0x150 [ 202.907182][T12320] filemap_alloc_folio_noprof+0x93/0x230 [ 202.907248][T12320] __filemap_get_folio_mpol+0x295/0x650 [ 202.907273][T12320] ? __rcu_read_unlock+0x4f/0x70 [ 202.907297][T12320] cont_write_begin+0x5cb/0x970 [ 202.907376][T12320] ? strcmp+0x22/0x50 [ 202.907484][T12320] fat_write_begin+0x4f/0xe0 [ 202.907517][T12320] ? __pfx_fat_get_block+0x10/0x10 [ 202.907551][T12320] generic_perform_write+0x184/0x490 [ 202.907664][T12320] __generic_file_write_iter+0x9e/0x120 [ 202.907702][T12320] ? __pfx_generic_file_write_iter+0x10/0x10 [ 202.907742][T12320] generic_file_write_iter+0x8d/0x2f0 [ 202.907836][T12320] ? _parse_integer_limit+0x170/0x190 [ 202.907865][T12320] ? _parse_integer+0x27/0x40 [ 202.907889][T12320] ? kstrtoull+0x111/0x140 [ 202.907921][T12320] ? kstrtouint+0x76/0xc0 [ 202.907946][T12320] ? kstrtouint_from_user+0x9f/0xf0 [ 202.907972][T12320] ? avc_policy_seqno+0x15/0x30 [ 202.907989][T12320] ? selinux_file_permission+0x1e2/0x320 [ 202.908106][T12320] ? __pfx_generic_file_write_iter+0x10/0x10 [ 202.908138][T12320] vfs_write+0x52a/0x960 [ 202.908170][T12320] ksys_write+0xda/0x1a0 [ 202.908256][T12320] __x64_sys_write+0x40/0x50 [ 202.908281][T12320] x64_sys_call+0x2847/0x3000 [ 202.908314][T12320] do_syscall_64+0xca/0x2b0 [ 202.908426][T12320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.908455][T12320] RIP: 0033:0x7f333c08f749 [ 202.908475][T12320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.908498][T12320] RSP: 002b:00007f333aaf7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 202.908521][T12320] RAX: ffffffffffffffda RBX: 00007f333c2e5fa0 RCX: 00007f333c08f749 [ 202.908537][T12320] RDX: 000000000208e24b RSI: 0000200000000040 RDI: 0000000000000006 [ 202.908579][T12320] RBP: 00007f333aaf7090 R08: 0000000000000000 R09: 0000000000000000 [ 202.908595][T12320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.908611][T12320] R13: 00007f333c2e6038 R14: 00007f333c2e5fa0 R15: 00007ffd1a3867e8 [ 202.908633][T12320] [ 203.186644][T12326] rdma_op ffff888104382d80 conn xmit_rdma 0000000000000000 [ 203.249273][T12334] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2897'. [ 203.260428][T12334] netem: change failed [ 203.267101][T12334] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 203.280157][T12330] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 203.290572][T12330] vhci_hcd vhci_hcd.2: invalid port number 96 [ 203.296743][T12330] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 203.414516][T12340] FAULT_INJECTION: forcing a failure. [ 203.414516][T12340] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.419647][ T8189] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 203.427717][T12340] CPU: 0 UID: 0 PID: 12340 Comm: syz.2.2900 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 203.427830][T12340] Tainted: [W]=WARN [ 203.427863][T12340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 203.427968][T12340] Call Trace: [ 203.427989][T12340] [ 203.428012][T12340] __dump_stack+0x1d/0x30 [ 203.428176][T12340] dump_stack_lvl+0x95/0xd0 [ 203.428248][T12340] dump_stack+0x15/0x1b [ 203.428312][T12340] should_fail_ex+0x265/0x280 [ 203.428434][T12340] should_fail+0xb/0x20 [ 203.428499][T12340] should_fail_usercopy+0x1a/0x20 [ 203.428574][T12340] _copy_from_user+0x1c/0xb0 [ 203.428703][T12340] __sys_bpf+0x183/0x7c0 [ 203.428789][T12340] __x64_sys_bpf+0x41/0x50 [ 203.428934][T12340] x64_sys_call+0x28e1/0x3000 [ 203.429018][T12340] do_syscall_64+0xca/0x2b0 [ 203.429074][T12340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.429096][T12340] RIP: 0033:0x7f869826f749 [ 203.429139][T12340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.429207][T12340] RSP: 002b:00007f8696ccf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 203.429291][T12340] RAX: ffffffffffffffda RBX: 00007f86984c5fa0 RCX: 00007f869826f749 [ 203.429388][T12340] RDX: 0000000000000020 RSI: 0000200000000140 RDI: 0000000000000009 [ 203.429429][T12340] RBP: 00007f8696ccf090 R08: 0000000000000000 R09: 0000000000000000 [ 203.429471][T12340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.429591][T12340] R13: 00007f86984c6038 R14: 00007f86984c5fa0 R15: 00007ffcf50fdcd8 [ 203.429664][T12340] [ 203.616015][T12342] loop8: detected capacity change from 0 to 256 [ 203.625329][T12342] vfat: Unknown parameter 'ÿ18446744073709551615ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ' [ 203.625906][ T8189] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 14 with error 28 [ 203.645631][ T8189] EXT4-fs (loop6): This should not happen!! Data will be lost [ 203.645631][ T8189] [ 203.655325][ T8189] EXT4-fs (loop6): Total free blocks count 0 [ 203.661430][ T8189] EXT4-fs (loop6): Free/Dirty block details [ 203.667428][ T8189] EXT4-fs (loop6): free_blocks=2415919104 [ 203.673177][ T8189] EXT4-fs (loop6): dirty_blocks=16 [ 203.678403][ T8189] EXT4-fs (loop6): Block reservation details [ 203.684463][ T8189] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 203.697596][T12346] FAULT_INJECTION: forcing a failure. [ 203.697596][T12346] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.697667][ T29] kauditd_printk_skb: 297 callbacks suppressed [ 203.697683][ T29] audit: type=1326 audit(1767702633.501:17906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12343 comm="syz.2.2903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869826f749 code=0x7ffc0000 [ 203.710810][T12346] CPU: 0 UID: 0 PID: 12346 Comm: syz.1.2904 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 203.710944][T12346] Tainted: [W]=WARN [ 203.710975][T12346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 203.711031][T12346] Call Trace: [ 203.711063][T12346] [ 203.711166][T12346] __dump_stack+0x1d/0x30 [ 203.711243][T12346] dump_stack_lvl+0x95/0xd0 [ 203.711363][T12346] dump_stack+0x15/0x1b [ 203.711425][T12346] should_fail_ex+0x265/0x280 [ 203.711513][T12346] should_fail+0xb/0x20 [ 203.711652][T12346] should_fail_usercopy+0x1a/0x20 [ 203.711727][T12346] _copy_from_user+0x1c/0xb0 [ 203.711818][T12346] ___sys_sendmsg+0xc1/0x1d0 [ 203.712032][T12346] __x64_sys_sendmsg+0xd4/0x160 [ 203.712144][T12346] x64_sys_call+0x17ba/0x3000 [ 203.712303][T12346] do_syscall_64+0xca/0x2b0 [ 203.712409][T12346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.712549][T12346] RIP: 0033:0x7f9a63aef749 [ 203.712614][T12346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.712676][T12346] RSP: 002b:00007f9a62557038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 203.712740][T12346] RAX: ffffffffffffffda RBX: 00007f9a63d45fa0 RCX: 00007f9a63aef749 [ 203.712786][T12346] RDX: 0000000000000000 RSI: 0000200000001580 RDI: 0000000000000005 [ 203.712909][T12346] RBP: 00007f9a62557090 R08: 0000000000000000 R09: 0000000000000000 [ 203.712951][T12346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.712987][T12346] R13: 00007f9a63d46038 R14: 00007f9a63d45fa0 R15: 00007ffe3d970f68 [ 203.713057][T12346] [ 203.915808][ T29] audit: type=1326 audit(1767702633.585:17907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12343 comm="syz.2.2903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f869826f749 code=0x7ffc0000 [ 203.939493][ T29] audit: type=1326 audit(1767702633.595:17908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12343 comm="syz.2.2903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869826f749 code=0x7ffc0000 [ 203.963188][ T29] audit: type=1326 audit(1767702633.595:17909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12343 comm="syz.2.2903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869826f749 code=0x7ffc0000 [ 203.986941][ T29] audit: type=1326 audit(1767702633.595:17910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12343 comm="syz.2.2903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f869826f749 code=0x7ffc0000 [ 204.010613][ T29] audit: type=1326 audit(1767702633.595:17911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12343 comm="syz.2.2903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869826f749 code=0x7ffc0000 [ 204.034241][ T29] audit: type=1326 audit(1767702633.595:17912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12343 comm="syz.2.2903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f869826f749 code=0x7ffc0000 [ 204.057973][ T29] audit: type=1326 audit(1767702633.595:17913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12343 comm="syz.2.2903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869826f749 code=0x7ffc0000 [ 204.081898][ T3562] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 204.088071][ T29] audit: type=1326 audit(1767702633.595:17914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12343 comm="syz.2.2903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f869826f749 code=0x7ffc0000 [ 204.111803][ T29] audit: type=1326 audit(1767702633.595:17915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12343 comm="syz.2.2903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869826f749 code=0x7ffc0000 [ 204.141823][T12267] syz_tun: left allmulticast mode [ 204.488190][ T8176] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 14 with error 28 [ 204.807877][T12370] loop6: detected capacity change from 0 to 2048 [ 204.856765][T12370] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 204.981827][ T3905] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 205.027304][ T3905] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 88 with error 28 [ 205.039713][ T3905] EXT4-fs (loop6): This should not happen!! Data will be lost [ 205.039713][ T3905] [ 205.049479][ T3905] EXT4-fs (loop6): Total free blocks count 0 [ 205.055514][ T3905] EXT4-fs (loop6): Free/Dirty block details [ 205.061637][ T3905] EXT4-fs (loop6): free_blocks=2415919104 [ 205.067509][ T3905] EXT4-fs (loop6): dirty_blocks=96 [ 205.072834][ T3905] EXT4-fs (loop6): Block reservation details [ 205.078994][ T3905] EXT4-fs (loop6): i_reserved_data_blocks=6 [ 205.099567][T12379] loop2: detected capacity change from 0 to 1024 [ 205.121547][T12379] EXT4-fs: inline encryption not supported [ 205.151902][T12379] EXT4-fs: Ignoring removed mblk_io_submit option [ 205.170084][T12368] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 205.184754][T12379] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.276012][T12379] FAULT_INJECTION: forcing a failure. [ 205.276012][T12379] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 205.289428][T12379] CPU: 1 UID: 0 PID: 12379 Comm: syz.2.2915 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 205.289489][T12379] Tainted: [W]=WARN [ 205.289498][T12379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 205.289550][T12379] Call Trace: [ 205.289558][T12379] [ 205.289566][T12379] __dump_stack+0x1d/0x30 [ 205.289591][T12379] dump_stack_lvl+0x95/0xd0 [ 205.289613][T12379] dump_stack+0x15/0x1b [ 205.289635][T12379] should_fail_ex+0x265/0x280 [ 205.289708][T12379] should_fail_alloc_page+0xf2/0x100 [ 205.289817][T12379] __alloc_frozen_pages_noprof+0x109/0x360 [ 205.289857][T12379] alloc_pages_mpol+0xb3/0x260 [ 205.289896][T12379] folio_alloc_noprof+0x97/0x150 [ 205.289963][T12379] filemap_alloc_folio_noprof+0x93/0x230 [ 205.290068][T12379] __filemap_get_folio_mpol+0x295/0x650 [ 205.290105][T12379] ext4_convert_inline_data_to_extent+0x1f8/0x7d0 [ 205.290151][T12379] ext4_try_to_write_inline_data+0x54/0x90 [ 205.290190][T12379] ext4_write_begin+0x1a3/0xe90 [ 205.290277][T12379] ? find_inode_by_ino_rcu+0x9d/0x160 [ 205.290368][T12379] ? __brelse+0x32/0x60 [ 205.290449][T12379] ? ext4_mark_iloc_dirty+0xd3f/0xda0 [ 205.290487][T12379] ext4_da_write_begin+0x1f0/0x6b0 [ 205.290522][T12379] ? inode_to_bdi+0x47/0xa0 [ 205.290593][T12379] ? balance_dirty_pages_ratelimited_flags+0x40b/0x5e0 [ 205.290641][T12379] generic_perform_write+0x184/0x490 [ 205.290777][T12379] ext4_buffered_write_iter+0x1ee/0x3c0 [ 205.290840][T12379] ext4_file_write_iter+0x387/0xf60 [ 205.290889][T12379] ? kstrtouint_from_user+0x9f/0xf0 [ 205.290971][T12379] ? 0xffffffff81000000 [ 205.291012][T12379] ? __rcu_read_unlock+0x4f/0x70 [ 205.291046][T12379] ? avc_policy_seqno+0x15/0x30 [ 205.291068][T12379] ? selinux_file_permission+0x1e2/0x320 [ 205.291107][T12379] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 205.291154][T12379] vfs_write+0x52a/0x960 [ 205.291181][T12379] __x64_sys_pwrite64+0xfd/0x150 [ 205.291210][T12379] x64_sys_call+0x9f7/0x3000 [ 205.291244][T12379] do_syscall_64+0xca/0x2b0 [ 205.291350][T12379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.291379][T12379] RIP: 0033:0x7f869826f749 [ 205.291395][T12379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.291413][T12379] RSP: 002b:00007f8696ccf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 205.291433][T12379] RAX: ffffffffffffffda RBX: 00007f86984c5fa0 RCX: 00007f869826f749 [ 205.291501][T12379] RDX: 000000000000fdef RSI: 0000200000000140 RDI: 0000000000000009 [ 205.291518][T12379] RBP: 00007f8696ccf090 R08: 0000000000000000 R09: 0000000000000000 [ 205.291539][T12379] R10: 000000000000fecc R11: 0000000000000246 R12: 0000000000000001 [ 205.291554][T12379] R13: 00007f86984c6038 R14: 00007f86984c5fa0 R15: 00007ffcf50fdcd8 [ 205.291580][T12379] [ 205.666231][T12180] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.976149][T12414] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2924'. [ 206.092292][T12419] FAULT_INJECTION: forcing a failure. [ 206.092292][T12419] name failslab, interval 1, probability 0, space 0, times 0 [ 206.105056][T12419] CPU: 1 UID: 0 PID: 12419 Comm: syz.1.2929 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 206.105097][T12419] Tainted: [W]=WARN [ 206.105106][T12419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 206.105122][T12419] Call Trace: [ 206.105209][T12419] [ 206.105219][T12419] __dump_stack+0x1d/0x30 [ 206.105249][T12419] dump_stack_lvl+0x95/0xd0 [ 206.105277][T12419] dump_stack+0x15/0x1b [ 206.105362][T12419] should_fail_ex+0x265/0x280 [ 206.105389][T12419] ? __pfx_cryptomgr_probe+0x10/0x10 [ 206.105425][T12419] should_failslab+0x8c/0xb0 [ 206.105453][T12419] __kmalloc_cache_noprof+0x65/0x4c0 [ 206.105557][T12419] ? __kthread_create_on_node+0x76/0x230 [ 206.105598][T12419] ? __pfx_cryptomgr_probe+0x10/0x10 [ 206.105676][T12419] __kthread_create_on_node+0x76/0x230 [ 206.105709][T12419] ? __pfx_cryptomgr_probe+0x10/0x10 [ 206.105739][T12419] kthread_create_on_node+0x89/0xc0 [ 206.105841][T12419] ? cryptomgr_notify+0x6a/0x610 [ 206.105872][T12419] cryptomgr_notify+0x53d/0x610 [ 206.105902][T12419] ? __pfx_cryptomgr_notify+0x10/0x10 [ 206.105951][T12419] blocking_notifier_call_chain+0x9b/0x1f0 [ 206.106007][T12419] crypto_alg_mod_lookup+0x30f/0x490 [ 206.106042][T12419] crypto_alloc_tfm_node+0xb5/0x2b0 [ 206.106079][T12419] crypto_alloc_aead+0x2d/0x40 [ 206.106151][T12419] esp_init_state+0x3f3/0xa00 [ 206.106263][T12419] ? __kmalloc_node_track_caller_noprof+0x3a6/0x5b0 [ 206.106295][T12419] __xfrm_init_state+0x740/0xbb0 [ 206.106332][T12419] xfrm_add_sa+0x1f53/0x25b0 [ 206.106429][T12419] xfrm_user_rcv_msg+0x566/0x660 [ 206.106492][T12419] ? __kfree_skb+0x109/0x150 [ 206.106522][T12419] ? nlmon_xmit+0x4f/0x60 [ 206.106565][T12419] ? consume_skb+0x49/0x150 [ 206.106604][T12419] netlink_rcv_skb+0x123/0x220 [ 206.106676][T12419] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 206.106725][T12419] xfrm_netlink_rcv+0x48/0x60 [ 206.106760][T12419] netlink_unicast+0x5c0/0x690 [ 206.106879][T12419] netlink_sendmsg+0x58b/0x6b0 [ 206.106995][T12419] ? __pfx_netlink_sendmsg+0x10/0x10 [ 206.107037][T12419] __sock_sendmsg+0x145/0x180 [ 206.107062][T12419] ____sys_sendmsg+0x31e/0x4a0 [ 206.107160][T12419] ___sys_sendmsg+0x17b/0x1d0 [ 206.107247][T12419] __x64_sys_sendmsg+0xd4/0x160 [ 206.107288][T12419] x64_sys_call+0x17ba/0x3000 [ 206.107318][T12419] do_syscall_64+0xca/0x2b0 [ 206.107416][T12419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.107444][T12419] RIP: 0033:0x7f9a63aef749 [ 206.107464][T12419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.107488][T12419] RSP: 002b:00007f9a62557038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 206.107508][T12419] RAX: ffffffffffffffda RBX: 00007f9a63d45fa0 RCX: 00007f9a63aef749 [ 206.107529][T12419] RDX: 0000000000004050 RSI: 0000200000000180 RDI: 0000000000000003 [ 206.107546][T12419] RBP: 00007f9a62557090 R08: 0000000000000000 R09: 0000000000000000 [ 206.107562][T12419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 206.107579][T12419] R13: 00007f9a63d46038 R14: 00007f9a63d45fa0 R15: 00007ffe3d970f68 [ 206.107605][T12419] [ 206.586631][T12426] ================================================================== [ 206.594793][T12426] BUG: KCSAN: data-race in page_pool_put_unrefed_netmem / page_pool_refill_alloc_cache [ 206.604479][T12426] [ 206.606817][T12426] write to 0xffff88811b5ae900 of 8 bytes by task 12425 on cpu 1: [ 206.614540][T12426] page_pool_refill_alloc_cache+0x2a5/0x3c0 [ 206.620464][T12426] page_pool_alloc_pages+0xd0/0x130 [ 206.625778][T12426] bpf_test_run_xdp_live+0x54d/0x11d0 [ 206.631266][T12426] bpf_prog_test_run_xdp+0x525/0x970 [ 206.636964][T12426] bpf_prog_test_run+0x204/0x340 [ 206.641947][T12426] __sys_bpf+0x4c0/0x7c0 [ 206.646218][T12426] __x64_sys_bpf+0x41/0x50 [ 206.650766][T12426] x64_sys_call+0x28e1/0x3000 [ 206.655479][T12426] do_syscall_64+0xca/0x2b0 [ 206.660007][T12426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.665939][T12426] [ 206.668291][T12426] read to 0xffff88811b5ae900 of 8 bytes by task 12426 on cpu 0: [ 206.675938][T12426] page_pool_put_unrefed_netmem+0x38b/0x4b0 [ 206.681886][T12426] napi_pp_put_page+0xe9/0x200 [ 206.686693][T12426] skb_free_head+0x12c/0x150 [ 206.691347][T12426] skb_release_data+0x33b/0x370 [ 206.696236][T12426] __kfree_skb+0x44/0x150 [ 206.700600][T12426] sk_skb_reason_drop+0xbd/0x270 [ 206.705574][T12426] udpv6_recvmsg+0x1f7/0xca0 [ 206.710204][T12426] inet6_recvmsg+0x143/0x290 [ 206.714832][T12426] sock_recvmsg+0x95/0x170 [ 206.719273][T12426] ____sys_recvmsg+0xf5/0x280 [ 206.723992][T12426] ___sys_recvmsg+0x11f/0x370 [ 206.728697][T12426] do_recvmmsg+0x1ef/0x540 [ 206.733143][T12426] __x64_sys_recvmmsg+0xe5/0x170 [ 206.738118][T12426] x64_sys_call+0x2b75/0x3000 [ 206.742824][T12426] do_syscall_64+0xca/0x2b0 [ 206.747369][T12426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.753290][T12426] [ 206.755633][T12426] value changed: 0xffffea0004968e00 -> 0x0000000000000000 [ 206.762753][T12426] [ 206.765095][T12426] Reported by Kernel Concurrency Sanitizer on: [ 206.771263][T12426] CPU: 0 UID: 0 PID: 12426 Comm: syz.6.2931 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 206.782663][T12426] Tainted: [W]=WARN [ 206.786480][T12426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 206.796559][T12426] ==================================================================