last executing test programs: 2m7.507520276s ago: executing program 32 (id=2985): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2m2.577152472s ago: executing program 33 (id=3064): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) 2m2.428576868s ago: executing program 2 (id=3069): socket$netlink(0x10, 0x3, 0x8000000004) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000001d40)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YG\xf9\xc2\xf1\xa4\xdb$\xf6]\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^W\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\xc5\x05\x9d\xd6\x02|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81', &(0x7f0000000200)='sockfs\x00', 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@debug}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000001c0)='dE\x00', 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3c0, 0x2d8, 0x1f0, 0x0, 0x108, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8, 0x0, {0xa00}}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) close(0xffffffffffffffff) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r5, &(0x7f0000000200)=""/4098, 0x1002, 0xd37) 2m2.259836655s ago: executing program 2 (id=3072): r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x600) 2m1.92789387s ago: executing program 2 (id=3074): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1001, 0x0, 0x4}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x8, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x20, 0x1}) io_uring_enter(r1, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) read(r4, &(0x7f00000019c0)=""/4097, 0x1001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000280)='tasks\x00', 0x2, 0x0) r7 = syz_clone(0x4000, &(0x7f0000001000), 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r6, &(0x7f0000000400)=r7, 0x12) 2m1.92775194s ago: executing program 34 (id=3074): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1001, 0x0, 0x4}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x8, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x20, 0x1}) io_uring_enter(r1, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) read(r4, &(0x7f00000019c0)=""/4097, 0x1001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000280)='tasks\x00', 0x2, 0x0) r7 = syz_clone(0x4000, &(0x7f0000001000), 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r6, &(0x7f0000000400)=r7, 0x12) 1m57.251770984s ago: executing program 35 (id=3141): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r1 = dup(r0) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={0x0, 0x3ff}, 0x8) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0xfd87) (fail_nth: 1) 1m51.602981411s ago: executing program 8 (id=3239): bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000008850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_complete(0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') readlinkat(r4, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)=""/10, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r2, @ANYRESDEC=r0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x4, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000050002000000000085000000cc00000085000000000000000500feff0000000095"], &(0x7f00000003c0)='GPL\x00', 0x4}, 0x94) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x17c, 0x13, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0x62, 0x8, "e0ec162845d3e1ef4d2202e6422cc36e65e73cf87ba4460208d87e0879025e3c24b92516482fada0335bfe061e32fa4309cc6780573d322f8bb73bb942f0da3b34ea3f522d8328976e8fd2e70917e25e155d1705879b7142bb613bc125a8"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_USERDATA={0xd0, 0x8, "6d72ec3d4c9d51f98be7ac46612deb5cc9a9b1d77a0e499d58220130658dca22beb03a3c9092d1f1d768cc0eab6e234ac52717b54efa399bba3745dc70d8ffd0bc33131149622d22bef39541938d2d4345dc93bb8706fc004471c0e0eddb5ca8705b646cf1a43bf2e6ab4c670638bbbacbbdedb5f67fb2bf4821c6d7ea1f689bce26427710ec0f3e53a1ff2650f3d44457d4469c165845d861f079b55f031e25a2dffb8b85a6b2126130b91d5642eac529f943961f513e3b075234b652208ec099bc3407cad3d17231967d16"}]}, 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x801) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="180500001f0004000000000000000000850000007a00000095000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000080)=r6, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="30bf050913591b25dcc5703988488ed314b4dabd9ab43f23a3214856239b904531829671b1765a27df18a197b93545811fb7af5424f160927c8376d44a42dffd230808da2836d807cabf1b1f6ccf65a6ccb9c22e0bc68430"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, 0x25, r4}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x10, r8}, 0xffffffffffffff19) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r9 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x0) syz_usb_disconnect(r9) syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r9, 0x40085507, &(0x7f0000000100)=0x1d) socket$pppl2tp(0x18, 0x1, 0x1) 1m50.924660571s ago: executing program 7 (id=3257): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) creat(0x0, 0x14c) openat(0xffffffffffffff9c, 0x0, 0x143042, 0x64) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000280)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffb000/0x4000)=nil) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000100)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r4}, 0x4) syz_emit_ethernet(0xf6, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000181001f0008"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) 1m50.900291062s ago: executing program 7 (id=3260): r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) r1 = fsmount(r0, 0x0, 0x4) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.stat\x00', 0x5000000, 0x0) sendfile(r0, r2, 0x0, 0xc486) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x3}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = inotify_init1(0x80800) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x20, 0x1a, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x3, 0x1c, &(0x7f00000002c0)=""/28, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0xc, 0xa5f6, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680), 0x0, 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) syz_usb_connect$cdc_ncm(0x5, 0x0, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) inotify_add_watch(r8, &(0x7f0000000400)='.\x00', 0xa4000021) creat(0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) 1m50.839957775s ago: executing program 6 (id=3261): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000794000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000042000/0x2000)=nil, 0x0, 0x0, r0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0x8, 0x77}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setrlimit(0x8, &(0x7f0000000100)={0xc, 0x7}) (async) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000036000/0x2000)=nil, &(0x7f0000594000/0x4000)=nil, &(0x7f0000f36000/0x2000)=nil, &(0x7f0000918000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000c12000/0x2000)=nil, &(0x7f000003f000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x30}, 0x68) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x20000000002, &(0x7f0000000040)) (async) ptrace$cont(0x21, r2, 0x80000001, 0x4) (async) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) (async) shutdown(r0, 0x0) 1m50.780117577s ago: executing program 8 (id=3262): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200008, &(0x7f0000000380)={[{@nolazytime}, {@auto_da_alloc}, {@sysvgroups}, {@norecovery}, {@jqfmt_vfsv0}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@grpid}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000050900010073797a300000000009001400000011000100000000000000000000000008"], 0x54}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000aa0000000140a01010000000000000000030000040c00064000000000000000030900010073797a30000000000c00064000000000000000036600080020d291ff8155bdfdde756c58af04503987de75c36701e06e93d2af4dd6598cc14f7fba7aed4e70ca19e7428acb57e10aaa934f12238e95664a81f1973eeb0f39f056f29548e5ed9e80abfb3268b29f811749ecb8ad0472b460cb0ae60643620a3e12000038010000080a010100000000000000000500000a0900010073797a30000000000c000340000000000000000308000b400000000308000b400000000208000b40e6000003f40007402ed277aa1b89c02b81b62699e024f2015b1a88f644fcaea08c24e865ff0da87dbbaa00cbfa722e601d559af298059af746017d0ac1d19cb0b46c98893fda78b8cc8b96527527c9341d097851e080c6c5d1c286939e09d5e3b97cdb991f0398bb35c8cba35000a2edb31211ae81e40c6b1c3aa62528f55bebabc4be16418e477a797aaef9812dc16faa1f60a82017f36a7a00969b86b90833900f3e235b8c1c7d63916c67e552d03f369d92ab8b53cd868d0bc4459fb936efd3650392d2b992d7d45f544fb578dcd4c29d80b36451bc79034388767caff857697224e64241a7513a8fd7456ba37eed43a9ef3048d89cd24c000000050a010100000000000000000200000008000a400000000208000a40000000000900010073797a3000000000100008800c00024000000000000000060c0002400000000000000001"], 0x2dc}, 0x1, 0x0, 0x0, 0x240040c4}, 0x80) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="01000000", @ANYRES16, @ANYBLOB="1b0d2bbd7000fbdbdf2511000000050012000600000008000300", @ANYRES32, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x20000001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xffff}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r2 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r2, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="9f", 0x1}], 0x1}, 0x3e8) 1m50.735231129s ago: executing program 8 (id=3264): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000003c0), 0xfffffffa, r0}, 0x38) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3cusg\x91\xdedn\xe5+\xf0', 0xffffffffffffffff) 1m50.711462651s ago: executing program 8 (id=3266): socket$netlink(0x10, 0x3, 0x8000000004) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001540)=ANY=[@ANYBLOB="02000000040000000500000002669c29994abd12ba5a3e86277c215377db6ebdfed3efa20d8f70074e8413a83a2f4b0988422653fae6fa77aa18615b8f87da3476e14fa0d9ca9bbb2e068ac34a1fb7a911bfd7c459ba505415956c7be42c447c487abcbaa56e14306ea928701608b4ed608e7e23dd65d4013b03f0506f035be02fa8a87757c82083d4f9764aa9db4c64e8abe1b7b3b8ab8ac5315230b026bbd773346cb30b25835353c9c6b8438df7a5c97182446c65a79fbcb638c4d3053a96358f5f861d8a61d52e3e5ceb043ad04aaf07fbab85a6c1b7f0b90992abd441be9f86531c15e1badbd948a9cc3c23406b05d00fc4c42e5898f273f9bb7cd9511d49cf24c933e431e73c206125a06b510670740a832282eca79f5f7d2dc5f26fa27885be16b4766e71203bf7d787be335932b771eba75479fadfd6b4868796abf06ef9"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@debug}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$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") mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r2, &(0x7f0000000200)=""/4098, 0x1002, 0xd37) 1m50.614788585s ago: executing program 8 (id=3268): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10) execve(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = mq_open(&(0x7f000084dff0)='\xa1sxt\x1a\x00\x00\x00\x00\x00\x00\x00\x01\x88\xbdd', 0x6e93ebbbcc0884f2, 0x100, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) 1m50.405242934s ago: executing program 8 (id=3270): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x8}, 0x18) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVid:\xc4e', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9ce}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r3) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fedbdf2531000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xa, 0x1, 0x0, 0x0, 0x0, 0x4, 0x10050, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x5, 0x8}, 0x248, 0x10000, 0x1, 0x1, 0x8, 0xacc0, 0x0, 0x0, 0x0, 0x0, 0x20000002}, 0x0, 0x2, 0xffffffffffffffff, 0x9) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040845}, 0x48d4) 1m50.405125534s ago: executing program 36 (id=3270): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x8}, 0x18) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVid:\xc4e', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9ce}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r3) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fedbdf2531000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xa, 0x1, 0x0, 0x0, 0x0, 0x4, 0x10050, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x5, 0x8}, 0x248, 0x10000, 0x1, 0x1, 0x8, 0xacc0, 0x0, 0x0, 0x0, 0x0, 0x20000002}, 0x0, 0x2, 0xffffffffffffffff, 0x9) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040845}, 0x48d4) 1m50.283124109s ago: executing program 7 (id=3273): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000001c0)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 1m50.25742734s ago: executing program 7 (id=3274): socket$netlink(0x10, 0x3, 0x8000000004) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@debug}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$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") mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r1, &(0x7f0000000200)=""/4098, 0x1002, 0xd37) 1m50.088971207s ago: executing program 7 (id=3276): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000003c0), 0xfffffffa, r0}, 0x38) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3cusg\x91\xdedn\xe5+\xf0', 0xffffffffffffffff) 1m49.995985272s ago: executing program 6 (id=3278): socket(0x80000000000000a, 0x2, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r0, @ANYRES32=r2], 0x44}}, 0x0) 1m49.857524648s ago: executing program 6 (id=3279): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1m49.7944325s ago: executing program 7 (id=3281): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10) execve(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = mq_open(&(0x7f000084dff0)='\xa1sxt\x1a\x00\x00\x00\x00\x00\x00\x00\x01\x88\xbdd', 0x6e93ebbbcc0884f2, 0x100, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) 1m49.768359081s ago: executing program 37 (id=3281): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10) execve(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = mq_open(&(0x7f000084dff0)='\xa1sxt\x1a\x00\x00\x00\x00\x00\x00\x00\x01\x88\xbdd', 0x6e93ebbbcc0884f2, 0x100, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) 1m49.56591535s ago: executing program 6 (id=3286): socket$netlink(0x10, 0x3, 0x8000000004) bpf$MAP_CREATE(0x0, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0x50) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@debug}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$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") mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r0, &(0x7f0000000200)=""/4098, 0x1002, 0xd37) 1m49.456950565s ago: executing program 6 (id=3287): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = dup(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000001000000850000007800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r6}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x4) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000001900)={0x1, 0x80, 0x6, 0x9, 0x0, 0x1, 0x0, 0x1, 0x55804, 0x7, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={0x0, 0xa}, 0x8, 0x0, 0x0, 0x5, 0x5, 0xffff, 0x8a1e}) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r7, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x0, 0x1, 0xc1}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20044090}, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f00000000c0)={@in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}}, 0x0, 0x0, 0xffff, 0x0, "de2170420b42866d263a524b8f533db671e3fb462f6e152472578c7e9359d81409d1a02b9c2248e87414c4cfec9913387fd71cf21f357c8ca38ffddab5d147245ed5bdcdfaf4e9530630c66996c4905b"}, 0xd8) syz_emit_ethernet(0x4e, &(0x7f0000000ac0)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, @val={@void, {0x8100, 0x3, 0x1, 0xffe}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "a6be78", 0x14, 0x6, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, {[], {{0x4e20, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x2, 0x44, 0x0, 0x3}}}}}}}, 0x0) 1m49.247840564s ago: executing program 6 (id=3289): modify_ldt$write2(0x11, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) syz_io_uring_setup(0x53c0, &(0x7f0000000080)={0x0, 0x61bf, 0x40, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000040)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$selinux_create(r1, &(0x7f00000001c0)=@access={'system_u:object_r:bsdpty_device_t:s0', 0x20, 'unconfined', 0x20, 0x1ff}, 0x45) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10) syz_clone(0x400c0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000800)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@nobarrier}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@lazytime}, {@block_validity}, {@inlinecrypt}]}, 0x3, 0x440, &(0x7f0000000280)="$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") openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r3, 0x6) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = accept(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) recvfrom(r4, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x3e8, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r6, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000800000000000000000000000018010000", @ANYRESDEC, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x94) 1m49.247540254s ago: executing program 38 (id=3289): modify_ldt$write2(0x11, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) syz_io_uring_setup(0x53c0, &(0x7f0000000080)={0x0, 0x61bf, 0x40, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000040)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$selinux_create(r1, &(0x7f00000001c0)=@access={'system_u:object_r:bsdpty_device_t:s0', 0x20, 'unconfined', 0x20, 0x1ff}, 0x45) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10) syz_clone(0x400c0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000800)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@nobarrier}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@lazytime}, {@block_validity}, {@inlinecrypt}]}, 0x3, 0x440, &(0x7f0000000280)="$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") openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r3, 0x6) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = accept(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) recvfrom(r4, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x3e8, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r6, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000800000000000000000000000018010000", @ANYRESDEC, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x94) 1m42.685908591s ago: executing program 5 (id=3404): r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) r1 = fsmount(r0, 0x0, 0x4) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.stat\x00', 0x5000000, 0x0) sendfile(r0, r2, 0x0, 0xc486) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x3}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = inotify_init1(0x80800) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x20, 0x1a, &(0x7f00000004c0)=ANY=[@ANYBLOB="850000004b0000b845218000f0ffffff42980400ffffffffb7080000000000007b8af8ff00000000b7080000020000007b8a00000000000007010000f8ffffffbfa400f0ffffffb70200000821000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000b5992e0001000000180100002020752567b687f66e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000114600008500000006000000851000"], &(0x7f0000000200)='syzkaller\x00', 0x3, 0x1c, &(0x7f00000002c0)=""/28, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0xc, 0xa5f6, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680), 0x0, 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) syz_usb_connect$cdc_ncm(0x5, 0x0, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) inotify_add_watch(r8, &(0x7f0000000400)='.\x00', 0xa4000021) creat(0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) 1m41.772213961s ago: executing program 5 (id=3434): bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32=0xffffffffffffffff], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_complete(0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r3, &(0x7f0000000540)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x1000, @dev={0xfe, 0x80, '\x00', 0x11}, 0xa, 0x1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000300)='>', 0x1}], 0x1}}], 0x1, 0xc88c4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') readlinkat(r4, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)=""/10, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r2, @ANYRESDEC=r0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x4, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000050002000000000085000000cc00000085000000000000000500feff0000000095"], &(0x7f00000003c0)='GPL\x00', 0x4}, 0x94) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x17c, 0x13, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0x62, 0x8, "e0ec162845d3e1ef4d2202e6422cc36e65e73cf87ba4460208d87e0879025e3c24b92516482fada0335bfe061e32fa4309cc6780573d322f8bb73bb942f0da3b34ea3f522d8328976e8fd2e70917e25e155d1705879b7142bb613bc125a8"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_USERDATA={0xd0, 0x8, "6d72ec3d4c9d51f98be7ac46612deb5cc9a9b1d77a0e499d58220130658dca22beb03a3c9092d1f1d768cc0eab6e234ac52717b54efa399bba3745dc70d8ffd0bc33131149622d22bef39541938d2d4345dc93bb8706fc004471c0e0eddb5ca8705b646cf1a43bf2e6ab4c670638bbbacbbdedb5f67fb2bf4821c6d7ea1f689bce26427710ec0f3e53a1ff2650f3d44457d4469c165845d861f079b55f031e25a2dffb8b85a6b2126130b91d5642eac529f943961f513e3b075234b652208ec099bc3407cad3d17231967d16"}]}, 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x801) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="180500001f0004000000000000000000850000007a00000095000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000080)=r6, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="30bf050913591b25dcc5703988488ed314b4dabd9ab43f23a3214856239b904531829671b1765a27df18a197b93545811fb7af5424f160927c8376d44a42dffd230808da2836d807cabf1b1f6ccf65a6ccb9c22e0bc68430"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, 0x25, r4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x10, r8}, 0xffffffffffffff19) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r9 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x0) syz_usb_disconnect(r9) syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r9, 0x40085507, &(0x7f0000000100)=0x1d) 1m40.988736545s ago: executing program 5 (id=3452): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = dup(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000001000000850000007800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x4) r6 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ae, 0x2, @perf_config_ext={0x0, 0x8}, 0x10d51d, 0xb6a0, 0x0, 0x0, 0x4, 0xf22, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r6, 0x4008240b, &(0x7f0000001900)={0x1, 0x80, 0x6, 0x9, 0x0, 0x1, 0x0, 0x1, 0x55804, 0x7, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={0x0, 0xa}, 0x8, 0x0, 0x0, 0x5, 0x5, 0xffff, 0x8a1e}) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r7, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x0, 0x1, 0xc1}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20044090}, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f00000000c0)={@in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}}, 0x0, 0x0, 0xffff, 0x0, "de2170420b42866d263a524b8f533db671e3fb462f6e152472578c7e9359d81409d1a02b9c2248e87414c4cfec9913387fd71cf21f357c8ca38ffddab5d147245ed5bdcdfaf4e9530630c66996c4905b"}, 0xd8) syz_emit_ethernet(0x4e, &(0x7f0000000ac0)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, @val={@void, {0x8100, 0x3, 0x1, 0xffe}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "a6be78", 0x14, 0x6, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, {[], {{0x4e20, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x2, 0x44, 0x0, 0x3}}}}}}}, 0x0) 1m40.843766212s ago: executing program 5 (id=3455): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='ext4_ext_remove_space_done\x00', r0, 0x0, 0xfaf}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000280), 0xc) r2 = socket(0x10, 0x3, 0x9) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"/2832], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff4f}, 0x48) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x21000}, 0xc, &(0x7f0000000180)={&(0x7f0000000a00)=ANY=[@ANYBLOB="d6ade4536c486e2475ca02186a44ced6e0301fc372a10cb4b8aec09ac6fc6de4a7fb263c83858e7f226beeb3990546d9cd5d28451c1bef06b6db4ae91580ab63974a23685ee80095e2c8ebc1051264766f5399bf54f42e6afbf8411b20bd5d411e4c235a44b0e3de8f19b4df384e6dd056545fe32eecabe279ae0e66624aaa7927dd111263246742ac0d0abb6432baa267b0dc73f2a36220d0e3e03395f6396e10d7a7318dd7b539a3ac9f1002a819699f82fa", @ANYRESHEX, @ANYRES32=r1], 0x28}, 0x1, 0x0, 0x0, 0x88}, 0x880) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000d17dd4dd7b9aeccce6ab97d6bbbcdc600edffff0b00c4570e4b6d001d6500"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r3, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bind$802154_dgram(0xffffffffffffffff, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='mm_page_free\x00', r4, 0x0, 0xfffffffff7fffffc}, 0xc) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000003, 0x4c831, 0xffffffffffffffff, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r5, 0x0, 0x0, 0x4890, &(0x7f0000000040)={0xa, 0x0, 0xfffdfffd, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x3, 0x4}, 0x20) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000480)='./file2\x00', 0x101c08a, &(0x7f00000001c0)=ANY=[], 0x46, 0x2c1, &(0x7f0000001880)="$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") bind$pptp(r2, &(0x7f0000000200)={0x18, 0x2, {0x1, @empty}}, 0x1e) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f0000000080)) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r6) r7 = memfd_secret(0x80000) fchownat(r7, 0x0, 0x0, 0x0, 0x1000) 1m39.96494464s ago: executing program 5 (id=3488): keyctl$get_security(0x11, 0x0, 0x0, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) mkdir(&(0x7f0000000440)='./control\x00', 0x183) rmdir(&(0x7f0000000100)='./control\x00') 1m39.831991826s ago: executing program 5 (id=3494): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1m39.831889916s ago: executing program 39 (id=3494): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1m36.426405665s ago: executing program 2 (id=3495): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@debug}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$eJzs3c9rFGcfAPDvTH6avO+bKC+8rz3UQCkKrYmJWqQUau5F7I9/IDVRxGgkSaFRwQjtsfTSQ6GnHmr/i1borfTQaw+9F0FK8VCL1C2zOxs3m93Nz/3h7ucDa+aZmczznTXfPM88eWY2gJ41kf2TRhyNiJtJxFjFtv7IN06U9nv8x51L2SuJQuH935O4czdZrzxWkn8dzb/577FIfk4jjvRtrXdl7da1ucXFheW8PLV6/ebUytqtk1evz11ZuLJwY+aNmXNnz5w9N31qX+c3UGPdN189Taa//fVCEufjWR5bdl7V+w3tq+bsPZuIQsmTyvXZ+3pun8fuFH+OlX9OnkuqV9CxLud5m+XJ/2Is+ir+N8fi03fbGhzQVIUkym0U0HOSOvn/42yj3wzDTYsHaJVyP6B8bV/rOnirtMm9EqAVHs2WBqRKuT8QEeX87y+NDcZwcWxg5HGyaZwniYj9jcyVZHX89MOFT7JX1BmHA5pj/V55lLu6/U+KuTkew8XSyON0c/6vFwpp3hPI1r+3x/onqsryH1pn/V5E/D9v/wdjx/mf5rlbzv8P91i//AcAAAAAAICD82A2Il6vNf8v3Zj/M1hj/s9oRJw/gPq3//tf+jBfSKp2HTyA6qGnPZqNeKvm/N+NOb7jfXnp38X5ALeTy1cXF05FxH8i4kQMDGXl6arjVs4QPvnZkS/r1V85/y97ZfWX5wLmR3rYX3Uj7vzc6tx+zxuIeHQv4qXi/N9j+ZrN83+y9j+p0f5n+X1zh3UcefX+xXrbts9/oFkKX0ccr9n+P+9uJ42fzzFV7A9MlXsFW718+/Pv6tVfnf9NOEWgjqz9H2mc/0NJ5fN6VnZ3/Owi/fRaf6He9r32/weTD/qiYhDg47nV1eXpiMHkna3rZ3YXM3SrPB+ORZ4vWf6feKXx+N9G/78iDw9FxPoO6hveZrv+P7RPlv/zjdv/8c3t/+4XZu6Pf1+v/os7av/PFNv0E/ka439QaevzOHaaoG0JFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABecGlE/CuSdHJjOU0nJyNGI+K/MZIuLq2svnZ56aMb89m2iPEYSMuf9DtWKiflz/8fryjPVJVPR8ThiPii71CxPHlpaXG+3ScPAAAAAAAAAAAAAAAAAAAAHWK0eM9/Yaj6/v/Mb33tjg5ouv78q3yH3tO/5+8sDB1oIEDL7T3/gRdYds2/i/wfaGYsQBvUz/8nTwtFLQ0HaCH9f+hde8x/fy6ALqD9h161wzG94WbHAbSD9h8AAAAAALrK4WMPfkkiYv3NQ8VXZjDfZrI/dLe03QEAbWMOL/Su/qV2RwC0i2t8INlY+qvmzf71Z/8nzQkIAAAAAAAAAAAAANji+FH3/0Ovanz/v7n90M0a3P9fK/k9LgC6SP2P/tD2Q7dzjQ9s19q7/x8AAAAAAAAAAAAAOsDwrWtzi4sLyytrL97C250Rxu4W1uc6IoxdLBTuRjTe51lzah+IiE55E5ZXsmhaVVf5ERxtPOU2/14CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2/BMAAP//cdEbCg==") mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r0, 0x0, 0x0, 0xd37) 1m36.29542286s ago: executing program 2 (id=3550): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000000)='system_u:object_r:fuse_device_t:s0\x00', 0x23) futex(&(0x7f0000000040)=0x1, 0x8, 0x0, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)=0x2, 0x2) 1m34.043907189s ago: executing program 2 (id=3582): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) shmget$private(0x0, 0x4000, 0x2, &(0x7f0000ffc000/0x4000)=nil) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="58000000020605000000000000000000070000000c000780080012400000ffff0500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b00000000d70cac316d3cb2121c14aa21"], 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) mremap(&(0x7f00009a1000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000fef000/0x4000)=nil) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000700)='kfree\x00', r3}, 0x18) r4 = openat$cgroup_netprio_ifpriomap(r2, &(0x7f00000002c0), 0x2, 0x0) readv(r2, &(0x7f0000000200)=[{&(0x7f0000000480)=""/220, 0xdc}], 0x1) pidfd_getfd(r2, r4, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev\x00') close_range(r5, r5, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000440)='sched_switch\x00', r3, 0x0, 0x3}, 0x18) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0xc) 1m34.0192126s ago: executing program 40 (id=3582): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) shmget$private(0x0, 0x4000, 0x2, &(0x7f0000ffc000/0x4000)=nil) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="58000000020605000000000000000000070000000c000780080012400000ffff0500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b00000000d70cac316d3cb2121c14aa21"], 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) mremap(&(0x7f00009a1000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000fef000/0x4000)=nil) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000700)='kfree\x00', r3}, 0x18) r4 = openat$cgroup_netprio_ifpriomap(r2, &(0x7f00000002c0), 0x2, 0x0) readv(r2, &(0x7f0000000200)=[{&(0x7f0000000480)=""/220, 0xdc}], 0x1) pidfd_getfd(r2, r4, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev\x00') close_range(r5, r5, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000440)='sched_switch\x00', r3, 0x0, 0x3}, 0x18) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0xc) 4.048847463s ago: executing program 4 (id=5447): bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x80210, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000300)}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xd, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4, 0x0, 0x4}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="00761b67c87b9b1400000000001a2ddedb000700", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000240), &(0x7f0000000280)=r5}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x9}, 0x18) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xb, 0x4, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='kfree\x00', r6}, 0x18) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r8, 0x0, r7, 0x0, 0x6, 0x0) fcntl$setpipe(r7, 0x407, 0xb) sendmsg$NFNL_MSG_CTHELPER_GET(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000010901010000007eaf9f1c41a1e42e00"], 0x14}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x448, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x318, 0x0, 0x40, 0x0, 0x1000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000f00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r9}, 0x18) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000200)={0x41, 0x0, 0x2}, 0x10) 3.699541148s ago: executing program 4 (id=5456): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000004c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000000000, 0x1000000000}, 0x10208, 0x0, 0x2, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000000000005000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r9, 0x0, 0x5}, 0x18) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x4000, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x1, 0x21b, &(0x7f0000000540)="$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") sendmsg$nl_route_sched(r7, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002600)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x2, 0x275, 0x0, 0x0, 0x3}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x679, 0x0, 0x80000000, 0x2000000, 0x2, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40000, 0x2, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0xd2e, 0x0, 0x0, 0x0, 0x10, 0x29064778, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0x37, 0x5, 0x1, 0x0, 0xfffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x5, 0x20000, 0x0, 0xb, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x101, 0x563, 0x0, 0x0, 0x0, 0x4271, 0x40000000, 0x400, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xf566, 0x100000, 0x2, 0xfffffff1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x5, 0x0, 0x0, 0xffffffff, 0x9, 0x5, 0x20, 0x0, 0x3, 0x10000, 0x1, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10000004a56}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x0, 0x7, 0xfea7, 0x1, 0xffff7ffd, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0x103, 0x5, 0x3, 0x1ff, 0xe5, 0x2d, 0xe, 0x3, 0xa, 0x3, 0x1, 0x9, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0001, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0x1, 0x8fe, 0xbf0, 0x9, 0x3, 0x9, 0x7ffffffd, 0x6, 0x0, 0x8, 0x800, 0x9, 0x4, 0x100, 0x401, 0x8, 0x3, 0xb5, 0x10001, 0x401, 0x1, 0x7f, 0x0, 0x8, 0x3, 0x7f, 0x0, 0x2, 0x4, 0x0, 0x1000004, 0x7ffd, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x0, 0x2000007, 0xeb22, 0xd, 0x8000, 0xfffffff7, 0x0, 0x4, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0x10000, 0x3, 0x1, 0x0, 0x2, 0x6, 0x5, 0x6, 0xe5a, 0x4, 0x2, 0x81, 0xd44, 0x9, 0x6, 0x7fff, 0x1000800, 0xfffffff4, 0x10000, 0x5, 0x8, 0xba, 0x2, 0x89, 0x2, 0x6, 0x6, 0x9, 0xffffa3e0, 0x86b9, 0x40ff, 0x1, 0x2, 0x12, 0x24b9, 0x8, 0xe01, 0x1, 0x6430, 0xd, 0x8, 0x0, 0x3, 0x7eb6, 0x3, 0x0, 0x200, 0xfffffeff, 0x9, 0xff, 0xa, 0x100, 0x7, 0x100, 0x1, 0x8001, 0x100, 0xffff9c71, 0x8, 0x2, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0xfffffffd, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0xfffffffe, 0x0, 0x5, 0x2, 0x65, 0x40, 0xfffffa0a, 0x8, 0x0, 0x2, 0x4, 0x35bc2, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x0, 0x6, 0x8, 0x28, 0x2, 0x5, 0x10001, 0xffffffff, 0xf, 0xffffffff, 0x1, 0x723, 0x0, 0x9, 0x9, 0x4, 0x6, 0x7, 0x200, 0xfffffbff, 0x7, 0x3, 0x8, 0x5, 0xfffffffb, 0x2, 0x7f, 0x2, 0x80000002, 0x0, 0x9, 0x1ff, 0xfffffffb, 0x928, 0x4, 0xffffffff, 0x5, 0x6042, 0xb85, 0x6, 0x8d8d, 0x55, 0x101, 0x3, 0x64e8, 0x8, 0x82f, 0x772, 0x80a, 0xffe, 0x3ff, 0x3f7, 0x4, 0x8, 0x8, 0x1, 0x5d, 0x9, 0x9, 0x80]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x898}, 0x1, 0x0, 0x0, 0x50}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b000000000000"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f00000002c0)={r4, r10}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 3.607997032s ago: executing program 4 (id=5459): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10021, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r3 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYRESDEC=r4, @ANYRES16=0x0, @ANYRES64=r3, @ANYRES8=r2, @ANYRES32=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x16) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) sendmsg$unix(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000008000000000000000000ca12381707593273642268df3b62ec95ec172336848e681050ea07ed5ede21070000000000000090ede392cfbaa1a5750260c93ab2554642edc0612ad077b1754926377043a74a0ccf36abca82f7c8cb26a660cce6627daa23688afec4de5bd7a9598651", @ANYRES32=r4, @ANYRES32=r5], 0x18, 0x841}, 0x84) r8 = getpid() r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/nf_conntrack_expect\x00') r10 = syz_pidfd_open(r8, 0x0) setns(r10, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f00000008c0)='.\x00', 0x0, &(0x7f0000000880)={0xf, 0x8e, 0x20000, {r9}}, 0x20) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf}, 0x20) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r11 = syz_pidfd_open(r3, 0x0) r12 = pidfd_getfd(r11, r11, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r12, 0x1, &(0x7f0000000540)={0xc9, 0x2, 0xb, "858f02d40c62143ab0bf3e150989eaa1c254df7fd357639ed808fe273a3f60ff2d58431af79e318558753d45039af24477dda41ba4c8fc61c3cd4b8bfd6322529aa58a917f89b04597ac78e82d8250e4f38554e9103001de8d93ca15fd7537e154007a9dbf58dbeceebea135b66492a50400eb623e1cd08cb49155ae72e59408ad78683c3ba899e4b326f83a6e9655cf02a4a74dc8212cc7d24ef65f4bfde85f9be4cef859d0bda5f2d3f5aee5efe30e7a94431bef7db9cc41f801500073fc657a85a3d4bcfcbe5ac4"}) setns(r12, 0x66020000) creat(&(0x7f0000000080)='./file1\x00', 0x1a7) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x2104010, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x120091, 0x0) 3.447904249s ago: executing program 9 (id=5466): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x2, &(0x7f00000002c0)=[{0xfff, 0x6, 0x1, 0x401}, {0x95, 0x7, 0xc, 0x6}]}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r1, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x4}, 0x1c) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, 0x0}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg$inet(r2, &(0x7f00000063c0)=[{{&(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000300)}, {&(0x7f0000000480)="3914fcd534946c6f181d07af0e6c6759ab07e6647587a8008bd21986c28973d40cf90c8f0b8725665f3cb0908d6fd4cbdac341239d40569b1921a1bcc93190ebf22949f15167c7c8ba9b9aa6a0c0b79e9098bb06e45b360293227c3f8c", 0x5d}, {&(0x7f0000000500)="cd8e6c873f0832f2cb8aa3dcaec2a419883e46ffa3499b3f42484dcee0630c439d6ad531199933fdf757745ed9a82db9b9ada2b9c1c1d4d5e96b34413e7caf3ae48e306e395896a8e202f6bd2e973f7203e7a4d6676dbaaf3243340be2ca04e27526fc486fd33eefaa9f", 0x6a}, {&(0x7f0000000340)="ee0dca", 0x3}, {&(0x7f0000000580)="e5e2241ea1b387d3f564a3a91b192e1d6bcf47e9708b5a56dfd65664335042bd73584859", 0x24}, {&(0x7f00000005c0)="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", 0xfe}, {&(0x7f00000006c0)="5121f268065747a580a1b8a5f88e723ea28ffc7ff570229be3d6a2a6c6a7f1dec58b3e3ebf867462411579c9ec0664a13604f3da42d2c4b9f5848f54d4eb", 0x3e}], 0x7, &(0x7f0000000800)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x400}}, @ip_retopts={{0xc4, 0x0, 0x7, {[@rr={0x7, 0x1b, 0x93, [@multicast1, @dev={0xac, 0x14, 0x14, 0xe}, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x27}, @remote, @remote]}, @timestamp={0x44, 0x8, 0x59, 0x0, 0x1, [0x3]}, @generic={0x83, 0xf, "9f54e6dff7424afca8214c9ec6"}, @timestamp_addr={0x44, 0x3c, 0x93, 0x1, 0x5, [{@loopback, 0x80}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0x400}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff}, {@multicast2, 0xc00000}, {@empty, 0xfffffe00}, {@broadcast, 0x7}, {@local, 0x5}]}, @timestamp_addr={0x44, 0x44, 0x41, 0x1, 0x9, [{@broadcast, 0x8}, {@empty, 0x8}, {@rand_addr=0x64010102, 0x7}, {@multicast2, 0x40}, {@loopback, 0x1}, {@rand_addr=0x64010102}, {@broadcast, 0x4}, {@multicast2, 0xa790}]}]}}}, @ip_retopts={{0x94, 0x0, 0x7, {[@end, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x44, 0x5b, 0x1, 0x7, [{@dev={0xac, 0x14, 0x14, 0x40}}, {@broadcast, 0x416}, {@dev={0xac, 0x14, 0x14, 0x18}, 0x3}, {@private=0xa010101, 0x277f06f9}, {@multicast1, 0x4de38ada}, {@remote, 0x3}, {@private=0xa010100, 0x6}, {@local, 0x5aa}]}, @end, @rr={0x7, 0x2b, 0x18, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @rand_addr=0x64010102, @broadcast, @broadcast, @remote, @local, @rand_addr=0x64010101, @loopback]}, @timestamp_prespec={0x44, 0xc, 0x31, 0x3, 0x0, [{@empty, 0x8}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x101}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @loopback}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @broadcast}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}], 0x220}}, {{&(0x7f0000000a40)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000ac0)=[{&(0x7f0000001880)="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", 0x800}, {&(0x7f0000000a80)}], 0x2, &(0x7f0000002880)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_retopts={{0x30, 0x0, 0x7, {[@lsrr={0x83, 0x1f, 0xf, [@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0xd}, @multicast1, @rand_addr=0x64010102, @local, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @local}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5ba945c}}, @ip_ttl={{0x14, 0x0, 0x2, 0xa1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0xb0}}, {{&(0x7f0000000b00)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000b40)=[{&(0x7f0000002940)="173db704263c49bd2710e89cde51cae626bb18ec1e3bdf0cbdb95ac3863167ac3cc11421508dd64661cedcaf7fc9811ab1edffbf660fa9d9e8c0dd80667c6695e29dd517cd17b55bfb792c873ad835e0285386ea89c7ce896a91b841962c71c988937f891c9f67ad3705cfe62a91d40ba35dd832df6438e88ae3cdca3e4866e1c888bc856422400097c231ac266010182bd2e6eed6b37fa22119e4a99576b03c1dab51425a58c50c3fe8a9578cb606891471c93bdfdaa6075d7627fe50f03c15760e3939da3afd39cd747f75ed8827ed1500db96c974a736bb2c301670f227bbc37b6824cfeddb32ddb949cabc202ed575558e658b351d9fa97080be6adc646c09dd3d83a08f9e44c393b870936fbe17864eccf0d4dc160e31c810433ed4557bf67a3944e96e20903520d222b9ea072e73ccde1fa0a68bf23af8488657745e8d676e209a1cdccc15f0c265722f96b3e667870fe30e4915f6b610461917b3c50a2adb4f7a50c2b6089baf4635181ad931c2974d810fe0833437bab46df99d746d8135d521a9dc14d51e2a36cfc5801a6a99ba9f6b6d89e1ea6d0258fc57e59a2cc95f8880816e31493a44e3b1ac8e267cc5c970aeb3d95e09c879394550487e83ba322e48105e8644dfbc447cf0a13e9daa76a55194175b6539aa87347ba650d065a4f201c4b4e907f4328b2f5e6e902a0fa96b342194fbba839ee789d6b62489551da4f054673c8ce7d7c4fb4265685503d5293f6f6fbb69efc1ffbdb4f86a7fa04e697e58b3f5d8b29b5a723b959794b9e787ab3c78012cc76ec8c377a256bdef9b2621f72d9ac06dd64f95b3157d10f57655a6571b105a68c10a95811f8fcb231e8c361f57063d079eac246be199ecc542c86eb52fcf74c1f572cc6680c715f3d7b89d0ee526e402136933377ab7265b80f43b3053b6fc96fcaa9c4c2b15fd086fd16c8322e4dd639a8a93d48cc5c2805049114750f79cdaf2857add1d57ae0f45528d4e1b87950e976063d6245422e193650ead49471128ac8782c55782072567fc0974d518f2286b57ad958cbf7ca24c93c8b544570b21d8dc21a60faaaed561ecc58ce6a13aa22cf6743fdc3f38fa1e5983cafb6f99020fd514eb7f7ade633c0e04796ca888de6e36ed46dbe67f7f7be533f3ffeab104e3b1cb6562515a10210c579817aadee6103885e3a578cc137d00b25715cd4430ee95b971178186ee32faf536f660d3ee21329e053f361519f00f61123665380517e1eaf9c15d8f67ff87b1dcd6bf059493182cb76eae3ae2d1f759449ad860dc4b99c1a796081f957b1b1118fc68a6befb6eda3200127c851852dfb699199bedaab3a2469a97f09dcfca99d4fe58934b21289e94b74f1a465dc6616dd250be50c30559014b92d557b6b40eebc11f653b5e7c4d03e0c21cc1c4d3699256bf86f58167ae922fb888db2bcc1536e68d914f058988afcd8b70774610a09feaf06ab4dc7247bcbe60f96b29676ae1513f4e56468cc6b52a1c2555098ea31cd5d1e13365a2b29496ab4b24727daae8dc07dee390121039f58d61047b552dec94d22e7ccd990f3b082ecdeab76d541993a1b51bf5e9d81ed96c855c18716964f25f4f94eddee6966fbfd664836e6814080e17d360891c8091551677efaac32add0287735d578fcf0d2c9dd609f3ef86df5a46372ce04dd624a6fd96ea22732d2856d067c990eff9c2cb359b124e7236bcd6213999ce1e84e0875d32653d80c9a3721a89beee8f1f5ccc42f2fffbd44793b653d2b9f63dd4b972ed564bf2e562a1bdb561e5fbc97818ddca8b9231568c7733232080143c3b58f138d8253d14652e826884d57f67a5077c9bb5c9d45fbb2680fe011540496b10e0428dd03714b4286367faddc9511d3831428c5112027834c8f94d8a13373e53134e97b73a32ee3fe828b6c0b1b91fe4a363c2f041e2148ecf755a7341d9eb7a4129ec433b384f882da3c4f009d55799b8d0c26b1cebd50c7b3dbecbdb25c17dee3e5249b66167feb913fa852bee7fd1eb6638834643dbd5bbe898ace23b3547da3f1bd7bb4a0454238b35cde5526457ab942f90df58698dfb45f19967952f2fd8e526ab7360a99cf5dc381b84c8e0e170ee5cba17195689a807aea1eaa5fdcd97af14e9583f6f20f4939e6c7a9ed4dcd80769715c0ae2ca487cb0d0bf2dca8b9563e2de72e7f0a51220cdd4225bd7d2488f07a2be1113bec2ce89ac74141ef522c2f97b2a41310be5d0c2076f4295fee637f842df23d5d38e9ec6772acc31df54f2075fbba55838babe7ab439a667f7dbef7964cc71187cd1382e40486186ab541aa9d391e0cd04f88452cdbafe974c74ac5353ad1c8a8fd783ea51b6bfff74be0dda500e38c1a6eeaea3617d6fbc6dc813b1cff49e3e6fdd9da30d9564e30c33efe28eb133d8ae0338b631bb1d436415c4f7892cd5dea6093e801fa5032cd1dd08aca1f9434ac9dd9032d080fe04ee063c6894138868b7b3c93cc238055935f8e7dd067e42f659101c650631b9b32a6b6db808d9df1fca662bbf7fb951c37ad96ff28be48932399baf4541c0b8f096c031753050a9a4c6c64cba9cf3a63b5e2f7bf5442388b586d94b8c783c9370eb3714c2f45072d5e85eb88ab94543fb07eb3c83ea2841c49388f084c140a3e50faae08538b6471d8c5cdb3e8ff175fe5930b414b67932a09be4560dada7ed6803460ae37e324c074e03fa999316260f778e017c8b686245edf7d261b3a2d4f730b64b5fed53876c89a03b39b699bcc3cfbc5fcaeb01e2de2698935d54c7b4488770f6e02371c5c1a7245eacf70aa798848d010732c27b5e0b4ace2f8af4fd9de4a29f73c98dce50c5079c5b0ef5417bf32d58861ff57b8722cbae4e67b1b8d7449c306b244a5a17b141a8c8474166008e6987447452de3342559cf9a5d11ea96f0f08ffd2e44e172e7e8d49add7efe8c87be6dce991fa459aa2ff673f64d388ab4d8c350d5e79115e8e87ed761e3961079a4cfe1a33c092ca7cfd2405571920d40f55addff40a0b0c0f39c044ef0a2e7a738cbef720a6ed2fac2aaf61eac94746e83757d3c88cf0626a6e0382c1c5e28ac53f860ec06458ed1fc50108d5ab24f5af87445bae3d35d48cbd498b80d4b34c23beab1a92abc027471bf0725d00b39fbe35c4965d1a5eb05ec6d4a5b64d5f9da11ac971043ec9b92c762b66f6a2f30c31e055b54f4d0b358f351fe64af4725cf27cef82014e753e74aafdd97eb2af4406de287abe34eb64bf6ebce3cc95c50a347ebe1c5722081aeaf7da836584ca16526010704931843d81d5bb9ea8fdf08677bcaaf8162e17f5bfb15dcaacdcdeee05e47bf072fab2f963dec2a044be0980922b92b44f54d2217af38d1e2fd164cd755354d7fa528af8f63b7cde561b94f94302e092692744a7bc557b80fddfa0efabe9bd0fa0c46db47b67c6a308262877c1de7c7a5b7e12c9adf6e63f1632b11a9f8734d780954cb6a5a97e464cd0b3103232726c9d73d0bec4117f8a2f65e45d2ca8f66261af371c0286aae2e75b59e353d2ec3dc9fdb643066c737b931e50a6a78498fcbe0c8dccb3c609428c0519810eae6bbd17943b0207f0e9c1ba422429a7516943096ed8157aad61969641816ba3d1ca2a5d9c5a83f81dc38398151c350015a230e118ca2c7896efe52afd0958175a92d3eca73ccf0bb160b09c45e29225eb8537c766f41e911bbf530b28d00c468c03716cf91d7da7b24673581b03a5b1fe50dd0e660614ca423bcf853060cd54bac7a7b52e95df95efe04dfcff8aa30242d4c5e18056c23406025270e6a71cd688d24f09e65f10b4e3a62b7790d17503f7ebdaf46cdca0519b6d0479773a4b679da268971260c8b3caaed6606ca4c365df126677a97fe0f885556e955ddf57eaeaa017094fdfe446b2e895ab2fa2421baba5b5c9b96020b209ef354176a916e62d93586016f9ac91b5cedfeeb1fbc909520a1afb4d69c8c0507b69966d8e48e7536bfceec99520316b20be974ae040a167682744bc4db949ccc279d1f7b2bd4fca87a76eaad2f6a3a4fde5881d093b396d10e120f8dccb042a97aaa40ea1d40f156d87853ca569c98ef43e05bb6cd6ea6f07c1a5575ddcec649612081d253724701aa7ff1680f00ca5c5a0545046b22e652b11d83a6b17b5508e894bec860260ad3beaf4f875157491d0af2e4fd4ad005178454abbdfc3ef7684eae9801164a196ab3a2fc68e5794dfb99cd6dd44af9fbb749dbb210b560430a805f1f466e8c546727b8ebb503c357306534d354d8b41a8fa41dc77035b4b0d56f0bbd3a7642098260033db830d1799490568f291489e1a0413eeaccd9f5510fb1bb0a1c12dfb7bbfa78dcc0c2dd940daaacf7bcbbaf0deb6cdac26e698a6db4d081af12d34138ea53125fbff5426bd475698229d5a42e8c646b3fc7785bcace68aeba29f18e9a52b28765cfbe4bbedec51ecc9374925795876f55e521f162b258b7f872710a8b599645e00da55f9afe72e272552264dc6a0fbc0c942f987fb8bf09d5da95e0dc13817b8140977c816002acf2d7fabede5e40251e817063034e5dcd7ff5b1b3904c2e43e6739877535eadc06ed26c262f173b9a035db5899cfae3fcc36ab986a66622acb5001a045e57da4057c98692a990b54fce47d844338c57639f552231314f804273b87b83ff239cd808d49ab5b0b731a6d0f7cd4a8849ec27ca23ef8e541829c264e75816904e65c875465270d0de236500cad04b32fae6f08afd3b6a591f5c01c8c0b2c4a8e71f938bc3449e0b8436eea851cb15e15f388cc42388487d540265cada8093a8b8cd53be76ba86af3bf2776df24bb34375783bf7a111f9d907647408b7e848a37eabdd560c7c97810ddde20acba2421bc29b925dae2a2f0d56e0fa692c0e69d84e1130da799e2cb1da3591095e00ea15fc0a53971018fc15b6d6a3ff651e1952572eb9843d6468a40c5683b9c4425eb0b48f3fa2b254a337c9973d02126e7fe5f6f029013e9d9fe95773b643768b7f1d46ec8918b7ef8166684ff4c71f9f21613e7f4c60ea252758b5942bf06fe762ec3dc234e92f1eb420746a2e1fb6610b46220749fc152ddb35ade3dbd31a479b11209d750ed3d2a6d808970f1a149e277b982fca5553a145ea0d2d13720e7573aa07f2ccddf2154e106b9764a6e93334ba71b5c7b5d8ad79e8ce92fd32a4cfe1936a63c77fd156624299b4cf4820dfdfb0fe126fe8a3502fd545d236e2623255fd83f05ae0295da571d4102d92000e1e26912c2dbc334258ab61b210b1e187d92840ecdb5adbf8287f7461ab50b799bfb8eb1ad6e71bb260919d262c89216680cbbb0f273bf537efb23a5246816f23ed5d33a70184c527211d3785a3d131aaee2894f0d603971f69b36ad30506eae30cdf2ff3ef611376cdefa69d5e864782a26fcf0bef32129dc56377098aaf88d73ab189fe210745554ddb6c1e6d8bc5400df62a2edab4a5abc441684a98ebfd2ea5e2eb70e53e95667c378d485546f258c1a3d2fbcf2f8784e2857a4f90cbed82649746e00b9178b7d6054202786c6433cb7e96998feb956701820280f7d48abb602ff932e91dc242274065feb59a186c02caa7fead5d140db93f2147aaf7a536eb4d0d177c1e34c75939b8b2c88f5d25ff6d6f2df041347bcfacbdd78ceb32753091f594ab420562a76461ebcfad9c7aed353117028809059b77f6012ee4616a19ff77985523a89cb8ed801c6d0233b14faff8c604afaef42487fe31fecfdf9b832c49c5db5f91b3d143e", 0x1000}, {&(0x7f0000003940)="307c4f908e9738b0f7a0f8c84b65a9cb3a450e4f98e88802c967b31d1ca0ac34ee1e797ff40b9a0e35bf88d076299108ffa352604f65320195245852bb52e9e0f677c3becdf74899d2e26ccd477821f74e613ba00232f6ca954bedda829a64ff0a3407ea2697bc92ab02cd84a7f70222edd7f79fd85e085951970acbf65ee64122c25cc80cd7e41cce0691a3fd76518ca283fd79afa7253f10e69f7b65c34b9a96d18d0f33fd9e57e3382e7b4d12d59a1b291d0612326d3c8feae648e4fab0a21bb1408ab05b", 0xc6}, {&(0x7f0000003a40)="877a541192123e07d7c3bdb5790ffb5d828dad15a2cf38126c7679dffc2888e715e0e8cfdbdbe7d1041d7d0cc167247f207af963a1ee3d057b8c3c4191510a757ca3345a5845c83fcc78dd423b06aa6b1ea9119aae2d3ce1a252caff8a5b48554863d7c24009c2262cf34cb96424e660a8d15c49d166a523ad86dcb05cc56c728cbf8fffeca2578e2744b5bd0ced5ad13fc167371d60856f78873890c12617f371a2254a1a445d8d7ee0208909a831e7ffdf83468ecfbe76edb75a41c50953b40edb204f9feca6130d21", 0xca}], 0x3, &(0x7f0000003c40)=[@ip_ttl={{0x14, 0x0, 0x2, 0xfffffff4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_ttl={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @rand_addr=0x64010101}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7f}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010100, @loopback}}}], 0xa8}}, {{&(0x7f0000003d00)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000003e40)=[{&(0x7f0000003d40)}, {&(0x7f0000003d80)="a28fbc16dc59b572c51e86aede234c81b5f4b5673fdb60824cca1c4a736cf8ca23734d14eaa53caab3691f9d2e7fdac7001c081deec1b870d3ec47d9841ff0c65df2d292548c18dc803db351c666180dd95730a4210ab3108d5df70b0036b653f05721e35283b5d288eb3fa117d3b263d9accd2a40805833d6766f460c37097cb6c31f52849fc51d9f290b735d60cfc673338bbde95d71ab0b05fdc1cddf97cabf9f27d0ee12d107c2b9fc60a5da061f7319df71f96eae12956ae3", 0xbb}], 0x2, &(0x7f0000003e80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @empty}}}], 0x20}}, {{&(0x7f0000003ec0)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000045c0)=[{&(0x7f0000003f00)="a4e720ea86e335ebd47ee875986c07aab545b321f9d6146ed170299f732c61ce7d7c0f53819b10546cc4763cab8dd52393073129ecff40823b26767f2595ff7f0156d304c399f607eadd6614f7fdd34cc68963f52e25b94aa81e0e4ff9edda59daefd43afcef9afb08d13e12666d49b9ea062b73d4699387ead19a338cf2f459d11fd3c4df18339482b8e63ed003899f9f4f1e4aa8431f740294b01fe0fdedaff174286231c5bc", 0xa7}, {&(0x7f0000003fc0)="93bf7697852d7b6b4e1e451713d313f29d6d4db9c0f58bb72b62442f79fbad223b32524d3d5da2368a0c13b8ccd3c2d37e125be9a4a24472c8260668241a7b447518c76f3593d99f9ecedbd228976a9bf646ea31289d620be964c91456c6fd90bc328a03506535291a7e7336f0d7c0a3d83d9df03e2e1cde5fe81de138b1e27eee5fd15d78dc746a29f146e26a9a096ea5a93f032de514fedaaa2a7d01d968d6460381ddb2c1288b5c96c0b42fbc211e9cf0b5a8ac6d3898e1e4faba04e5eeaaf8709d197993cd15fcb5aaaf5fac63692151f93d96cb7480ccaf23a8", 0xdc}, {&(0x7f00000040c0)="c9e667d8d5f87f6a6b1795e0c4dafed0e218f5e1289ee288b268cb7f0c7297e0fdd81d411d495b92defb8f6407ee380e8e762564eceeebf8fe033da60ccefd290c4b9ca83f471edaacde5b17497aa89eea99667b90ddb395250421aaf9499c56e4290338a1fbc738bdfa234b183d5d75d0083743b39f1f15d57a3e8b0b61a1356327250625d385045961", 0x8a}, {&(0x7f0000004180)="ad17f16b15d3df1a2a223fbb25895a4820077ad1aed5c72d200b9c009c7ae8d8eac2cf6765b63cf8f5454086a9a7bd5d5fdb7c2f595da97ad81d566fe7429e6cc02f8e853f8a6cad8557a94975e379f5a0043a0a93345dbc5262b3ebb9dabb0e29d55618496b9dffe8f610dc687e51bb", 0x70}, {&(0x7f0000004200)="d9a6ccdecf6029d3a6aab8af632af34701490bfcd855fad63e70db2fd6ccc5dc36f710f2b574656ceca897f038571bb6ef4dd10a1b76234a6718f77eff03f70a4ca0dd93aea6d8f12371d7a63a93b8cec440d88f9d98183dae70bd734adefc608529696a05307d03b370ad65c96e4b30", 0x70}, {&(0x7f0000004280)="002550ec3c60202ce8", 0x9}, {&(0x7f00000042c0)="3a098f7fcec9e11a8b63f3bf569ede7593d3d074dec71a5e3c30bca5f88a6c5b3a2c9e67211d78cc59ca", 0x2a}, {&(0x7f0000004300)="271be3daf9e309be6ccf647d6427a3e20cf26606447f2d26728ccee4de54857ae5f5c9777275438ed2173b283fd4b057f432bdc04bb8ca8ebd13ba80c3c7e91a6a", 0x41}, {&(0x7f0000004380)="134831259bea6f4013d4d7bbf3bf0b5345781bc916db5c603aceae61bb550d3a1683e5cf0bb47528ae50d436b03d93ca8e04cbe9af9a7e8532d430905f93eee37826acb89f22adfd4dd0a251f51e46c5ae5febeb83af4438471dc3a6deab66612b9e991a297a1a59bed3957f5e5b1e82b42b19ae871d0283554350824e49aedf797a0a9208e7b92f6c7ff0b9d8604e49092345264a80e3ca37f08533d740e4b8b02ef46bbcb4d9", 0xa7}, {&(0x7f0000004500)="9acc249b0882df7079b326e5f50a1a8bd3ef72320a46d3921af8fed00df25eeb72328bc372c703fc1babba330822788772bb206a68360e7cc2e1c592a1a45f1ddf91db862a2d9e987c6861571b958908e421050c2329d51e97e4b8e05276a64d22323a71483255e80f5e45a78670dd8dbcafa6b58e72b9fbb514be5c1ce20ae18b0cc097d23c93732c5fa8280ae40ff0ee40f6dfcb180a1971786f0643c7fb164d", 0xa1}], 0xa, &(0x7f0000004740)=ANY=[@ANYBLOB="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"/448], 0x1c0}}, {{0x0, 0x0, &(0x7f0000004680)=[{&(0x7f0000004440)="cff2a8eb1d2cee64d120e6a6307e5f1ef8db6687354ec278e7cc5a4d677c4e0c0a7acf0606e2ac404053c5299def20fe9c113447c1de71a759c7d847ba760255a0baf908409cf9ada632eb981978d3fa6d77c69d2a78caafd7251f73a198a61ae2e2353e856a789708b2111a0dc0e5503e310a61af36", 0x76}], 0x1, &(0x7f00000046c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0x18}}, {{&(0x7f0000004900)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000004c40)=[{&(0x7f0000004940)="9279db539de04dee96de753568b9600fdea02c54b1166b293cc360c9510618c6dbea2077283e8a34fff9d7b68c40a06fe313e5dc7b5ce7c1a7f478a7f04d6fb028d58aedff19a4120256264b950f19ddcf49023d634bf0", 0x57}, {&(0x7f00000049c0)="6d4b8fec4c0fb94c23ca012bd030bcb6c9de9a6c9b2bd10347d7d62680f74cde376e4c5b233e6bedf2db531991f8d39e2adf20cd6b09", 0x36}, {&(0x7f0000004a00)="a95af3aa608c612596783ad7745a878443b07cd71db42db6daca73d2b58c2955d6c74b0f1605a85be3625d0b9de7998414ee064b76834596b26d8f11db4d1c4587d742ede334281657df015fba592bdba35aefb1f10238b05d3b7306071f9f0f41e284cddad87d09579b418bc7d848c8c08d9491891229b5bf5474c223ebdfcb0b540c6eae35e5a6b2751c16e648fbe00be4fa6489767dd9bf70cc35c2ebc682a0e8f1e196efd2ecbed7b4e12db0de4a7538ed5d71cf", 0xb6}, {&(0x7f0000004ac0)="a9efc45301738e4a35e18c58b21927fbf3c49a4364d6d8e66e1b3f813f6977151eae40c652a3b9b2ae7f9b574e768df4c1ad33cc05ccf397fe00fb38dc80a12536d37914ba67feca888650cf1505c2", 0x4f}, {&(0x7f0000004b40)="59ed1050a5db692caee7572b6da8d8861d8be0fcfdfe9915c32ed679cb37a17c84b45b9f91fdac147cad477b784e8b4e7a378c4b6ba4fb9536cad5a23d7119f4c4609dc60311e224aa6a3241339127e50841679a6c2f69838ca11101d5c2928334e579c6f9d619293f44dd2d1dc451a48227c086effbab25ae0a5d0d972d85f19e3bee9bb6f02bc8ae07544fc888e8b3a2815ee004931dff08246ec6bb0bc9d17c6c8f89388cdb7825ecd9ba23a186be6e245f50f760976fe589287cc8d78f0c4757cddcc62b2b82d02237284f8fb454d479e4912b89fdd9457b459f32c81c36751bb0721be2f138b49b51252c1a34621c16dfeba86ff4e5", 0xf8}], 0x5, &(0x7f0000004d40)=[@ip_ttl={{0x14, 0x0, 0x2, 0xfffffff7}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@lsrr={0x83, 0x1b, 0xb4, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @empty, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @generic={0x94, 0x10, "4580e49f5865a43da756b8a37767"}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @dev={0xac, 0x14, 0x14, 0x31}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x800}}], 0xa8}}, {{&(0x7f0000004e00)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000006240)=[{&(0x7f0000004e40)="4269c1449bde01f79b314ff3bf04bc97cdec5834238d3318abe3306ba7a78a476efbad3a845e82cef00a5d1f24f77ed0d99b0c9eca1a11a853fe6ae311bee21186476d271084f528f9f8b3dd3c1d4b5230333698e81a389a300508de", 0x5c}, {&(0x7f0000004ec0)="ca3a1d75c49d10846162bbf91e5fa39552f961e1321203d4d2cfa36d3de404ce1690ccf52961e05c5256918ed5a4d08136f98516778f8adf70854c6c4d37451d6be53aff0ff9fc2366dca1a096db95abd4ebe87991b6757ec6c094f772941913d709ad22ab3b75681f66e8492da4209823c3474d234aae450f5ca30f2ac10a5699720f3e952fd98ab474dd6138ffb032e8893a60c7e977326f6f77ba99007d1bba199560a0cc4ad59ed687c0", 0xac}, {&(0x7f0000004f80)="ce9c94ceb42ce9977338c271d48d65d9f981f76bb25c4605b2dd83dd2463fccf8d9289d595196aede20f6f020b32e1b67bb3b553620575e44451ec312b88a86362643946ce5c23bcaaa33256054a0ac20eea8e1fceed8813e2e6a18555d066c3774e4c99fd7958bb0f8c86d181b429287412be89ea19bfee7cf9bfa85e91de6ac33d3aef1ded8af85042db7f0e57ad34ddc98ec662dca3bb0db092bc74bcddeb99f1e5c9cc2b99f7d568e22140d35ef8cc21ef9c5a9573a8ae326111b9238cc87b2feee898ca1a2f5b29c2943d70bf16c61bc6ac8ca2212edbdf6282df618392ac2cc2a922cc9e5633ecea92a2d83594d5c8bf623e27c614e078ef531613ffa4bac210d238d808f077e1676206ab29314b5c82b94edbeba82401422a7155eba45ef76fe7bf22ba4b9237134e34fc10c8cde7f553c07435152e82503ecae7d2171cb475c42200c6970e8495d96a3c08cabfa5cefb8b693a24b446d58249c54ec759dcd6e653f17bbb2c8ec9d1f1fd77f00be54af9d482d8db890097e4f0a5aba8f84eaeca27b534d197d0f72a8c7050c17c4985a7172d718021493a8f5c4a74f8860efcc45e4af7db553db69a9a4f8089b6d40e5a8e6a3b1d593824db3f9f76f44ac583d1cf6d98477a7dd6cf4f9d285bdf0cfce412f9ab7781b2bb5169e241414dc0a0dc241c2c009e602ccfd016a6a0fd9267c1b81cc9c1bd108d8b287d6ee168c0b039f3f59c44daa10ce7c6ab2c127cc370337d734d7010decab08faacbc2540ea3d0dc988a31b781a45255335f413dd006ae7deefb44ff0614758734ac42b05722561aaaeb68859dfa0bd8ca64eed13649d664ee4a9b36e40c563ef1d8d767537383287400ae5c76b7a90faf9f48485147884299f72d98af6bee35edcc058395bbe0123e70baeaf902a317d25c265baea110d09c9a7822840123b234d3b326b68f53033aea1c2454a03fd9670d83e2142dcab2e75ddac2f6c30b6a0113f8d8036d0cd4e7254aaae00aa58f69c8eb06094f6deb8f5b15413a2634602e08ec9819fb19d19df2fbb95d31c9a916161e0adb8603b9c7d739b1311da08bad023f91e25c34ed52139f2a9f31ce5e87753a02585d0ace679d4a773bb3c60a5274a8416aac08fd98a3a99ad27207214fc192de1bbb3072fec665101a0383b3d8c50c6e0079297b1b452f31ea98b74ebdc8810a70ba617de0becce075f1111fd76f1eb1e10882ae6cdec27d9d47120168222333e90dc25e131c25af9fa129fefb53fd40b83907aafce48965acfe9fea45b59aed79e87b5448549e3d3b38cd8ae9e978dbd072c3119634a8fdb85d6b5fbbff9258f4b11bbd3e5f9f62f9d7ea05282e675fb8fa80bc2da289688cc8b409e2f21ede22fc428eacc2af4b42c4fa4b3b12c139b4d476231f60f3e53964b2a4b0ef85351dc01247431d1445f3ec8e141d0f9d2c06a0e54db1a22c7767cbb8f00c36b9149f3deb9e29706cd74f7b716dd47bc00085292d7866af18c84e0a026433ad53b43e4fbe02a90f255b5524dbea62900f527ff8df4d9eff65c63ce9d3995a79c39fd5c2324544dd023fbe76c134bc9e3042bba9ad561a25986ded5cb7bc4ceaebe2211485f6fcddefa0474ed6bdcd2b7732d7b9e95ae944d4a653f1f65d5e3d91ce4767b6f5a641e48f7a2285d4968866f20fcf02263fb0da3c37471098eed8baae24a6d6b25c316a8c0a0e9c5d389266e6cb78d98fbdecbc151aa3e799a47077b8a7413d19b35b3b39d37afda2d5e875b399020e80ff67aca94ee5dbcda7626e6fdbc5a413bd988277e75d17e77863163cc571c44c315f4169e533c6f521a0f2b25ad152ccab8b64233a7236b903040ebc81ac11d2c4741a4ce2f40bdb36c082c94ff315bcd47bf153ee836a316d1f466cb057205bf4a5c8828c1ecdf201819bead982b1a624d8b096e3dd75819c9a0aa6fb09af8458e308a1718cd449aaf7a0899fc57715f4659cd420b4670a30f52c568e29121e99a577c2124f70267e600993ee082ce7214f55eea9d6a5cf236bab914870e3d13bd572cf283170439c1893d6ac704ce2e40b914f2e4866e8070d899cb7a75543911eaf08d41d1005805cc650f38ed7edace29b5bb643a2e2eda2b130f1aeec39fe3dc0e8377364435870d5ee9c155657d59ea4e8e21b6fc5b7203d3fe19ed73a4766963bd552bdd2e60abb0beee02e02abd0c23b40d038ee248800aaadda8e7f6f35f4f1ebef7b19ab22e331b8c33bbe9474bf5d11dd3f46edf8fa369dc617341dc7612ab8a0281b20f254642dc29f637909eabc6f1b33eb019eaea28bbecf6249514f17629ccd82b855aeaae3e6a8d8f5c5bb571ce2faa9c46af726b3cc3edec40d2debde23189ab884a96aa54c2cbc2dbf00cde6ee39d3b78db2888bce55cae6861591d87d70ff48e60a80537ab527ae3d153045ea662de1cd5a4e7f5ac766087d797eace505b3d2f3efaab13c9d512080bff757abdadd30f78f9d0adde8c0328089ee4cada1011f7f70f897a8a4927be3cc3b0abc48fbccbf63e4bd9e3b9607afdadc30f2b45e9d72cf62e6b851336cb2f3a04972b0f5654cf18783c770ecef67e6dcde2769dd5f9b40a7eceaf442daaa6ec76be992510121d67c33c7443a25411d0d42edaae7a85c68d5fc42dad4cd9f3e4888cf87a07e372f1ad5f10fd1c3ba72d0ef3510548bf3510874dd8b7aeeae748a899955d186c7123056f5b96c4c0f129d4b27be316947344719c889125ab5601b6e495485bafef05ac1c6a82061f6428decb4e03b5452788b0a3d757aa2971cf96f4efe0d99538d058903ff0e0bb6de86bd1a3310248256f914f76fbccba4519a3313f035a8fe497dd4c45b37f69842d146c7d1593d3a8a7da536c5090f876f32c5f27cc46cca11b8687b79df67edb2f56c7bffe41360960f550a811fa199ff082497dbbb6c260e86093bfce2521bbac7bd597730512b9ce4155ab51ccf8bc39d208109567f10cc3255d824f27f9b92a53bd02cebc2d71072918a1e1ad8ca2aff29b2b26107e69b4a74d37c213b64da139b45a16daa39421dfb03f4bba285f6b2a0282435dc8c9efee2025dfaafe29f5f7a05b301f469f8cbf491b34de00b6c247b8b6eac29647ed20d31fda6d9bbe018bb966475780f621e1c6029212a4cb2b1a91f9fe1d902f5044ad99fbecbf2ae7e953dd0b66347fe71ec31dcf4d4c70dfb69b7c3f87b1ca80ac652d534c9f89030bd4baea8ba5268efca008088f6f76529c0809b88e7f0c2164cfb00ac90251848b035f1c5aa764b65331ea3281c7d1ef8dfd2a8e1b16dae166a1d70899d1b18abee2a4aaeae5bd1c0c3a78c1c63111312729837a828e0c9a6c1fe1be79d5879104ac18228d5ef0864dafa6a9fd54cd69d6283ccf9aa25bccd10cd2026c9b3a65af2dd1150d3d6488202c506e8d42e0524854b3a06ba9cc1c6e56befe4228862d5d90a0683d01d338ae9d64538a41daa0b490c57b523cae62b9238ccd98ffe19af112572170891397a14e706ca46180368e84336e3ada729380f2c31eddc9c1ca2e7b9732bd42b0a69e2d5548e6c407c3718eb0e577d75775566a59e2804e765592327e82d3faf63c2d24f652fe92a14fe7a12d168a7aaac2ab57221e17e388551dda0bbefdb607ccc53c175a343ac1e8896af438b18387cd568332caedffb03dc1212e3cd630867c30ddada3c2eeeb54bbedf60f2acf8d9a5841ede83b5a5e359da43f174e2b35e6fdc87072a6e0d8a3f02c785eff3e6a870df54d9d28d884143186268e059413511d792edc2bfc8bbcbf1ce987d77e25c52bdfea858048ff5c27efd7c8b325680d6209a87be6fe5258256e36085939d5089620ec9c4d437c3e6db75f81a8c333d78b5b153a4a3bafd4261c48779fda4dbae4d9009412f212c9fae89b1e11defc4243b04e7d472d24ebdca0bee50b7732aed6c3fcf03700ca0f63dcbec02c076406be71af37e34710be0e492d31291bd8171f3cff53febca42cf95df8849770ac8c98bdf944b2d30ea2e707c8195f1d064c6a6f37f4095f12bb3c56766a6d216a9690744280175edf76c93d50a5fe90b122e16e20ea335be1f72966c881a4415e7a3a604a6d57b1acfa3da75ccd964a5c9aa6add33975087553b75f38c30663e4cdc8f827cf64fac812116c1431a4d08579f2f481b8addd774aaf53c7c47d948a220f94a1b0b6a17a1675bb5a6a46cfbfd42d43b812516e9f57044d90c36759c012a83cdad9f10aad42569a76fa33f48004d45d6d71d574914f01f73145b504626de735479de6f3445b2eae8906b7ddeb5a9902be9095cd5a728c8d18fbf6debfd13c3b17874211a17e903958010cda7a1d3a4b3f3837c4d201c0556a9dba3cb379659f99a3c57ef332a13ccc235f1a142d8f5bdcc70e74ad3d1e8e4a856c1fc3a469bfa81ec811229449fd4bee41b4a6c0f0fa56d2ce8da461b937c034a0e4dcee57e7b12f7cd49bd998567d52fc5f03f9d16c7e6250d006cac439564a739e0711d6be08176446e0feceab87ea568e213b40fbb305cf253889333f98ea622b5cb647a0985497992223289552e2840b2ee263ed8cdd1b14d717bab4d298957ca6adac9dc66f032a128f837cac8ff1d1d0de07f5d9f3b2752eeec87d287c8e4755ad8e0329896e6131406beb8f08b3dad98e3dd1cad7e6d64f7c3af6774c2c2feb5d64418e958ef8257fd0b2956235cbd7460218d754cace400f35efbaf0c430a1f5784f758963d7a9082e08dd0a77f7f798526623aca5d838ee1b4c4aee025b6c67edddc913f4236089dddd7345fcaebe9a6866bfef1f82108660f8bd77f5a5cb653290324a29ef3ba2bad678e950790bfc1b574bbfdc2101953780db14d3a8eb9cb7daa121356f82fdd29c52b56789ea71810ea2117677022d553505e51bc114c1af937bda649e9bf1c693e5878b235e4e14788adbb089805b89f1170723e2856942be5ad48ec81f14bf177268e2e2175d5b8fc74b67787dd9debc4fb2e3e69f99c62fc54efe8a87304adcaecd5d13c158a21fbbd766e5abe0a423affc9d4e0cd922ef92817950ecb5278560be0bebf418a12c63d0041e5f29cd6175fcbbf5ee8f82dcf2c86f780096a9ace9fef554458652d5c15afe0526baff5f5e820eea65dedd9a040a9fea23579ca452f2cbfdb6056a9c6e6ee14e95ed06e6d97a24bc7ffad57ffe0200c100a0cfc8f9ca426fc2f5b061d86a0efbf10c082574231603e2718ba50b012ecf53b2c1f3b43a3ee7d67ae89491afa5e29ca17c2d21cec53b2e4421291d7a22a91b4c1a911357a9c28215bc06664a5818f0453986c8867c6801b625d5a807b04c5328b20754135637ec56d5b110abb49582d35e1551f5f6e9f3ee0b53a73b9258774c7566a696311521e095893584642703ca7fe3c700f8b9ca18f93a7453608908c47607163407cc2070b6afbcada65068a769fa2df62ab299a0a6779b66fa26add29679f177de9cd3e6856cd0b54d8e56d903c22978364af1c3898c6f3fbc3f5592967e68026cd86893a09871eae0df566e5e03e08f12b74b1a46e931fd6706ce76af9c590f35fc028213bcd4c8c040c036908ab9cdfaf4654b4525eb3c41b8042f04d52ffc2b0d9c44e7bf51a0d967ad7f0f0cd1b6859b4fb448b1a895d3167c7a7eff631e6d73d586bae1183cfc332f8c34d80908fd6527b4b5ee40802993cbbb2ba26018ff88541d0d61857428b1e18aa99d2c27bc31c4943176e2560b3783657fa0dac97fd15b84ecbd651db29485cc718b4bc26755d6d1740153aa12f028ca5e557b523456f7e", 0x1000}, {&(0x7f0000005f80)="624ecf0e492c59d0e4a168d25632f01744b65b57527beec5300d8420ff5207db302ef77f08c9ed62cd56e7e369a164aabcf3fc4ce91b5b29f868bf79393e34553c", 0x41}, {&(0x7f0000006000)="ff9c6467b054069a19b733329eb3bcd948df3beb1fc6b16cffc36aac9461bb6209be825991505248b855f06753430d0e779d37a79af12307ab8210680e9316862f38e53673ed680ec69eeebc9e18afccf4a13520fada43b90ba50b71089e478f37361486987daed7ebb06a8e318fdfcd3ff453e924b68b06ad8168e585f8c2a9fd3d", 0x82}, {&(0x7f00000060c0)="62ce209dfc20862b4438c64a38e5dc75b0f92acbd28d3269848a7d90f82917f9ff4ae258cae0a2787b6cde0a05d84e2e584e97b92d7ea5bbbb31345524126ebe7ba360d1dc4397bc671302996aa19b0547202e3fb144fbd3", 0x58}, {&(0x7f0000006140)="8c34d10d259fadc201b48c7b9555b56b475e3357c6dea806edc235bdf0fe6438f3e758cc3884046008cde57a8c45f1e2c95f0dc8a82c170da683b3fe0c04ba4650e7821a4ecaf04b77663d211c36cb998c705d99d77b1d90b00f22fcbb2c297a9fb3c0ce2bffa1404044480463d28870b0971e665c4174f249d0250c6aac0e16b1d4df3e12254ef55e", 0x89}, {&(0x7f0000006200)="47780a2efa31fba57af83dd6f8267db61a369ce23747a0f0c9d4fddfba00e01ca9a07804994b9009c0093b", 0x2b}], 0x8, &(0x7f00000062c0)=[@ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_retopts={{0x14, 0x0, 0x7, {[@end]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xb}}, @ip_retopts={{0x34, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0x9c, 0x1, 0x0, [{@private=0xa010100, 0x2}, {@remote, 0x9}]}, @rr={0x7, 0xf, 0x71, [@remote, @local, @rand_addr=0x64010100]}, @end]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp={0x44, 0x1c, 0x47, 0x0, 0x8, [0x7fffffff, 0x5844, 0xc42, 0x8be, 0x70, 0x6]}]}}}], 0xe0}}], 0x8, 0x40c4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x30}}, 0x20040000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x3, &(0x7f0000000300)=[{0x200000000006, 0x0, 0x0, 0x6}, {0x7, 0x80, 0x8, 0x7}, {0x9, 0x1, 0x6, 0x3f42e4ad}]}) setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f00000017c0)='./file1\x00', 0x0, &(0x7f0000000000), 0x1, 0xb80, &(0x7f0000000c40)="$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") chown(&(0x7f0000001840)='./file1\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004700)) 2.711859471s ago: executing program 4 (id=5479): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000a00)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r1, 0x0, 0x10000001}, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 2.698840002s ago: executing program 4 (id=5480): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0xdcb8, 0x10, 0x1, 0x2089}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) unshare(0x20060400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x8, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000004040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x29e782}) io_uring_enter(r2, 0x3518, 0xaddf, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {0x1, 0x6}, {0xd}, {0x11, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) 2.576479677s ago: executing program 9 (id=5481): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r4, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) r6 = dup(r5) r7 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0xa8000, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x100000000000007, 0x8, 0x3}, 0x0) sendfile(r6, r7, 0x0, 0x8000fffffffe) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) pselect6(0x40, &(0x7f0000000100)={0x2, 0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x7fff}, &(0x7f0000000340)={0x1f, 0x0, 0x0, 0x0, 0x10001, 0x1}, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000006c0)={0x0, 0x8, 0x20}, 0xc) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f00000002c0)={[{@barrier_val={'barrier', 0x3d, 0x2}}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@nodelalloc}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@nombcache}, {@nojournal_checksum}]}, 0x11, 0x553, &(0x7f0000001080)="$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") lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000380)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x1007}}, {@dioread_nolock}, {@bsdgroups}]}, 0x53, 0x4f3, &(0x7f00000012c0)="$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") r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101000, 0x0) getdents64(r8, &(0x7f0000000f80)=""/4096, 0x1000) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000fbdbdf25250000000e0001000d9fa8f80e0000196d0000000f0002006e657464657673696d300000"], 0x34}}, 0x6048800) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, 0xfffffffffffffffe, 0x0) 2.011504282s ago: executing program 3 (id=5487): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r1, 0x0, 0x4804}, 0x18) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630bf7c045f94cd977", 0x18, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r2, 0xffffffffffffffff, r3, 0x0) keyctl$clear(0x7, r3) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="0203f602310000002cbd7000fbdbdf2502000900080000001c0000000000000005000600000000000a0000000000000000000000000000000000000000000001020000000000000002000100000000000000070c0000000005000500000000000a00000000000000fc0100000000000000000000000000010700000000000000210008000008"], 0x188}, 0x1, 0x7}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 1.943281065s ago: executing program 3 (id=5490): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x10000, @loopback, 0x1}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x6, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r1}, 0x18) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000001580)={[{@map_off}, {@session={'session', 0x3d, 0x17}, 0x0}, {@sbsector={'sbsector', 0x3d, 0x100000001}}, {@sbsector={'sbsector', 0x3d, 0x5}}, {@session={'session', 0x3d, 0x62}}, {@nojoliet, 0x41}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@session={'session', 0x3d, 0x58}}, {@showassoc}, {@mode={'mode', 0x3d, 0xfffffffffffffffe}}, {}]}, 0xfa, 0x69f, &(0x7f0000000840)="$eJzs3c9v2+Ydx/EP5V+yOwTFNhRBkB9PkhVwsEyR5MaBkQEtR1E2N0kUSHmwgQFF1thFEDndkg5YfOl82Q+gA3berZcddts/MKDn/he7bUCx3QZsBw4kRVmyRMlqHLdZ3y8jEUV++Txfkgq/oSU+EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAkOXUyuWKpYbX2t4x+Zxa4DcnLE9bW9CtdOLW1H4lK/6jYlEX01kXv328+I34rxu6nD67rGL8UNTha2+8fv9b84Vs/QkJfRGatcFnzw8fP+h2956eInZOMzf/ZVLhFEGbbssLfa9pb7rGC32zsb5evrNVD03da7jhbthxm8YJ3ELHD8yqc8tUNjbWjFva9bdbmzW74WYz732vWi6vmx8upQdaUil0trxGw2ttJjHx4jjmnvn4J2mAazeN2X/U3VublmQcVMlbWBgIqk5rqVquViuVarWyfnfj7r1yeX5kRjlmlfs0EnHmL1q8Ys7u5A28oEJc//9mSQ0V1dK2dmTG/jiqKZCvZs7ynqz+v3nHndjvYP3PqvxF6e3e4ktK6v/V9NnVvPqfk4uRSVYYt8TKmT/bz0KSkdEzPdehHuuBuupqT0/PoG0jc+1MWjmHn025aslTKF+emrKTOaY3x2hD61pXWe9qS3WFMqrLU0OuQu0qVEdu8opyFMiVrY58BTJalaNbMqpoQxtak5Grknbla1stbaomW/+Oomhfj5L9vjYhR2VBlZyApcGg6oSW8ur/Tz9KX6e9+l+m/n9dpa+DpfThs0kxwFdA1Lv+n9G1l5MNAAAAAAB4Gazkt+9W8t79FUmR6l7DLeevsHie2QEAAAAAgLNgKVrSZVnx9b+kK7KmXP8DAAAAAIBXjpXcY2dJWkk+1G8d3wl1ml8CzJ1DigAAAAAA4AUld/5fXZSiZNCKa7Jmuv4HAAAAAACvgN8OjLE/n42xG2Vv6xckhe0l66//XFKwYB21d75jHdjxEvtgrpCEjHwCoFO/ZIV/SAfqTcbrXZSUPHPcy1avt94gmP1xBz/fnzbWvxWcSGBxbrCBEwlc6K1txT2vz/ee6WNdf3so9uFhQcmStJeVutdwS47fuF+RbV8odNydzi+ePPqlFPS3c/9Rd6/03gfdh0kuR/Gso4M4j4+ydP6y2Nt1w7kkD/1c/hulpCtjt3hZ9azL37WaK1bSbznb/jnZB4XjY5S7/cN96te6kR6zGytp7Mphf8T9ePuL8fZXSskhG9r6YME6zqJycsvHHYicLIpJFjfTmJurN9OHLL+4nYJV/O6cVC2NHoOhLKqDWUzfF9a/RvbFpCx6+2ItzuLTuKGcLNZmy2LkiADAl2U/GfUnufMvGcR8pO5m5SE7qX2hujO9ur8zXN0//GNcGdP/Xsz33puY2EtR8Rl91Urq0KKSE+v8pZEzerY19oWics7o5ReobnFffz7+DqRe2iNZ/CeKovuVpN/fn6iqn8QrfJLbb9hId/udDw9+lgyAH3t/7/29J9Xq2nr5rXL5blULyWb0HuZE7QEAjJj+HTtTI6y3dD2NuP7wH2+mU0MV75v9jxSU9J4+UFcPtZB9hcC18a2uDHwM4XZ61aqBq1bzxuv3l6WTsRXdzr2qS2rpQGy1H7ugbJXhSn0cu/aSjwIAAOfrxpQ6PL7+F4fq/22tphGrl8Zedw/X8t7Vcf+SPi+2Mj35d856bwAA8PXgBp9bK53fWEHgtd+tbGxU7M6WawLf+ZEJvNqma7xWxw2cLbu16Zp24Hd8x2+YdqAlr+aGJtxut/2gY+p+YNp+6O0k3/xuel/9HrpNu9XxnLDdcO3QNY7f6thOx9S80DHt7R80vHDLDZKVw7breHXPsTue3zKhvx04bsmY0HUHAr2a2+p4dS+ebJl24DXtYNf82G9sN11Tc0Mn8NodP20w68tr1f2gmTRbUjTzFx0CAPD/6Nnzw8cPut29pycnluNL83TOkXJiRicWxzTIGEEAAHzFHJfrGVYq9qc+jV5KVgAAAAAAAAAAAAAAAAAAAAAAYND0W/pmnFgYd7Og1J/z8wu9OfqVjm8xHGnH0lknNstEYda1slsiDh9/NiF4uT8n2/2DMUfntoF//4b0WjJH6Zz5ccHF/Has6X0tTzi4p5yYi3fQaYO/v5/u0dyYeOHYRUv9YzF/9v8c4oknf8pZFEVRNHn1peF9uDhpA4cn5iU9XXyBQ3D+5yIA5+t/AQAA//+xxzz3") bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES32=r1], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r2}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000002000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r3, 0x0, 0x81}, 0x8c) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x804) (fail_nth: 1) 1.81824912s ago: executing program 3 (id=5492): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000004c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000000000, 0x1000000000}, 0x10208, 0x0, 0x2, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000000000005000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r9, 0x0, 0x5}, 0x18) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x4000, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x1, 0x21b, &(0x7f0000000540)="$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") sendmsg$nl_route_sched(r7, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002600)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x2, 0x275, 0x0, 0x0, 0x3}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x679, 0x0, 0x80000000, 0x2000000, 0x2, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40000, 0x2, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0xd2e, 0x0, 0x0, 0x0, 0x10, 0x29064778, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0x37, 0x5, 0x1, 0x0, 0xfffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x5, 0x20000, 0x0, 0xb, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x101, 0x563, 0x0, 0x0, 0x0, 0x4271, 0x40000000, 0x400, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xf566, 0x100000, 0x2, 0xfffffff1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x5, 0x0, 0x0, 0xffffffff, 0x9, 0x5, 0x20, 0x0, 0x3, 0x10000, 0x1, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10000004a56}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x0, 0x7, 0xfea7, 0x1, 0xffff7ffd, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0x103, 0x5, 0x3, 0x1ff, 0xe5, 0x2d, 0xe, 0x3, 0xa, 0x3, 0x1, 0x9, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0001, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0x1, 0x8fe, 0xbf0, 0x9, 0x3, 0x9, 0x7ffffffd, 0x6, 0x0, 0x8, 0x800, 0x9, 0x4, 0x100, 0x401, 0x8, 0x3, 0xb5, 0x10001, 0x401, 0x1, 0x7f, 0x0, 0x8, 0x3, 0x7f, 0x0, 0x2, 0x4, 0x0, 0x1000004, 0x7ffd, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x0, 0x2000007, 0xeb22, 0xd, 0x8000, 0xfffffff7, 0x0, 0x4, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0x10000, 0x3, 0x1, 0x0, 0x2, 0x6, 0x5, 0x6, 0xe5a, 0x4, 0x2, 0x81, 0xd44, 0x9, 0x6, 0x7fff, 0x1000800, 0xfffffff4, 0x10000, 0x5, 0x8, 0xba, 0x2, 0x89, 0x2, 0x6, 0x6, 0x9, 0xffffa3e0, 0x86b9, 0x40ff, 0x1, 0x2, 0x12, 0x24b9, 0x8, 0xe01, 0x1, 0x6430, 0xd, 0x8, 0x0, 0x3, 0x7eb6, 0x3, 0x0, 0x200, 0xfffffeff, 0x9, 0xff, 0xa, 0x100, 0x7, 0x100, 0x1, 0x8001, 0x100, 0xffff9c71, 0x8, 0x2, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0xfffffffd, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0xfffffffe, 0x0, 0x5, 0x2, 0x65, 0x40, 0xfffffa0a, 0x8, 0x0, 0x2, 0x4, 0x35bc2, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x0, 0x6, 0x8, 0x28, 0x2, 0x5, 0x10001, 0xffffffff, 0xf, 0xffffffff, 0x1, 0x723, 0x0, 0x9, 0x9, 0x4, 0x6, 0x7, 0x200, 0xfffffbff, 0x7, 0x3, 0x8, 0x5, 0xfffffffb, 0x2, 0x7f, 0x2, 0x80000002, 0x0, 0x9, 0x1ff, 0xfffffffb, 0x928, 0x4, 0xffffffff, 0x5, 0x6042, 0xb85, 0x6, 0x8d8d, 0x55, 0x101, 0x3, 0x64e8, 0x8, 0x82f, 0x772, 0x80a, 0xffe, 0x3ff, 0x3f7, 0x4, 0x8, 0x8, 0x1, 0x5d, 0x9, 0x9, 0x80]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x898}, 0x1, 0x0, 0x0, 0x50}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b000000000000"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f00000002c0)={r4, r10}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 1.702646555s ago: executing program 9 (id=5495): socket$l2tp(0x2, 0x2, 0x73) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0b000000050000000400000032a9000009"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) socket$kcm(0x11, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5800000002060108000000bca3000000000000400500010006000000050005000200000005000400000000000900020073797a31000000000c0007800800124000000002110003006861"], 0x58}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140a2fd4ebc08000a400000000205000300020000000900020073797a31000000000500010007"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x103, 0x30120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_io_uring_setup(0x497, &(0x7f0000000480)={0x0, 0x3f74, 0x80, 0x3, 0x125, 0x0, r0}, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r7, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}}) io_uring_enter(r4, 0x3516, 0xf4f5, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) syz_emit_ethernet(0x313, &(0x7f0000002000)=ANY=[@ANYBLOB="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"], 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYRES8=r1], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r8, 0x0, 0x80}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.677634426s ago: executing program 3 (id=5496): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newsa={0xf0, 0x10, 0x7, 0x70bd2c, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in=@multicast1, 0x0, 0x3c}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x70bd28, 0x0, 0xa, 0x2, 0x0, 0x70}}, 0xf0}}, 0x0) 1.636502498s ago: executing program 3 (id=5498): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b00)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004080)={{{@in=@multicast1, @in6=@initdev}}, {{@in6=@private0}, 0x0, @in6=@local}}, &(0x7f0000004180)=0xe8) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'syztnl0\x00', &(0x7f00000004c0)={'ip6tnl0\x00', r2, 0x2f, 0x1, 0x7f, 0xfffffff3, 0x44, @remote, @local, 0x10, 0x20, 0x59361537, 0x7}}) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f0000000800)={0x198, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x9c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_STRSET_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x48, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x84}, 0x48004) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x24, 0x0, 0x5707b563827c8365, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x74}, @val={0x8, 0x12a}, @void}}}, 0x24}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x68}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x67}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a27eecc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x10}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6a}]}, 0x5c}}, 0x8050) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000b00)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000900)={0xe4, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_TX_RATES={0xb8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xa8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x6c, 0x0, 0x60, 0x6c, 0xc, 0x30, 0x48, 0x4, 0x6, 0x16, 0x4, 0x6c, 0x6c, 0x30, 0x3, 0x4, 0x24, 0x24, 0x48, 0x4, 0x2, 0x5e, 0x30, 0x9, 0x9, 0x60, 0x60, 0x8, 0xbbfe6d17494d9564, 0x9]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x3, 0x6, 0x2, 0xfff8, 0x3, 0x422, 0x714]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x1, 0x7, 0x4a7, 0xfffd, 0x6, 0x0, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8001, 0x93, 0x4, 0x2, 0xfff, 0xe, 0xa]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x60, 0xc, 0x13, 0xb, 0x36, 0xb, 0x1, 0x1b, 0xc, 0x16]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0xd491, 0x4874, 0x9, 0xf3, 0xb, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4044}, 0x4000090) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x18) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f0000000880)=[{{&(0x7f0000000180)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/106, 0x6a}], 0x1, &(0x7f0000000300)=""/8, 0x8}, 0x80000000}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000340)=""/10, 0xa}, {&(0x7f00000004c0)=""/214, 0xd6}, {&(0x7f0000000380)=""/47, 0x2f}, {&(0x7f00000003c0)=""/38, 0xfffffffffffffd00}, {&(0x7f00000005c0)=""/226, 0xe2}], 0x5, &(0x7f00000007c0)=""/147, 0x93}, 0x4}], 0x2, 0x18102, 0x0) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) 1.583502771s ago: executing program 9 (id=5499): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x2000005, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010329bd7000fcdbdf252400"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.541459323s ago: executing program 9 (id=5500): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socket(0x18, 0x800, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x35, 0x0, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000000)="da", 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000180)='o', 0x1}], 0x1}}], 0x2, 0x0) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@mcast2}}, &(0x7f00000001c0)=0xe8) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180), &(0x7f0000000200)=@v3={0x3000000, [{}, {0x3, 0x9}], r5}, 0x18, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r7 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0xf, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000009000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="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"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') sendmsg$nl_xfrm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="00000000030000000000000000000000ac1414bb000000000000000000000000000000000000000000000000f7ffffff", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001000004d26c000000ac1414aa0000000000000000000000000004000000000000000000000040000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020004000000000000000000480003006465666c61746500"/240], 0x138}}, 0x0) r9 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000180)=@req={0x401, 0xfffffffe, 0x0, 0xffffffff}, 0x16) close(r9) 1.517643434s ago: executing program 9 (id=5501): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x60280, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES16=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd5cd7000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) 1.440250457s ago: executing program 1 (id=5502): bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000008850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_complete(0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r3, &(0x7f0000000540)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x1000, @dev={0xfe, 0x80, '\x00', 0x11}, 0xa, 0x1}, 0x80, &(0x7f0000000080)}}], 0x1, 0xc88c4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') readlinkat(r4, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)=""/10, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r2, @ANYRESDEC=r0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x4, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000050002000000000085000000cc00000085000000000000000500feff0000000095"], &(0x7f00000003c0)='GPL\x00', 0x4}, 0x94) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x17c, 0x13, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0x62, 0x8, "e0ec162845d3e1ef4d2202e6422cc36e65e73cf87ba4460208d87e0879025e3c24b92516482fada0335bfe061e32fa4309cc6780573d322f8bb73bb942f0da3b34ea3f522d8328976e8fd2e70917e25e155d1705879b7142bb613bc125a8"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_USERDATA={0xd0, 0x8, "6d72ec3d4c9d51f98be7ac46612deb5cc9a9b1d77a0e499d58220130658dca22beb03a3c9092d1f1d768cc0eab6e234ac52717b54efa399bba3745dc70d8ffd0bc33131149622d22bef39541938d2d4345dc93bb8706fc004471c0e0eddb5ca8705b646cf1a43bf2e6ab4c670638bbbacbbdedb5f67fb2bf4821c6d7ea1f689bce26427710ec0f3e53a1ff2650f3d44457d4469c165845d861f079b55f031e25a2dffb8b85a6b2126130b91d5642eac529f943961f513e3b075234b652208ec099bc3407cad3d17231967d16"}]}, 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x801) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="180500001f0004000000000000000000850000007a00000095000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000080)=r6, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="30bf050913591b25dcc5703988488ed314b4dabd9ab43f23a3214856239b904531829671b1765a27df18a197b93545811fb7af5424f160927c8376d44a42dffd230808da2836d807cabf1b1f6ccf65a6ccb9c22e0bc68430"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, 0x25, r4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x10, r8}, 0xffffffffffffff19) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r9 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x0) syz_usb_disconnect(r9) syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r9, 0x40085507, &(0x7f0000000100)=0x1d) socket$pppl2tp(0x18, 0x1, 0x1) 713.015249ms ago: executing program 0 (id=5503): connect$qrtr(0xffffffffffffffff, &(0x7f0000000180)={0x2a, 0x4, 0x7fff}, 0xc) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0x3}, 0x18) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc) close_range(r4, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa2f01, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(r6, &(0x7f00000001c0)=ANY=[@ANYRES64=r2], 0xfdef) fgetxattr(r6, &(0x7f0000000100)=@random={'system.', '\x00'}, &(0x7f0000000140)=""/22, 0x16) 565.202585ms ago: executing program 0 (id=5504): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r0 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000000)="da", 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000180)='o', 0x1}], 0x1}}], 0x2, 0x0) close(r0) 509.831518ms ago: executing program 0 (id=5505): bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x80210, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000300)}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xd, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4, 0x0, 0x4}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="00761b67c87b9b1400000000001a2ddedb000700", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000240), &(0x7f0000000280)=r5}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x9}, 0x18) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xb, 0x4, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='kfree\x00', r6}, 0x18) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r8, 0x0, r7, 0x0, 0x6, 0x0) fcntl$setpipe(r7, 0x407, 0xb) sendmsg$NFNL_MSG_CTHELPER_GET(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000010901010000007eaf9f1c41a1e42e00"], 0x14}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000200)={0x41, 0x0, 0x2}, 0x10) 426.993571ms ago: executing program 3 (id=5506): socket$inet6(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f00000004c0)='kmem_cache_free\x00', r1, 0x0, 0x400000}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='cpuset.memory_spread_page\x00', 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000bc0)='./file1\x00', 0x1a00404, &(0x7f0000000080)={[{@noblock_validity}, {@grpquota}]}, 0x1, 0xbb9, &(0x7f00000017c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0xc4642, 0x1eb) writev(r2, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x100000}], 0x1) 309.186136ms ago: executing program 1 (id=5507): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x2000005, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010329bd7000fcdbdf252400000018000180140002"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 258.616658ms ago: executing program 1 (id=5508): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newsa={0x10c, 0x10, 0x7, 0x70bd2c, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in=@multicast1, 0x0, 0x3c}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x70bd28, 0x0, 0xa, 0x2, 0x0, 0x70}, [@tfcpad={0x8, 0x16, 0x5}, @srcaddr={0x14, 0xd, @in=@multicast2}]}, 0x10c}}, 0x0) 254.269149ms ago: executing program 0 (id=5509): socket$l2tp(0x2, 0x2, 0x73) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0b000000050000000400000032a9000009"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) socket$kcm(0x11, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5800000002060108000000bca3000000000000400500010006000000050005000200000005000400000000000900020073797a31000000000c0007800800124000000002110003006861"], 0x58}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140a2fd4ebc08000a400000000205000300020000000900020073797a31000000000500010007"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x103, 0x30120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_io_uring_setup(0x497, &(0x7f0000000480)={0x0, 0x3f74, 0x80, 0x3, 0x125, 0x0, r0}, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r7, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}}) io_uring_enter(r4, 0x3516, 0xf4f5, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) syz_emit_ethernet(0x313, &(0x7f0000002000)=ANY=[@ANYBLOB="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"], 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYRES8=r1], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r8, 0x0, 0x80}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 196.955801ms ago: executing program 1 (id=5510): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x2000005, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010329bd7000fcdbdf252400"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 150.577644ms ago: executing program 0 (id=5511): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r1, 0x2284, &(0x7f0000000080)) 109.959415ms ago: executing program 1 (id=5512): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) 89.098896ms ago: executing program 4 (id=5480): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0xdcb8, 0x10, 0x1, 0x2089}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) unshare(0x20060400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x8, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000004040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x29e782}) io_uring_enter(r2, 0x3518, 0xaddf, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {0x1, 0x6}, {0xd}, {0x11, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) 83.741246ms ago: executing program 0 (id=5513): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0x10, &(0x7f0000000540)=ANY=[@ANYBLOB="2319c22dea406e69571279712581ca76557c02572d0b5ab8f1c49fa230f5aabe8564cd536dfdb0f5d9d68efeb922ae69deba2402927b3ee8a620ab", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000ec0)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xfff2}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x54, 0x2, [@TCA_BASIC_ACT={0x50, 0x3, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0xffff, 0x6, 0x2, 0x6}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000ec0)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0xfff2}, {0xfff1}, {0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x54, 0x2, [@TCA_BASIC_ACT={0x50, 0x3, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0xffff, 0x4, 0x2, 0x6}, 0x5}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x4) writev(r1, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) ioctl$SIOCGSKNS(r1, 0x894c, &(0x7f0000000200)={'syz_tun\x00', 0x400}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0x1e) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) r10 = inotify_init1(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00'}, 0x10) setitimer(0x1, 0x0, 0x0) inotify_add_watch(r10, &(0x7f00000000c0)='.\x00', 0xa4000061) syz_emit_ethernet(0x6c, &(0x7f0000000100)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x36, 0x3a, 0xff, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x6, 0x6, ':yE', 0x2, 0x3a, 0x0, @private2={0xfc, 0x2, '\x00', 0x4}, @loopback, [], "8029335287b7"}}}}}}}, 0x0) 0s ago: executing program 1 (id=5514): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000004c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000000000, 0x1000000000}, 0x10208, 0x0, 0x2, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000000000005000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r9, 0x0, 0x5}, 0x18) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x4000, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x1, 0x21b, &(0x7f0000000540)="$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") sendmsg$nl_route_sched(r7, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002600)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x2, 0x275, 0x0, 0x0, 0x3}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x679, 0x0, 0x80000000, 0x2000000, 0x2, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40000, 0x2, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0xd2e, 0x0, 0x0, 0x0, 0x10, 0x29064778, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0x37, 0x5, 0x1, 0x0, 0xfffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x5, 0x20000, 0x0, 0xb, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x101, 0x563, 0x0, 0x0, 0x0, 0x4271, 0x40000000, 0x400, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xf566, 0x100000, 0x2, 0xfffffff1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x5, 0x0, 0x0, 0xffffffff, 0x9, 0x5, 0x20, 0x0, 0x3, 0x10000, 0x1, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10000004a56}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x0, 0x7, 0xfea7, 0x1, 0xffff7ffd, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0x103, 0x5, 0x3, 0x1ff, 0xe5, 0x2d, 0xe, 0x3, 0xa, 0x3, 0x1, 0x9, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0001, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0x1, 0x8fe, 0xbf0, 0x9, 0x3, 0x9, 0x7ffffffd, 0x6, 0x0, 0x8, 0x800, 0x9, 0x4, 0x100, 0x401, 0x8, 0x3, 0xb5, 0x10001, 0x401, 0x1, 0x7f, 0x0, 0x8, 0x3, 0x7f, 0x0, 0x2, 0x4, 0x0, 0x1000004, 0x7ffd, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x0, 0x2000007, 0xeb22, 0xd, 0x8000, 0xfffffff7, 0x0, 0x4, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0x10000, 0x3, 0x1, 0x0, 0x2, 0x6, 0x5, 0x6, 0xe5a, 0x4, 0x2, 0x81, 0xd44, 0x9, 0x6, 0x7fff, 0x1000800, 0xfffffff4, 0x10000, 0x5, 0x8, 0xba, 0x2, 0x89, 0x2, 0x6, 0x6, 0x9, 0xffffa3e0, 0x86b9, 0x40ff, 0x1, 0x2, 0x12, 0x24b9, 0x8, 0xe01, 0x1, 0x6430, 0xd, 0x8, 0x0, 0x3, 0x7eb6, 0x3, 0x0, 0x200, 0xfffffeff, 0x9, 0xff, 0xa, 0x100, 0x7, 0x100, 0x1, 0x8001, 0x100, 0xffff9c71, 0x8, 0x2, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0xfffffffd, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0xfffffffe, 0x0, 0x5, 0x2, 0x65, 0x40, 0xfffffa0a, 0x8, 0x0, 0x2, 0x4, 0x35bc2, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x0, 0x6, 0x8, 0x28, 0x2, 0x5, 0x10001, 0xffffffff, 0xf, 0xffffffff, 0x1, 0x723, 0x0, 0x9, 0x9, 0x4, 0x6, 0x7, 0x200, 0xfffffbff, 0x7, 0x3, 0x8, 0x5, 0xfffffffb, 0x2, 0x7f, 0x2, 0x80000002, 0x0, 0x9, 0x1ff, 0xfffffffb, 0x928, 0x4, 0xffffffff, 0x5, 0x6042, 0xb85, 0x6, 0x8d8d, 0x55, 0x101, 0x3, 0x64e8, 0x8, 0x82f, 0x772, 0x80a, 0xffe, 0x3ff, 0x3f7, 0x4, 0x8, 0x8, 0x1, 0x5d, 0x9, 0x9, 0x80]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x898}, 0x1, 0x0, 0x0, 0x50}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b000000000000"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f00000002c0)={r4, r10}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) kernel console output (not intermixed with test programs): it's busy [ 255.041495][T15743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.233127][T15763] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4654'. [ 255.256842][T15765] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4655'. [ 255.270971][T15765] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4655'. [ 255.333103][T15766] netlink: 'syz.0.4655': attribute type 2 has an invalid length. [ 255.406735][T15759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.415439][T15759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.489365][T15770] netlink: 'syz.1.4657': attribute type 13 has an invalid length. [ 255.585326][T12147] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.639330][T15786] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4663'. [ 255.671159][T15791] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4667'. [ 255.881259][T15792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.889772][T15792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.903951][T15794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.912592][T15794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.985584][T15798] loop3: detected capacity change from 0 to 512 [ 256.001980][T15798] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.4670: EA inode hash validation failed [ 256.015460][T15798] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.4670: corrupted inode contents [ 256.028407][T15798] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #15: comm syz.3.4670: mark_inode_dirty error [ 256.040584][T15798] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.4670: corrupted inode contents [ 256.053075][T15798] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3000: inode #15: comm syz.3.4670: mark_inode_dirty error [ 256.065559][T15798] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3003: inode #15: comm syz.3.4670: mark inode dirty (error -117) [ 256.080828][T15798] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -117) [ 256.091835][T15798] EXT4-fs (loop3): 1 orphan inode deleted [ 256.107049][T15798] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.155205][T15801] netlink: 'syz.1.4671': attribute type 39 has an invalid length. [ 256.393773][T15803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.407728][T15803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.418302][T15807] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4673'. [ 256.454846][T15813] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4676'. [ 256.521189][T15825] netlink: 'syz.9.4681': attribute type 13 has an invalid length. [ 256.784217][T13065] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.943606][T15835] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4686'. [ 257.008879][T15833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.017568][T15833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.019341][T15838] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4687'. [ 257.039294][T15838] team4: entered promiscuous mode [ 257.044367][T15838] team4: entered allmulticast mode [ 257.255446][T15854] sd 0:0:1:0: device reset [ 257.277245][T15860] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4697'. [ 257.344815][T15866] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 257.550719][T15879] loop9: detected capacity change from 0 to 4096 [ 257.573382][T15879] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.653516][T15890] loop3: detected capacity change from 0 to 128 [ 257.663772][T15890] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 257.676558][T15890] ext4 filesystem being mounted at /198/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.698733][T13065] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 257.789886][T15899] loop3: detected capacity change from 0 to 4096 [ 257.797862][T12147] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.809557][T15899] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.834683][T13065] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.849878][T15908] netlink: 'syz.1.4718': attribute type 298 has an invalid length. [ 257.902202][T15909] loop9: detected capacity change from 0 to 1024 [ 257.909035][T15909] EXT4-fs: inline encryption not supported [ 257.925964][T15909] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.939210][T15917] sd 0:0:1:0: device reset [ 258.024780][ T29] kauditd_printk_skb: 1690 callbacks suppressed [ 258.024798][ T29] audit: type=1326 audit(1765330414.575:75087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15919 comm="syz.3.4722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d2ddf749 code=0x7ffc0000 [ 258.031538][T15920] loop3: detected capacity change from 0 to 128 [ 258.055106][ T29] audit: type=1326 audit(1765330414.575:75088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15919 comm="syz.3.4722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d2ddf749 code=0x7ffc0000 [ 258.084723][ T29] audit: type=1326 audit(1765330414.575:75089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15919 comm="syz.3.4722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d2ddf749 code=0x7ffc0000 [ 258.093654][T12147] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.108347][ T29] audit: type=1326 audit(1765330414.575:75090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15919 comm="syz.3.4722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d2ddf749 code=0x7ffc0000 [ 258.118716][T15920] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 258.140833][ T29] audit: type=1326 audit(1765330414.575:75091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15919 comm="syz.3.4722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f51d2ddf749 code=0x7ffc0000 [ 258.176532][ T29] audit: type=1326 audit(1765330414.575:75092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15919 comm="syz.3.4722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d2ddf749 code=0x7ffc0000 [ 258.200202][ T29] audit: type=1326 audit(1765330414.575:75093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15919 comm="syz.3.4722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d2ddf749 code=0x7ffc0000 [ 258.224024][ T29] audit: type=1326 audit(1765330414.575:75094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15919 comm="syz.3.4722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d2ddf749 code=0x7ffc0000 [ 258.247728][ T29] audit: type=1326 audit(1765330414.575:75095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15919 comm="syz.3.4722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d2ddf749 code=0x7ffc0000 [ 258.271494][ T29] audit: type=1326 audit(1765330414.575:75096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15919 comm="syz.3.4722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f51d2ddf749 code=0x7ffc0000 [ 258.271543][T15920] ext4 filesystem being mounted at /202/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.473962][T13065] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 258.519741][T15938] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 258.567139][T15943] loop9: detected capacity change from 0 to 1024 [ 258.569254][T15945] team2: entered promiscuous mode [ 258.578633][T15945] team2: entered allmulticast mode [ 258.588949][T15943] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 258.601165][T15943] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.4731: Invalid block bitmap block 0 in block_group 0 [ 258.622592][T15943] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.4731: Failed to acquire dquot type 0 [ 258.646128][T15943] EXT4-fs error (device loop9): ext4_free_blocks:6728: comm syz.9.4731: Freeing blocks not in datazone - block = 0, count = 4096 [ 258.649554][T15947] sd 0:0:1:0: device reset [ 258.664556][T15943] EXT4-fs error (device loop9): ext4_read_inode_bitmap:139: comm syz.9.4731: Invalid inode bitmap blk 0 in block_group 0 [ 258.677457][T15943] EXT4-fs error (device loop9) in ext4_free_inode:361: Corrupt filesystem [ 258.677520][ T1617] EXT4-fs error (device loop9): ext4_release_dquot:7022: comm kworker/u8:9: Failed to release dquot type 0 [ 258.692285][T15943] EXT4-fs (loop9): 1 orphan inode deleted [ 258.719409][T15943] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.787700][T12147] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.826652][T15954] loop9: detected capacity change from 0 to 128 [ 258.841045][T15954] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 258.947134][T15954] ext4 filesystem being mounted at /256/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.122624][T12147] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 259.190653][T15975] sd 0:0:1:0: device reset [ 259.390831][T16003] sd 0:0:1:0: device reset [ 259.443896][T15979] loop9: detected capacity change from 0 to 4096 [ 259.451953][T15979] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.530218][T15995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.538961][T15995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.592325][T12147] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.602827][T16006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.611338][T16006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.642889][T16012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.651438][T16012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.676124][T16019] loop9: detected capacity change from 0 to 128 [ 259.684672][T16019] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 259.697138][T16019] ext4 filesystem being mounted at /262/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.717433][T12147] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 259.747565][T16024] FAULT_INJECTION: forcing a failure. [ 259.747565][T16024] name failslab, interval 1, probability 0, space 0, times 0 [ 259.760325][T16024] CPU: 1 UID: 0 PID: 16024 Comm: syz.9.4765 Not tainted syzkaller #0 PREEMPT(voluntary) [ 259.760356][T16024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 259.760371][T16024] Call Trace: [ 259.760379][T16024] [ 259.760389][T16024] __dump_stack+0x1d/0x30 [ 259.760439][T16024] dump_stack_lvl+0xe8/0x140 [ 259.760463][T16024] dump_stack+0x15/0x1b [ 259.760479][T16024] should_fail_ex+0x265/0x280 [ 259.760498][T16024] should_failslab+0x8c/0xb0 [ 259.760519][T16024] kmem_cache_alloc_noprof+0x69/0x4b0 [ 259.760538][T16024] ? getname_flags+0x80/0x3b0 [ 259.760567][T16024] getname_flags+0x80/0x3b0 [ 259.760607][T16024] user_path_at+0x28/0x130 [ 259.760664][T16024] __se_sys_chroot+0x45/0x230 [ 259.760691][T16024] __x64_sys_chroot+0x1f/0x30 [ 259.760714][T16024] x64_sys_call+0x2238/0x3000 [ 259.760748][T16024] do_syscall_64+0xd8/0x2a0 [ 259.760836][T16024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.760877][T16024] RIP: 0033:0x7f655089f749 [ 259.760889][T16024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.760904][T16024] RSP: 002b:00007f654f307038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a1 [ 259.760919][T16024] RAX: ffffffffffffffda RBX: 00007f6550af5fa0 RCX: 00007f655089f749 [ 259.760929][T16024] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000c80 [ 259.761017][T16024] RBP: 00007f654f307090 R08: 0000000000000000 R09: 0000000000000000 [ 259.761027][T16024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.761037][T16024] R13: 00007f6550af6038 R14: 00007f6550af5fa0 R15: 00007fff507bb248 [ 259.761052][T16024] [ 260.012777][T16029] team6: entered promiscuous mode [ 260.017917][T16029] team6: entered allmulticast mode [ 260.101372][T16031] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 260.203376][T16044] netlink: 'syz.4.4773': attribute type 39 has an invalid length. [ 260.205795][T16046] loop3: detected capacity change from 0 to 128 [ 260.219866][T16046] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 260.241698][T16046] ext4 filesystem being mounted at /207/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.254646][T16050] __nla_validate_parse: 10 callbacks suppressed [ 260.254725][T16050] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4775'. [ 260.271397][T13065] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 260.289146][T16053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4776'. [ 260.389393][T16060] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 260.494395][T16073] netlink: 'syz.1.4786': attribute type 39 has an invalid length. [ 260.537704][T16058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.548205][T16081] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4789'. [ 260.559388][T16058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.758998][T16094] loop3: detected capacity change from 0 to 4096 [ 260.767847][T16094] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.804712][T13065] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.107579][T16111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.157232][T16111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.279703][T16126] FAULT_INJECTION: forcing a failure. [ 261.279703][T16126] name failslab, interval 1, probability 0, space 0, times 0 [ 261.292557][T16126] CPU: 0 UID: 0 PID: 16126 Comm: syz.9.4807 Not tainted syzkaller #0 PREEMPT(voluntary) [ 261.292591][T16126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 261.292618][T16126] Call Trace: [ 261.292625][T16126] [ 261.292633][T16126] __dump_stack+0x1d/0x30 [ 261.292660][T16126] dump_stack_lvl+0xe8/0x140 [ 261.292686][T16126] dump_stack+0x15/0x1b [ 261.292709][T16126] should_fail_ex+0x265/0x280 [ 261.292741][T16126] should_failslab+0x8c/0xb0 [ 261.292769][T16126] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 261.292793][T16126] ? __alloc_skb+0x324/0x4d0 [ 261.292815][T16126] __alloc_skb+0x324/0x4d0 [ 261.292864][T16126] ? __alloc_skb+0x24d/0x4d0 [ 261.292891][T16126] audit_log_start+0x3a0/0x720 [ 261.292917][T16126] ? kstrtouint+0x76/0xc0 [ 261.292988][T16126] audit_seccomp+0x48/0x100 [ 261.293026][T16126] ? __seccomp_filter+0x832/0x1260 [ 261.293059][T16126] __seccomp_filter+0x843/0x1260 [ 261.293089][T16126] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 261.293140][T16126] ? vfs_write+0x7e8/0x960 [ 261.293173][T16126] ? __rcu_read_unlock+0x4f/0x70 [ 261.293248][T16126] ? __fget_files+0x184/0x1c0 [ 261.293272][T16126] __secure_computing+0x82/0x150 [ 261.293298][T16126] syscall_trace_enter+0xcf/0x1e0 [ 261.293395][T16126] do_syscall_64+0xb2/0x2a0 [ 261.293426][T16126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.293452][T16126] RIP: 0033:0x7f655089f749 [ 261.293485][T16126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.293508][T16126] RSP: 002b:00007f654f307038 EFLAGS: 00000246 ORIG_RAX: 0000000000000124 [ 261.293535][T16126] RAX: ffffffffffffffda RBX: 00007f6550af5fa0 RCX: 00007f655089f749 [ 261.293547][T16126] RDX: 0000000000080000 RSI: ffffffffffffffff RDI: ffffffffffffffff [ 261.293561][T16126] RBP: 00007f654f307090 R08: 0000000000000000 R09: 0000000000000000 [ 261.293582][T16126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.293690][T16126] R13: 00007f6550af6038 R14: 00007f6550af5fa0 R15: 00007fff507bb248 [ 261.293760][T16126] [ 261.574539][T16130] loop9: detected capacity change from 0 to 4096 [ 261.582922][T16132] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4809'. [ 261.607473][T16132] team7: entered promiscuous mode [ 261.612651][T16132] team7: entered allmulticast mode [ 261.613652][T16130] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.632110][T16130] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 261.681741][T12147] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.691061][T16139] sd 0:0:1:0: device reset [ 261.754065][T16151] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4818'. [ 261.788517][T16156] FAULT_INJECTION: forcing a failure. [ 261.788517][T16156] name failslab, interval 1, probability 0, space 0, times 0 [ 261.801191][T16156] CPU: 1 UID: 0 PID: 16156 Comm: syz.9.4820 Not tainted syzkaller #0 PREEMPT(voluntary) [ 261.801295][T16156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 261.801308][T16156] Call Trace: [ 261.801315][T16156] [ 261.801322][T16156] __dump_stack+0x1d/0x30 [ 261.801345][T16156] dump_stack_lvl+0xe8/0x140 [ 261.801407][T16156] dump_stack+0x15/0x1b [ 261.801454][T16156] should_fail_ex+0x265/0x280 [ 261.801498][T16156] should_failslab+0x8c/0xb0 [ 261.801520][T16156] __kmalloc_noprof+0xb9/0x5a0 [ 261.801589][T16156] ? kobject_get_path+0x92/0x1c0 [ 261.801610][T16156] kobject_get_path+0x92/0x1c0 [ 261.801631][T16156] kobject_uevent_env+0x1da/0x570 [ 261.801737][T16156] kobject_uevent+0x1d/0x30 [ 261.801828][T16156] device_del+0x710/0x790 [ 261.801851][T16156] ? mntput+0xa9/0xb0 [ 261.801881][T16156] device_unregister+0x15/0x40 [ 261.801930][T16156] bdi_unregister+0x307/0x3a0 [ 261.801951][T16156] __del_gendisk+0x2c3/0x570 [ 261.801976][T16156] del_gendisk+0xac/0xf0 [ 261.801997][T16156] loop_remove+0x26/0x80 [ 261.802026][T16156] loop_control_ioctl+0x3b3/0x3f0 [ 261.802146][T16156] ? __pfx_loop_control_ioctl+0x10/0x10 [ 261.802182][T16156] __se_sys_ioctl+0xce/0x140 [ 261.802255][T16156] __x64_sys_ioctl+0x43/0x50 [ 261.802291][T16156] x64_sys_call+0x14b0/0x3000 [ 261.802320][T16156] do_syscall_64+0xd8/0x2a0 [ 261.802527][T16156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.802560][T16156] RIP: 0033:0x7f655089f749 [ 261.802574][T16156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.802592][T16156] RSP: 002b:00007f654f307038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 261.802611][T16156] RAX: ffffffffffffffda RBX: 00007f6550af5fa0 RCX: 00007f655089f749 [ 261.802623][T16156] RDX: 0000000000000003 RSI: 0000000000004c81 RDI: 0000000000000003 [ 261.802662][T16156] RBP: 00007f654f307090 R08: 0000000000000000 R09: 0000000000000000 [ 261.802674][T16156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.802687][T16156] R13: 00007f6550af6038 R14: 00007f6550af5fa0 R15: 00007fff507bb248 [ 261.802707][T16156] [ 262.018558][T16144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.038322][T16144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.129669][T16173] x_tables: duplicate underflow at hook 2 [ 262.237836][T16192] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4836'. [ 262.253126][T16193] loop9: detected capacity change from 0 to 1024 [ 262.259914][T16193] EXT4-fs: inline encryption not supported [ 262.274117][T16193] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.416954][T16209] FAULT_INJECTION: forcing a failure. [ 262.416954][T16209] name failslab, interval 1, probability 0, space 0, times 0 [ 262.429611][T16209] CPU: 0 UID: 0 PID: 16209 Comm: syz.4.4841 Not tainted syzkaller #0 PREEMPT(voluntary) [ 262.429685][T16209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 262.429702][T16209] Call Trace: [ 262.429709][T16209] [ 262.429718][T16209] __dump_stack+0x1d/0x30 [ 262.429747][T16209] dump_stack_lvl+0xe8/0x140 [ 262.429765][T16209] dump_stack+0x15/0x1b [ 262.429845][T16209] should_fail_ex+0x265/0x280 [ 262.429864][T16209] should_failslab+0x8c/0xb0 [ 262.429882][T16209] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 262.429973][T16209] ? __alloc_skb+0x324/0x4d0 [ 262.429993][T16209] __alloc_skb+0x324/0x4d0 [ 262.430088][T16209] ? __alloc_skb+0x24d/0x4d0 [ 262.430109][T16209] audit_log_start+0x3a0/0x720 [ 262.430128][T16209] ? kstrtouint+0x76/0xc0 [ 262.430146][T16209] audit_seccomp+0x48/0x100 [ 262.430248][T16209] ? __seccomp_filter+0x832/0x1260 [ 262.430274][T16209] __seccomp_filter+0x843/0x1260 [ 262.430359][T16209] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 262.430407][T16209] ? vfs_write+0x7e8/0x960 [ 262.430423][T16209] ? __rcu_read_unlock+0x4f/0x70 [ 262.430483][T16209] ? __fget_files+0x184/0x1c0 [ 262.430513][T16209] __secure_computing+0x82/0x150 [ 262.430574][T16209] syscall_trace_enter+0xcf/0x1e0 [ 262.430595][T16209] do_syscall_64+0xb2/0x2a0 [ 262.430658][T16209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.430733][T16209] RIP: 0033:0x7f680ddff749 [ 262.430746][T16209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.430761][T16209] RSP: 002b:00007f680c85f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000020 [ 262.430777][T16209] RAX: ffffffffffffffda RBX: 00007f680e055fa0 RCX: 00007f680ddff749 [ 262.430877][T16209] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 262.430887][T16209] RBP: 00007f680c85f090 R08: 0000000000000000 R09: 0000000000000000 [ 262.430916][T16209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.430926][T16209] R13: 00007f680e056038 R14: 00007f680e055fa0 R15: 00007ffe63bfde48 [ 262.431023][T16209] [ 262.685115][T16219] netlink: 360 bytes leftover after parsing attributes in process `syz.4.4845'. [ 262.707804][T16222] netlink: 'syz.4.4846': attribute type 13 has an invalid length. [ 262.753388][T16225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4847'. [ 262.944355][T16230] sd 0:0:1:0: device reset [ 263.001859][T16236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4852'. [ 263.036804][T12147] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.074117][ T29] kauditd_printk_skb: 1310 callbacks suppressed [ 263.074135][ T29] audit: type=1400 audit(1765330419.625:76400): avc: denied { create } for pid=16241 comm="syz.9.4854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 263.125568][T16248] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4858'. [ 263.135280][ T29] audit: type=1400 audit(1765330419.675:76401): avc: denied { create } for pid=16245 comm="syz.0.4857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 263.155336][ T29] audit: type=1400 audit(1765330419.675:76402): avc: denied { accept } for pid=16245 comm="syz.0.4857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 263.197748][ T29] audit: type=1326 audit(1765330419.745:76403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16252 comm="syz.9.4861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f655089f749 code=0x7ffc0000 [ 263.221777][ T29] audit: type=1326 audit(1765330419.775:76404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16252 comm="syz.9.4861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f655089f749 code=0x7ffc0000 [ 263.245604][ T29] audit: type=1326 audit(1765330419.775:76405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16252 comm="syz.9.4861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f655089f749 code=0x7ffc0000 [ 263.269239][ T29] audit: type=1326 audit(1765330419.775:76406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16252 comm="syz.9.4861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f655089f749 code=0x7ffc0000 [ 263.293141][T16257] sd 0:0:1:0: device reset [ 263.295571][ T29] audit: type=1326 audit(1765330419.845:76407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16252 comm="syz.9.4861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f655089f749 code=0x7ffc0000 [ 263.321057][ T29] audit: type=1326 audit(1765330419.845:76408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16252 comm="syz.9.4861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f655089f749 code=0x7ffc0000 [ 263.344657][ T29] audit: type=1326 audit(1765330419.845:76409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16252 comm="syz.9.4861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f655089f749 code=0x7ffc0000 [ 263.508334][T16274] FAULT_INJECTION: forcing a failure. [ 263.508334][T16274] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 263.521595][T16274] CPU: 0 UID: 0 PID: 16274 Comm: syz.1.4869 Not tainted syzkaller #0 PREEMPT(voluntary) [ 263.521624][T16274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 263.521640][T16274] Call Trace: [ 263.521646][T16274] [ 263.521653][T16274] __dump_stack+0x1d/0x30 [ 263.521679][T16274] dump_stack_lvl+0xe8/0x140 [ 263.521753][T16274] dump_stack+0x15/0x1b [ 263.521774][T16274] should_fail_ex+0x265/0x280 [ 263.521795][T16274] should_fail+0xb/0x20 [ 263.521811][T16274] should_fail_usercopy+0x1a/0x20 [ 263.521882][T16274] _copy_from_user+0x1c/0xb0 [ 263.521981][T16274] autofs_dev_ioctl+0xdd/0x6a0 [ 263.521998][T16274] ? __pfx_autofs_dev_ioctl+0x10/0x10 [ 263.522039][T16274] __se_sys_ioctl+0xce/0x140 [ 263.522104][T16274] __x64_sys_ioctl+0x43/0x50 [ 263.522180][T16274] x64_sys_call+0x14b0/0x3000 [ 263.522240][T16274] do_syscall_64+0xd8/0x2a0 [ 263.522271][T16274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.522292][T16274] RIP: 0033:0x7faa4d53f749 [ 263.522307][T16274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.522324][T16274] RSP: 002b:00007faa4bfa7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 263.522393][T16274] RAX: ffffffffffffffda RBX: 00007faa4d795fa0 RCX: 00007faa4d53f749 [ 263.522407][T16274] RDX: 0000200000002400 RSI: 00000000c018937e RDI: 0000000000000003 [ 263.522420][T16274] RBP: 00007faa4bfa7090 R08: 0000000000000000 R09: 0000000000000000 [ 263.522434][T16274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.522527][T16274] R13: 00007faa4d796038 R14: 00007faa4d795fa0 R15: 00007ffcaac68528 [ 263.522548][T16274] [ 263.691252][T16264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.701782][T16264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.855017][T16284] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 263.940427][T16289] netlink: 'syz.0.4874': attribute type 39 has an invalid length. [ 264.090233][T16300] team4: entered promiscuous mode [ 264.095338][T16300] team4: entered allmulticast mode [ 264.254390][T16302] loop9: detected capacity change from 0 to 8192 [ 264.290228][T16302] FAULT_INJECTION: forcing a failure. [ 264.290228][T16302] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 264.303609][T16302] CPU: 0 UID: 0 PID: 16302 Comm: syz.9.4880 Not tainted syzkaller #0 PREEMPT(voluntary) [ 264.303679][T16302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 264.303692][T16302] Call Trace: [ 264.303699][T16302] [ 264.303708][T16302] __dump_stack+0x1d/0x30 [ 264.303809][T16302] dump_stack_lvl+0xe8/0x140 [ 264.303830][T16302] dump_stack+0x15/0x1b [ 264.303847][T16302] should_fail_ex+0x265/0x280 [ 264.303868][T16302] should_fail_alloc_page+0xf2/0x100 [ 264.303903][T16302] __alloc_frozen_pages_noprof+0x109/0x360 [ 264.304009][T16302] alloc_pages_mpol+0xb3/0x260 [ 264.304043][T16302] folio_alloc_noprof+0x97/0x150 [ 264.304078][T16302] filemap_alloc_folio_noprof+0x93/0x230 [ 264.304184][T16302] __filemap_get_folio_mpol+0x295/0x650 [ 264.304208][T16302] cont_write_begin+0x5cb/0x970 [ 264.304288][T16302] fat_write_begin+0x4f/0xe0 [ 264.304313][T16302] ? __pfx_fat_get_block+0x10/0x10 [ 264.304346][T16302] cont_write_begin+0x1b0/0x970 [ 264.304457][T16302] fat_write_begin+0x4f/0xe0 [ 264.304483][T16302] ? __pfx_fat_get_block+0x10/0x10 [ 264.304506][T16302] generic_cont_expand_simple+0xb0/0x150 [ 264.304607][T16302] fat_cont_expand+0x3e/0x170 [ 264.304634][T16302] fat_fallocate+0x177/0x1c0 [ 264.304714][T16302] vfs_fallocate+0x3b6/0x400 [ 264.304735][T16302] __x64_sys_fallocate+0x7a/0xd0 [ 264.304760][T16302] x64_sys_call+0x1cd4/0x3000 [ 264.304805][T16302] do_syscall_64+0xd8/0x2a0 [ 264.304832][T16302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.304851][T16302] RIP: 0033:0x7f655089f749 [ 264.304866][T16302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.304936][T16302] RSP: 002b:00007f654f307038 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 264.304953][T16302] RAX: ffffffffffffffda RBX: 00007f6550af5fa0 RCX: 00007f655089f749 [ 264.305034][T16302] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 264.305048][T16302] RBP: 00007f654f307090 R08: 0000000000000000 R09: 0000000000000000 [ 264.305063][T16302] R10: 00000000001000f4 R11: 0000000000000246 R12: 0000000000000001 [ 264.305158][T16302] R13: 00007f6550af6038 R14: 00007f6550af5fa0 R15: 00007fff507bb248 [ 264.305178][T16302] [ 264.584672][T16317] ieee802154 phy1 wpan1: encryption failed: -22 [ 264.628218][T16319] sd 0:0:1:0: device reset [ 264.636882][T16316] netlink: 'syz.4.4886': attribute type 39 has an invalid length. [ 264.700808][T16327] tipc: Started in network mode [ 264.705787][T16327] tipc: Node identity 4, cluster identity 4711 [ 264.711952][T16327] tipc: Node number set to 4 [ 264.772437][T13056] Bluetooth: hci0: Frame reassembly failed (-84) [ 264.820255][T16341] loop9: detected capacity change from 0 to 512 [ 264.847727][T16341] EXT4-fs warning (device loop9): ext4_xattr_inode_get:560: inode #11: comm syz.9.4896: EA inode hash validation failed [ 264.862903][T16341] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #15: comm syz.9.4896: corrupted inode contents [ 264.883284][T16341] EXT4-fs error (device loop9): ext4_dirty_inode:6502: inode #15: comm syz.9.4896: mark_inode_dirty error [ 264.897205][T16325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.912288][T16325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.923406][T16341] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #15: comm syz.9.4896: corrupted inode contents [ 264.940465][T16341] EXT4-fs error (device loop9): ext4_xattr_delete_inode:3000: inode #15: comm syz.9.4896: mark_inode_dirty error [ 264.956238][T16341] EXT4-fs error (device loop9): ext4_xattr_delete_inode:3003: inode #15: comm syz.9.4896: mark inode dirty (error -117) [ 264.970472][T16341] EXT4-fs warning (device loop9): ext4_evict_inode:273: xattr delete (err -117) [ 264.982543][T16341] EXT4-fs (loop9): 1 orphan inode deleted [ 264.993157][T16341] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.188510][T16362] sd 0:0:1:0: device reset [ 265.250052][T16369] 9pnet_virtio: no channels available for device 127.0.0.1 [ 265.255421][T16368] infiniband syz0: set down [ 265.261818][T16368] infiniband syz0: added bond0 [ 265.272698][T16368] RDS/IB: syz0: added [ 265.276718][T16368] smc: adding ib device syz0 with port count 1 [ 265.283756][T16368] smc: ib device syz0 port 1 has no pnetid [ 265.561578][T16378] __nla_validate_parse: 4 callbacks suppressed [ 265.561614][T16378] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4908'. [ 265.583057][T16378] team3: entered promiscuous mode [ 265.588122][T16378] team3: entered allmulticast mode [ 265.639419][T12147] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.857190][T16389] loop9: detected capacity change from 0 to 4096 [ 265.867659][T16392] netlink: 'syz.4.4914': attribute type 13 has an invalid length. [ 265.869349][T16389] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.890251][T16389] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 265.919676][T12147] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.004358][T16402] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4918'. [ 266.019786][T16402] loop9: detected capacity change from 0 to 1024 [ 266.026825][T16402] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 266.040157][T16402] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.4918: Invalid block bitmap block 0 in block_group 0 [ 266.053950][T16402] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.4918: Failed to acquire dquot type 0 [ 266.065666][T16402] EXT4-fs error (device loop9): ext4_free_blocks:6728: comm syz.9.4918: Freeing blocks not in datazone - block = 0, count = 4096 [ 266.079421][T16402] EXT4-fs error (device loop9): ext4_read_inode_bitmap:139: comm syz.9.4918: Invalid inode bitmap blk 0 in block_group 0 [ 266.092336][ T6744] EXT4-fs error (device loop9): ext4_release_dquot:7022: comm kworker/u8:11: Failed to release dquot type 0 [ 266.104202][T16402] EXT4-fs error (device loop9) in ext4_free_inode:361: Corrupt filesystem [ 266.113077][T16402] EXT4-fs (loop9): 1 orphan inode deleted [ 266.119442][T16402] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.150662][T12147] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.667326][T16416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.698852][T16416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.783673][ T3545] Bluetooth: hci0: command 0x1003 tx timeout [ 266.789787][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 267.013024][T16430] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4929'. [ 267.127368][T16434] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4931'. [ 267.239568][T16439] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4933'. [ 267.265002][T16439] team7: entered promiscuous mode [ 267.270093][T16439] team7: entered allmulticast mode [ 267.307726][T16443] netlink: 'syz.3.4935': attribute type 3 has an invalid length. [ 267.384278][T16455] 9pnet_fd: Insufficient options for proto=fd [ 267.431973][T16459] FAULT_INJECTION: forcing a failure. [ 267.431973][T16459] name failslab, interval 1, probability 0, space 0, times 0 [ 267.444665][T16459] CPU: 0 UID: 0 PID: 16459 Comm: syz.4.4942 Not tainted syzkaller #0 PREEMPT(voluntary) [ 267.444691][T16459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 267.444705][T16459] Call Trace: [ 267.444713][T16459] [ 267.444721][T16459] __dump_stack+0x1d/0x30 [ 267.444778][T16459] dump_stack_lvl+0xe8/0x140 [ 267.444804][T16459] dump_stack+0x15/0x1b [ 267.444901][T16459] should_fail_ex+0x265/0x280 [ 267.444925][T16459] should_failslab+0x8c/0xb0 [ 267.444948][T16459] kmem_cache_alloc_noprof+0x69/0x4b0 [ 267.444977][T16459] ? audit_log_start+0x342/0x720 [ 267.444994][T16459] ? audit_log_start+0x11f/0x720 [ 267.445042][T16459] audit_log_start+0x342/0x720 [ 267.445072][T16459] ? kstrtouint+0x76/0xc0 [ 267.445094][T16459] audit_seccomp+0x48/0x100 [ 267.445129][T16459] ? __seccomp_filter+0x832/0x1260 [ 267.445153][T16459] __seccomp_filter+0x843/0x1260 [ 267.445241][T16459] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 267.445280][T16459] ? vfs_write+0x7e8/0x960 [ 267.445303][T16459] ? __cond_resched+0x4e/0x90 [ 267.445380][T16459] __secure_computing+0x82/0x150 [ 267.445442][T16459] syscall_trace_enter+0xcf/0x1e0 [ 267.445546][T16459] do_syscall_64+0xb2/0x2a0 [ 267.445584][T16459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.445608][T16459] RIP: 0033:0x7f680ddff749 [ 267.445682][T16459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.445703][T16459] RSP: 002b:00007f680c85f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 267.445724][T16459] RAX: ffffffffffffffda RBX: 00007f680e055fa0 RCX: 00007f680ddff749 [ 267.445737][T16459] RDX: 00002000000001c0 RSI: 0000000000005423 RDI: 0000000000000005 [ 267.445750][T16459] RBP: 00007f680c85f090 R08: 0000000000000000 R09: 0000000000000000 [ 267.445806][T16459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.445890][T16459] R13: 00007f680e056038 R14: 00007f680e055fa0 R15: 00007ffe63bfde48 [ 267.445907][T16459] [ 267.681390][T16464] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4943'. [ 267.804441][T16472] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4947'. [ 267.816247][T16474] ieee802154 phy1 wpan1: encryption failed: -22 [ 267.847995][T16478] netlink: 'syz.4.4950': attribute type 3 has an invalid length. [ 267.893180][T16487] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4954'. [ 267.921408][T16484] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 268.040666][T16494] netlink: 'syz.9.4957': attribute type 13 has an invalid length. [ 268.082256][ T29] kauditd_printk_skb: 1280 callbacks suppressed [ 268.082272][ T29] audit: type=1326 audit(1765330424.625:77685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16444 comm="syz.0.4936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f19a5682005 code=0x7ffc0000 [ 268.112359][ T29] audit: type=1326 audit(1765330424.635:77686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16444 comm="syz.0.4936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f19a5682005 code=0x7ffc0000 [ 268.136049][ T29] audit: type=1326 audit(1765330424.635:77687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16444 comm="syz.0.4936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f19a5682005 code=0x7ffc0000 [ 268.159745][ T29] audit: type=1326 audit(1765330424.635:77688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16444 comm="syz.0.4936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f19a5682005 code=0x7ffc0000 [ 268.183327][ T29] audit: type=1326 audit(1765330424.635:77689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16444 comm="syz.0.4936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f19a5682005 code=0x7ffc0000 [ 268.206929][ T29] audit: type=1326 audit(1765330424.635:77690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16444 comm="syz.0.4936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f19a5682005 code=0x7ffc0000 [ 268.230568][ T29] audit: type=1326 audit(1765330424.635:77691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16444 comm="syz.0.4936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f19a5682005 code=0x7ffc0000 [ 268.254220][ T29] audit: type=1326 audit(1765330424.635:77692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16444 comm="syz.0.4936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f19a5682005 code=0x7ffc0000 [ 268.277810][ T29] audit: type=1326 audit(1765330424.635:77693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16444 comm="syz.0.4936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f19a5682005 code=0x7ffc0000 [ 268.301481][ T29] audit: type=1326 audit(1765330424.635:77694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16444 comm="syz.0.4936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f19a5682005 code=0x7ffc0000 [ 268.346322][T16502] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4960'. [ 268.487282][T16513] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4965'. [ 268.550881][T16516] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 268.584506][T16519] netlink: 'syz.0.4967': attribute type 298 has an invalid length. [ 269.090115][T16544] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 269.131208][T16528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.139927][T16528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.301698][T16550] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 269.332607][T16547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.341100][T16547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.364847][T16554] netlink: 'syz.4.4981': attribute type 13 has an invalid length. [ 269.696328][T16569] loop9: detected capacity change from 0 to 1024 [ 269.703412][T16569] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 269.723083][T16569] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.4987: Invalid block bitmap block 0 in block_group 0 [ 269.736931][T16569] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.4987: Failed to acquire dquot type 0 [ 269.748473][T16569] EXT4-fs error (device loop9): ext4_free_blocks:6728: comm syz.9.4987: Freeing blocks not in datazone - block = 0, count = 4096 [ 269.762044][T16569] EXT4-fs error (device loop9): ext4_read_inode_bitmap:139: comm syz.9.4987: Invalid inode bitmap blk 0 in block_group 0 [ 269.774865][ T12] EXT4-fs error (device loop9): ext4_release_dquot:7022: comm kworker/u8:0: Failed to release dquot type 0 [ 269.786740][T16569] EXT4-fs error (device loop9) in ext4_free_inode:361: Corrupt filesystem [ 269.795426][T16569] EXT4-fs (loop9): 1 orphan inode deleted [ 269.801766][T16569] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.829388][T12147] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.032216][T16586] sd 0:0:1:0: device reset [ 270.177106][T16599] sd 0:0:1:0: device reset [ 270.324554][T16593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.333298][T16593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.349649][T16613] netlink: 'syz.1.5004': attribute type 298 has an invalid length. [ 270.360212][T16595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.368845][T16595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.934571][T16621] sd 0:0:1:0: device reset [ 270.975681][T16625] __nla_validate_parse: 4 callbacks suppressed [ 270.975708][T16625] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5006'. [ 271.015082][T16629] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5009'. [ 271.033122][T16629] loop9: detected capacity change from 0 to 1024 [ 271.040066][T16629] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 271.051951][T16629] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.5009: Invalid block bitmap block 0 in block_group 0 [ 271.065636][T16629] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.5009: Failed to acquire dquot type 0 [ 271.077407][T16629] EXT4-fs error (device loop9): ext4_free_blocks:6728: comm syz.9.5009: Freeing blocks not in datazone - block = 0, count = 4096 [ 271.090932][T16629] EXT4-fs error (device loop9): ext4_read_inode_bitmap:139: comm syz.9.5009: Invalid inode bitmap blk 0 in block_group 0 [ 271.103731][ T850] EXT4-fs error (device loop9): ext4_release_dquot:7022: comm kworker/u8:7: Failed to release dquot type 0 [ 271.118502][T16629] EXT4-fs error (device loop9) in ext4_free_inode:361: Corrupt filesystem [ 271.137783][T16629] EXT4-fs (loop9): 1 orphan inode deleted [ 271.164186][T16629] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.245424][T12147] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.417148][ T1617] Bluetooth: hci0: Frame reassembly failed (-84) [ 271.463983][T16635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.475292][T16635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.555931][T16651] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5018'. [ 271.569397][T16651] team8: entered promiscuous mode [ 271.574488][T16651] team8: entered allmulticast mode [ 271.627399][T16641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.636027][T16641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.168270][T16658] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5020'. [ 272.226436][T16655] Set syz1 is full, maxelem 65536 reached [ 272.236301][T16662] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5022'. [ 272.264703][T16666] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5024'. [ 272.369339][T16673] macsec0: entered promiscuous mode [ 272.430062][T16673] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5027'. [ 272.594397][T16685] ieee802154 phy1 wpan1: encryption failed: -22 [ 272.741462][T16680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.750212][T16680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.784678][T16683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.793280][T16683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.959023][T16694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.967547][T16694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.320315][ T29] kauditd_printk_skb: 725 callbacks suppressed [ 273.320332][ T29] audit: type=1326 audit(1765330429.865:78414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16697 comm="syz.1.5037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4d53f749 code=0x7ffc0000 [ 273.350241][ T29] audit: type=1326 audit(1765330429.865:78415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16697 comm="syz.1.5037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa4d53f749 code=0x7ffc0000 [ 273.373890][ T29] audit: type=1326 audit(1765330429.865:78416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16697 comm="syz.1.5037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4d53f749 code=0x7ffc0000 [ 273.387622][T16704] SELinux: ebitmap: truncated map [ 273.435782][T16704] SELinux: failed to load policy [ 273.447039][ T29] audit: type=1400 audit(1765330429.935:78417): avc: denied { load_policy } for pid=16703 comm="syz.4.5040" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 273.467438][ T29] audit: type=1326 audit(1765330429.955:78418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16697 comm="syz.1.5037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa4d53f749 code=0x7ffc0000 [ 273.491071][ T29] audit: type=1326 audit(1765330429.955:78419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16697 comm="syz.1.5037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4d53f749 code=0x7ffc0000 [ 273.514737][ T3545] Bluetooth: hci0: command 0x1003 tx timeout [ 273.514713][ T29] audit: type=1326 audit(1765330429.955:78420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16697 comm="syz.1.5037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7faa4d53f749 code=0x7ffc0000 [ 273.532193][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 273.544317][ T29] audit: type=1326 audit(1765330429.955:78421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16697 comm="syz.1.5037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4d53f749 code=0x7ffc0000 [ 273.573963][ T29] audit: type=1326 audit(1765330429.955:78422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16697 comm="syz.1.5037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa4d53f749 code=0x7ffc0000 [ 273.597506][ T29] audit: type=1326 audit(1765330429.955:78423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16697 comm="syz.1.5037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4d53f749 code=0x7ffc0000 [ 273.822042][T16702] Set syz1 is full, maxelem 65536 reached [ 273.892412][T16709] loop9: detected capacity change from 0 to 4096 [ 273.898269][T16720] netlink: 'syz.4.5044': attribute type 13 has an invalid length. [ 273.915915][T16709] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.007609][T16734] netlink: 'syz.0.5048': attribute type 21 has an invalid length. [ 274.015949][T16734] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5048'. [ 274.025058][T16734] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5048'. [ 274.042607][T16734] 9p: Could not find request transport: ”à.“ÝÝfd [ 274.099425][T12147] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.128644][T16741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.137966][T16741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.180979][T16748] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5053'. [ 274.209261][T16754] FAULT_INJECTION: forcing a failure. [ 274.209261][T16754] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 274.222482][T16754] CPU: 1 UID: 0 PID: 16754 Comm: syz.9.5056 Not tainted syzkaller #0 PREEMPT(voluntary) [ 274.222509][T16754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 274.222520][T16754] Call Trace: [ 274.222526][T16754] [ 274.222533][T16754] __dump_stack+0x1d/0x30 [ 274.222593][T16754] dump_stack_lvl+0xe8/0x140 [ 274.222647][T16754] dump_stack+0x15/0x1b [ 274.222663][T16754] should_fail_ex+0x265/0x280 [ 274.222682][T16754] should_fail+0xb/0x20 [ 274.222780][T16754] should_fail_usercopy+0x1a/0x20 [ 274.222806][T16754] _copy_to_user+0x20/0xa0 [ 274.222829][T16754] simple_read_from_buffer+0xb5/0x130 [ 274.222851][T16754] proc_fail_nth_read+0x10e/0x150 [ 274.222884][T16754] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 274.223001][T16754] vfs_read+0x1a8/0x770 [ 274.223020][T16754] ? __rcu_read_unlock+0x4f/0x70 [ 274.223039][T16754] ? __fget_files+0x184/0x1c0 [ 274.223059][T16754] ? mutex_lock+0x58/0x90 [ 274.223158][T16754] ksys_read+0xda/0x1a0 [ 274.223175][T16754] __x64_sys_read+0x40/0x50 [ 274.223229][T16754] x64_sys_call+0x2889/0x3000 [ 274.223257][T16754] do_syscall_64+0xd8/0x2a0 [ 274.223287][T16754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.223351][T16754] RIP: 0033:0x7f655089e15c [ 274.223368][T16754] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 274.223383][T16754] RSP: 002b:00007f654f307030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 274.223400][T16754] RAX: ffffffffffffffda RBX: 00007f6550af5fa0 RCX: 00007f655089e15c [ 274.223463][T16754] RDX: 000000000000000f RSI: 00007f654f3070a0 RDI: 0000000000000004 [ 274.223476][T16754] RBP: 00007f654f307090 R08: 0000000000000000 R09: 0000000000000000 [ 274.223629][T16754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.223640][T16754] R13: 00007f6550af6038 R14: 00007f6550af5fa0 R15: 00007fff507bb248 [ 274.223684][T16754] [ 274.493131][T16765] batman_adv: batadv0: Adding interface: ipvlan2 [ 274.499522][T16765] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 274.539897][T16765] batman_adv: batadv0: Interface activated: ipvlan2 [ 274.580143][T16769] bond0: (slave caif0): The slave device specified does not support setting the MAC address [ 274.602555][T16769] bond0: (slave caif0): Error -95 calling set_mac_address [ 274.684143][T16769] netlink: 'syz.9.5059': attribute type 13 has an invalid length. [ 274.704549][T16769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.713192][T16769] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.722725][T16769] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 274.862951][T16793] sd 0:0:1:0: device reset [ 274.946098][T16798] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 274.969835][T16798] loop9: detected capacity change from 0 to 2048 [ 274.992939][T16806] netlink: 'syz.4.5076': attribute type 1 has an invalid length. [ 275.001259][T16798] EXT4-fs (loop9): failed to initialize system zone (-117) [ 275.008790][T16798] EXT4-fs (loop9): mount failed [ 275.037128][T16806] 8021q: adding VLAN 0 to HW filter on device bond1 [ 275.076659][T16806] vlan0: entered allmulticast mode [ 275.081895][T16806] bond1: entered allmulticast mode [ 275.122355][T16814] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 275.128984][T16814] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 275.136430][T16814] vhci_hcd vhci_hcd.0: Device attached [ 275.157163][T16819] FAULT_INJECTION: forcing a failure. [ 275.157163][T16819] name failslab, interval 1, probability 0, space 0, times 0 [ 275.169954][T16819] CPU: 1 UID: 0 PID: 16819 Comm: syz.9.5079 Not tainted syzkaller #0 PREEMPT(voluntary) [ 275.170051][T16819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 275.170065][T16819] Call Trace: [ 275.170072][T16819] [ 275.170081][T16819] __dump_stack+0x1d/0x30 [ 275.170109][T16819] dump_stack_lvl+0xe8/0x140 [ 275.170129][T16819] dump_stack+0x15/0x1b [ 275.170228][T16819] should_fail_ex+0x265/0x280 [ 275.170254][T16819] should_failslab+0x8c/0xb0 [ 275.170282][T16819] kmem_cache_alloc_noprof+0x69/0x4b0 [ 275.170301][T16819] ? audit_log_start+0x342/0x720 [ 275.170360][T16819] audit_log_start+0x342/0x720 [ 275.170384][T16819] ? kstrtouint+0x76/0xc0 [ 275.170405][T16819] audit_seccomp+0x48/0x100 [ 275.170463][T16819] ? __seccomp_filter+0x832/0x1260 [ 275.170494][T16819] __seccomp_filter+0x843/0x1260 [ 275.170625][T16819] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 275.170696][T16819] ? vfs_write+0x7e8/0x960 [ 275.170751][T16819] ? __cond_resched+0x4e/0x90 [ 275.170823][T16819] __secure_computing+0x82/0x150 [ 275.170846][T16819] syscall_trace_enter+0xcf/0x1e0 [ 275.170935][T16819] do_syscall_64+0xb2/0x2a0 [ 275.170965][T16819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.170983][T16819] RIP: 0033:0x7f655089f749 [ 275.171017][T16819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.171036][T16819] RSP: 002b:00007f654f307038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 275.171056][T16819] RAX: ffffffffffffffda RBX: 00007f6550af5fa0 RCX: 00007f655089f749 [ 275.171070][T16819] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 00002000002ec000 [ 275.171083][T16819] RBP: 00007f654f307090 R08: 0000000000000000 R09: 0000000000000000 [ 275.171094][T16819] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 275.171105][T16819] R13: 00007f6550af6038 R14: 00007f6550af5fa0 R15: 00007fff507bb248 [ 275.171198][T16819] [ 275.432294][ T2967] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 275.492159][ T2967] usb 9-1: new full-speed USB device number 4 using vhci_hcd [ 275.591296][T16843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.612529][T16845] netlink: 'syz.3.5087': attribute type 298 has an invalid length. [ 275.614228][T16843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.819809][T16820] vhci_hcd: connection reset by peer [ 275.835569][ T850] vhci_hcd vhci_hcd.4: stop threads [ 275.840892][ T850] vhci_hcd vhci_hcd.4: release socket [ 275.846316][ T850] vhci_hcd vhci_hcd.4: disconnect device [ 276.036451][T16867] FAULT_INJECTION: forcing a failure. [ 276.036451][T16867] name failslab, interval 1, probability 0, space 0, times 0 [ 276.049297][T16867] CPU: 1 UID: 0 PID: 16867 Comm: syz.1.5093 Not tainted syzkaller #0 PREEMPT(voluntary) [ 276.049388][T16867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 276.049401][T16867] Call Trace: [ 276.049408][T16867] [ 276.049415][T16867] __dump_stack+0x1d/0x30 [ 276.049444][T16867] dump_stack_lvl+0xe8/0x140 [ 276.049527][T16867] dump_stack+0x15/0x1b [ 276.049596][T16867] should_fail_ex+0x265/0x280 [ 276.049623][T16867] should_failslab+0x8c/0xb0 [ 276.049646][T16867] __kmalloc_noprof+0xb9/0x5a0 [ 276.049674][T16867] ? bpf_test_init+0x86/0x140 [ 276.049706][T16867] ? _parse_integer_limit+0x170/0x190 [ 276.049728][T16867] bpf_test_init+0x86/0x140 [ 276.049774][T16867] bpf_prog_test_run_skb+0x2b6/0xf50 [ 276.049847][T16867] ? __rcu_read_unlock+0x4f/0x70 [ 276.049866][T16867] ? __fget_files+0x184/0x1c0 [ 276.049967][T16867] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 276.050001][T16867] bpf_prog_test_run+0x22a/0x390 [ 276.050098][T16867] __sys_bpf+0x4c0/0x7c0 [ 276.050131][T16867] __x64_sys_bpf+0x41/0x50 [ 276.050152][T16867] x64_sys_call+0x28e1/0x3000 [ 276.050178][T16867] do_syscall_64+0xd8/0x2a0 [ 276.050277][T16867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.050297][T16867] RIP: 0033:0x7faa4d53f749 [ 276.050311][T16867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.050328][T16867] RSP: 002b:00007faa4bfa7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 276.050351][T16867] RAX: ffffffffffffffda RBX: 00007faa4d795fa0 RCX: 00007faa4d53f749 [ 276.050403][T16867] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 276.050414][T16867] RBP: 00007faa4bfa7090 R08: 0000000000000000 R09: 0000000000000000 [ 276.050425][T16867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.050436][T16867] R13: 00007faa4d796038 R14: 00007faa4d795fa0 R15: 00007ffcaac68528 [ 276.050453][T16867] [ 276.598443][T16883] dvmrp6: entered allmulticast mode [ 276.812627][T16894] __nla_validate_parse: 5 callbacks suppressed [ 276.812644][T16894] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5105'. [ 276.919095][T16892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.932244][T16892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.080319][T16910] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5111'. [ 277.122666][T16914] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5113'. [ 277.214765][T16914] hub 8-0:1.0: USB hub found [ 277.219411][T16914] hub 8-0:1.0: 8 ports detected [ 277.279786][T16917] FAULT_INJECTION: forcing a failure. [ 277.279786][T16917] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 277.293168][T16917] CPU: 0 UID: 0 PID: 16917 Comm: syz.3.5114 Not tainted syzkaller #0 PREEMPT(voluntary) [ 277.293205][T16917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 277.293216][T16917] Call Trace: [ 277.293222][T16917] [ 277.293229][T16917] __dump_stack+0x1d/0x30 [ 277.293251][T16917] dump_stack_lvl+0xe8/0x140 [ 277.293274][T16917] dump_stack+0x15/0x1b [ 277.293322][T16917] should_fail_ex+0x265/0x280 [ 277.293340][T16917] should_fail_alloc_page+0xf2/0x100 [ 277.293360][T16917] __alloc_frozen_pages_noprof+0x109/0x360 [ 277.293390][T16917] alloc_pages_mpol+0xb3/0x260 [ 277.293414][T16917] vma_alloc_folio_noprof+0x1aa/0x300 [ 277.293438][T16917] handle_mm_fault+0xef5/0x2c60 [ 277.293522][T16917] ? _raw_spin_lock+0x52/0xa0 [ 277.293587][T16917] ? __pte_offset_map_lock+0x1d9/0x240 [ 277.293612][T16917] __get_user_pages+0x1024/0x1ed0 [ 277.293635][T16917] ? avc_has_perm_noaudit+0xab/0x130 [ 277.293739][T16917] __gup_longterm_locked+0x8ef/0xe60 [ 277.293811][T16917] ? security_ptrace_access_check+0x69/0x80 [ 277.293836][T16917] ? __ptrace_may_access+0x2bd/0x340 [ 277.293861][T16917] pin_user_pages_remote+0x7e/0xb0 [ 277.293995][T16917] process_vm_rw+0x484/0x960 [ 277.294028][T16917] __x64_sys_process_vm_writev+0x78/0x90 [ 277.294077][T16917] x64_sys_call+0x27ef/0x3000 [ 277.294095][T16917] do_syscall_64+0xd8/0x2a0 [ 277.294186][T16917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.294207][T16917] RIP: 0033:0x7f51d2ddf749 [ 277.294278][T16917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.294292][T16917] RSP: 002b:00007f51d1847038 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 277.294306][T16917] RAX: ffffffffffffffda RBX: 00007f51d3035fa0 RCX: 00007f51d2ddf749 [ 277.294349][T16917] RDX: 0000000000000001 RSI: 0000200000001c80 RDI: 000000000000027b [ 277.294360][T16917] RBP: 00007f51d1847090 R08: 0000000000000001 R09: 0000000000000000 [ 277.294409][T16917] R10: 0000200000001d80 R11: 0000000000000246 R12: 0000000000000001 [ 277.294418][T16917] R13: 00007f51d3036038 R14: 00007f51d3035fa0 R15: 00007ffd1a7ba578 [ 277.294433][T16917] [ 277.557447][T16922] sd 0:0:1:0: device reset [ 277.566359][T16924] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5117'. [ 277.640545][T16931] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5122'. [ 277.681024][T16931] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5122'. [ 277.749987][T16946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5126'. [ 277.827284][T16955] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5129'. [ 277.844196][T16943] loop9: detected capacity change from 0 to 8192 [ 277.861435][T16943] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5125'. [ 277.870515][T16943] gretap0: entered promiscuous mode [ 277.875781][T16943] gretap0: entered allmulticast mode [ 278.059068][T16978] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5138'. [ 278.108917][T16982] loop9: detected capacity change from 0 to 1024 [ 278.121328][T16982] EXT4-fs: inline encryption not supported [ 278.127991][T16984] FAULT_INJECTION: forcing a failure. [ 278.127991][T16984] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 278.141096][T16984] CPU: 1 UID: 0 PID: 16984 Comm: syz.3.5140 Not tainted syzkaller #0 PREEMPT(voluntary) [ 278.141123][T16984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 278.141177][T16984] Call Trace: [ 278.141185][T16984] [ 278.141194][T16984] __dump_stack+0x1d/0x30 [ 278.141279][T16984] dump_stack_lvl+0xe8/0x140 [ 278.141306][T16984] dump_stack+0x15/0x1b [ 278.141330][T16984] should_fail_ex+0x265/0x280 [ 278.141385][T16984] should_fail+0xb/0x20 [ 278.141406][T16984] should_fail_usercopy+0x1a/0x20 [ 278.141444][T16984] _copy_to_user+0x20/0xa0 [ 278.141476][T16984] snd_seq_ioctl+0x23f/0x300 [ 278.141609][T16984] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 278.141644][T16984] __se_sys_ioctl+0xce/0x140 [ 278.141682][T16984] __x64_sys_ioctl+0x43/0x50 [ 278.141730][T16984] x64_sys_call+0x14b0/0x3000 [ 278.141760][T16984] do_syscall_64+0xd8/0x2a0 [ 278.141799][T16984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.141821][T16984] RIP: 0033:0x7f51d2ddf749 [ 278.141876][T16984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.141893][T16984] RSP: 002b:00007f51d1847038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 278.141982][T16984] RAX: ffffffffffffffda RBX: 00007f51d3035fa0 RCX: 00007f51d2ddf749 [ 278.141994][T16984] RDX: 0000200000000380 RSI: 00000000404c534a RDI: 0000000000000003 [ 278.142006][T16984] RBP: 00007f51d1847090 R08: 0000000000000000 R09: 0000000000000000 [ 278.142018][T16984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.142031][T16984] R13: 00007f51d3036038 R14: 00007f51d3035fa0 R15: 00007ffd1a7ba578 [ 278.142049][T16984] [ 278.318648][T16982] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.364174][ T29] kauditd_printk_skb: 1161 callbacks suppressed [ 278.364198][ T29] audit: type=1400 audit(1765330434.915:79583): avc: denied { write } for pid=16993 comm="syz.3.5143" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 278.448546][T17002] IPVS: length: 67 != 24 [ 278.548712][ T29] audit: type=1326 audit(1765330435.095:79584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17008 comm="syz.4.5149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f680ddff749 code=0x7ffc0000 [ 278.572528][ T29] audit: type=1326 audit(1765330435.095:79585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17008 comm="syz.4.5149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f680ddff749 code=0x7ffc0000 [ 278.596154][ T29] audit: type=1326 audit(1765330435.095:79586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17008 comm="syz.4.5149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f680ddfdf90 code=0x7ffc0000 [ 278.619786][ T29] audit: type=1326 audit(1765330435.095:79587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17008 comm="syz.4.5149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f680ddfdf90 code=0x7ffc0000 [ 278.643427][ T29] audit: type=1326 audit(1765330435.095:79588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17008 comm="syz.4.5149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f680ddff749 code=0x7ffc0000 [ 278.667173][ T29] audit: type=1326 audit(1765330435.095:79589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17008 comm="syz.4.5149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f680ddff749 code=0x7ffc0000 [ 278.690842][ T29] audit: type=1326 audit(1765330435.095:79590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17008 comm="syz.4.5149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f680ddff749 code=0x7ffc0000 [ 278.714472][ T29] audit: type=1326 audit(1765330435.095:79591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17008 comm="syz.4.5149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f680ddff749 code=0x7ffc0000 [ 278.738093][ T29] audit: type=1326 audit(1765330435.095:79592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17008 comm="syz.4.5149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f680ddff749 code=0x7ffc0000 [ 278.773576][T17009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.784369][T17009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.891469][T12147] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.114815][T17022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.123506][T17022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.275058][T17042] 9pnet_virtio: no channels available for device 127.0.0.1 [ 279.671795][T17055] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=17055 comm=syz.9.5167 [ 279.763369][T17061] FAULT_INJECTION: forcing a failure. [ 279.763369][T17061] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 279.776613][T17061] CPU: 1 UID: 0 PID: 17061 Comm: syz.9.5169 Not tainted syzkaller #0 PREEMPT(voluntary) [ 279.776648][T17061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 279.776663][T17061] Call Trace: [ 279.776749][T17061] [ 279.776756][T17061] __dump_stack+0x1d/0x30 [ 279.776779][T17061] dump_stack_lvl+0xe8/0x140 [ 279.776801][T17061] dump_stack+0x15/0x1b [ 279.776920][T17061] should_fail_ex+0x265/0x280 [ 279.776949][T17061] should_fail+0xb/0x20 [ 279.776974][T17061] should_fail_usercopy+0x1a/0x20 [ 279.777003][T17061] _copy_from_iter+0xcf/0xe70 [ 279.777036][T17061] ? _copy_from_iter+0x13e/0xe70 [ 279.777086][T17061] copy_page_from_iter+0x178/0x2a0 [ 279.777112][T17061] skb_copy_datagram_from_iter+0x232/0x490 [ 279.777150][T17061] tun_get_user+0xafb/0x2670 [ 279.777222][T17061] ? ref_tracker_alloc+0x1f2/0x2f0 [ 279.777282][T17061] ? selinux_file_permission+0x1e2/0x320 [ 279.777380][T17061] tun_chr_write_iter+0x15e/0x210 [ 279.777409][T17061] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 279.777433][T17061] vfs_write+0x52a/0x960 [ 279.777460][T17061] ksys_write+0xda/0x1a0 [ 279.777482][T17061] __x64_sys_write+0x40/0x50 [ 279.777547][T17061] x64_sys_call+0x2847/0x3000 [ 279.777589][T17061] do_syscall_64+0xd8/0x2a0 [ 279.777631][T17061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.777708][T17061] RIP: 0033:0x7f655089f749 [ 279.777726][T17061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.777790][T17061] RSP: 002b:00007f654f307038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 279.777813][T17061] RAX: ffffffffffffffda RBX: 00007f6550af5fa0 RCX: 00007f655089f749 [ 279.777829][T17061] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 0000000000000005 [ 279.777843][T17061] RBP: 00007f654f307090 R08: 0000000000000000 R09: 0000000000000000 [ 279.777858][T17061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 279.777874][T17061] R13: 00007f6550af6038 R14: 00007f6550af5fa0 R15: 00007fff507bb248 [ 279.777976][T17061] [ 280.056491][T17064] sd 0:0:1:0: device reset [ 280.117895][T17073] sd 0:0:1:0: device reset [ 280.219660][T17088] 9pnet_fd: Insufficient options for proto=fd [ 280.343853][T17077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.362506][T17077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.542401][ T2967] usb 9-1: enqueue for inactive port 0 [ 280.548066][ T2967] usb 9-1: enqueue for inactive port 0 [ 280.632418][ T2967] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 280.905109][T17125] FAULT_INJECTION: forcing a failure. [ 280.905109][T17125] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 280.918226][T17125] CPU: 1 UID: 0 PID: 17125 Comm: syz.3.5192 Not tainted syzkaller #0 PREEMPT(voluntary) [ 280.918384][T17125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 280.918395][T17125] Call Trace: [ 280.918401][T17125] [ 280.918409][T17125] __dump_stack+0x1d/0x30 [ 280.918432][T17125] dump_stack_lvl+0xe8/0x140 [ 280.918454][T17125] dump_stack+0x15/0x1b [ 280.918472][T17125] should_fail_ex+0x265/0x280 [ 280.918529][T17125] should_fail+0xb/0x20 [ 280.918546][T17125] should_fail_usercopy+0x1a/0x20 [ 280.918577][T17125] _copy_from_user+0x1c/0xb0 [ 280.918633][T17125] ___sys_sendmsg+0xc1/0x1d0 [ 280.918673][T17125] __x64_sys_sendmsg+0xd4/0x160 [ 280.918702][T17125] x64_sys_call+0x17ba/0x3000 [ 280.918725][T17125] do_syscall_64+0xd8/0x2a0 [ 280.918809][T17125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.918893][T17125] RIP: 0033:0x7f51d2ddf749 [ 280.918907][T17125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.918953][T17125] RSP: 002b:00007f51d1847038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 280.918970][T17125] RAX: ffffffffffffffda RBX: 00007f51d3035fa0 RCX: 00007f51d2ddf749 [ 280.918982][T17125] RDX: 0000000020000044 RSI: 0000200000000040 RDI: 0000000000000003 [ 280.918994][T17125] RBP: 00007f51d1847090 R08: 0000000000000000 R09: 0000000000000000 [ 280.919005][T17125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.919016][T17125] R13: 00007f51d3036038 R14: 00007f51d3035fa0 R15: 00007ffd1a7ba578 [ 280.919112][T17125] [ 281.150403][T17134] sd 0:0:1:0: device reset [ 281.268498][T17145] 9pnet_virtio: no channels available for device 127.0.0.1 [ 281.394069][T17152] netlink: 'syz.0.5203': attribute type 29 has an invalid length. [ 281.414274][T17152] bond0 (unregistering): Released all slaves [ 281.500976][T17158] netlink: 'syz.0.5206': attribute type 298 has an invalid length. [ 281.749050][T17165] sd 0:0:1:0: device reset [ 281.784666][T17160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.800004][T17160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.878131][T17170] __nla_validate_parse: 13 callbacks suppressed [ 281.878150][T17170] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5211'. [ 282.006127][T17178] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5214'. [ 282.078272][T17183] netlink: 'syz.1.5216': attribute type 1 has an invalid length. [ 282.324513][T17188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.333370][T17188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.500106][T17200] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5223'. [ 282.509076][T17200] netlink: 'syz.4.5223': attribute type 30 has an invalid length. [ 282.517008][T17200] netlink: 'syz.4.5223': attribute type 29 has an invalid length. [ 282.524827][T17200] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5223'. [ 282.632706][T17210] 9pnet_virtio: no channels available for device 127.0.0.1 [ 282.709006][T17212] FAULT_INJECTION: forcing a failure. [ 282.709006][T17212] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 282.722467][T17212] CPU: 1 UID: 0 PID: 17212 Comm: syz.9.5228 Not tainted syzkaller #0 PREEMPT(voluntary) [ 282.722567][T17212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 282.722583][T17212] Call Trace: [ 282.722590][T17212] [ 282.722656][T17212] __dump_stack+0x1d/0x30 [ 282.722686][T17212] dump_stack_lvl+0xe8/0x140 [ 282.722712][T17212] dump_stack+0x15/0x1b [ 282.722742][T17212] should_fail_ex+0x265/0x280 [ 282.722823][T17212] should_fail+0xb/0x20 [ 282.722847][T17212] should_fail_usercopy+0x1a/0x20 [ 282.723026][T17212] _copy_to_user+0x20/0xa0 [ 282.723059][T17212] simple_read_from_buffer+0xb5/0x130 [ 282.723080][T17212] proc_fail_nth_read+0x10e/0x150 [ 282.723195][T17212] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 282.723227][T17212] vfs_read+0x1a8/0x770 [ 282.723248][T17212] ? __pfx_ping_bind+0x10/0x10 [ 282.723269][T17212] ? __rcu_read_unlock+0x4f/0x70 [ 282.723353][T17212] ? __fget_files+0x184/0x1c0 [ 282.723382][T17212] ? mutex_lock+0x58/0x90 [ 282.723489][T17212] ksys_read+0xda/0x1a0 [ 282.723514][T17212] __x64_sys_read+0x40/0x50 [ 282.723538][T17212] x64_sys_call+0x2889/0x3000 [ 282.723566][T17212] do_syscall_64+0xd8/0x2a0 [ 282.723644][T17212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.723711][T17212] RIP: 0033:0x7f655089e15c [ 282.723730][T17212] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 282.723821][T17212] RSP: 002b:00007f654f307030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 282.723845][T17212] RAX: ffffffffffffffda RBX: 00007f6550af5fa0 RCX: 00007f655089e15c [ 282.723861][T17212] RDX: 000000000000000f RSI: 00007f654f3070a0 RDI: 0000000000000005 [ 282.723875][T17212] RBP: 00007f654f307090 R08: 0000000000000000 R09: 0000000000000000 [ 282.723890][T17212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.723905][T17212] R13: 00007f6550af6038 R14: 00007f6550af5fa0 R15: 00007fff507bb248 [ 282.724045][T17212] [ 282.843595][T17209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.943423][T17209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.000935][T17221] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5232'. [ 283.015836][T17223] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5233'. [ 283.024975][T17223] netlink: 40 bytes leftover after parsing attributes in process `syz.9.5233'. [ 283.065383][T17223] bond2: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 283.074434][T17223] bond2: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 283.102248][T17223] bond2 (unregistering): Released all slaves [ 283.164944][T17217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.182428][T17217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.375259][T17231] loop9: detected capacity change from 0 to 1024 [ 283.394212][T17231] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 283.408603][T17231] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 283.609133][T17244] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5240'. [ 283.619799][T17244] sch_fq: defrate 0 ignored. [ 283.649170][ T29] kauditd_printk_skb: 379 callbacks suppressed [ 283.649188][ T29] audit: type=1326 audit(1765330440.195:79972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17246 comm="syz.0.5241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19a564f749 code=0x7ffc0000 [ 283.700476][T17247] netlink: 'syz.0.5241': attribute type 39 has an invalid length. [ 283.716902][ T29] audit: type=1326 audit(1765330440.195:79973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17246 comm="syz.0.5241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f19a564f749 code=0x7ffc0000 [ 283.718482][ T31] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 283.740756][ T29] audit: type=1326 audit(1765330440.195:79974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17246 comm="syz.0.5241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19a564f749 code=0x7ffc0000 [ 283.752735][ T31] EXT4-fs (loop9): This should not happen!! Data will be lost [ 283.752735][ T31] [ 283.752751][ T31] EXT4-fs (loop9): Total free blocks count 0 [ 283.752763][ T31] EXT4-fs (loop9): Free/Dirty block details [ 283.776285][ T29] audit: type=1326 audit(1765330440.195:79975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17246 comm="syz.0.5241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f19a564f749 code=0x7ffc0000 [ 283.785926][ T31] EXT4-fs (loop9): free_blocks=20480 [ 283.785938][ T31] EXT4-fs (loop9): dirty_blocks=10912 [ 283.791926][ T29] audit: type=1326 audit(1765330440.195:79976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17246 comm="syz.0.5241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19a564f749 code=0x7ffc0000 [ 283.797813][ T31] EXT4-fs (loop9): Block reservation details [ 283.797824][ T31] EXT4-fs (loop9): i_reserved_data_blocks=682 [ 283.868285][ T29] audit: type=1326 audit(1765330440.205:79977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17246 comm="syz.0.5241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f19a564f749 code=0x7ffc0000 [ 283.891919][ T29] audit: type=1326 audit(1765330440.205:79978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17246 comm="syz.0.5241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19a564f749 code=0x7ffc0000 [ 283.915596][ T29] audit: type=1326 audit(1765330440.205:79979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17246 comm="syz.0.5241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f19a564f749 code=0x7ffc0000 [ 283.939143][ T29] audit: type=1326 audit(1765330440.205:79980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17246 comm="syz.0.5241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19a564f749 code=0x7ffc0000 [ 283.944814][ T12] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 30 with max blocks 2048 with error 28 [ 283.962708][ T29] audit: type=1326 audit(1765330440.205:79981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17246 comm="syz.0.5241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f19a564f749 code=0x7ffc0000 [ 284.024823][T17257] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5244'. [ 284.078886][T17257] team5: entered promiscuous mode [ 284.084071][T17257] team5: entered allmulticast mode [ 284.086905][T17259] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5245'. [ 284.144319][T17262] 9pnet_virtio: no channels available for device 127.0.0.1 [ 284.393442][T17265] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 284.473969][T17269] loop9: detected capacity change from 0 to 512 [ 284.483107][T17269] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 284.491337][T17269] EXT4-fs (loop9): orphan cleanup on readonly fs [ 284.499127][T17269] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.5247: Failed to acquire dquot type 1 [ 284.512203][T17269] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.5247: bg 0: block 40: padding at end of block bitmap is not set [ 284.527113][T17269] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 284.536491][T17269] EXT4-fs (loop9): 1 truncate cleaned up [ 284.544459][T17269] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 284.582880][T12147] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.622084][T17279] macsec0: entered promiscuous mode [ 284.839359][T17290] lo speed is unknown, defaulting to 1000 [ 284.845271][T17290] lo speed is unknown, defaulting to 1000 [ 284.851338][T17290] lo speed is unknown, defaulting to 1000 [ 284.858722][T17290] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 284.875640][T17290] lo speed is unknown, defaulting to 1000 [ 284.882255][T17290] lo speed is unknown, defaulting to 1000 [ 284.889242][T17290] lo speed is unknown, defaulting to 1000 [ 284.898285][T17290] lo speed is unknown, defaulting to 1000 [ 284.929387][T17290] lo speed is unknown, defaulting to 1000 [ 284.957786][T17290] lo speed is unknown, defaulting to 1000 [ 285.100920][T17296] loop9: detected capacity change from 0 to 512 [ 285.155599][T17296] EXT4-fs warning (device loop9): ext4_xattr_inode_get:560: inode #11: comm syz.9.5262: EA inode hash validation failed [ 285.244410][T17296] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #15: comm syz.9.5262: corrupted inode contents [ 285.269257][T17296] EXT4-fs error (device loop9): ext4_dirty_inode:6502: inode #15: comm syz.9.5262: mark_inode_dirty error [ 285.283099][T17296] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #15: comm syz.9.5262: corrupted inode contents [ 285.331996][T17296] EXT4-fs error (device loop9): ext4_xattr_delete_inode:3000: inode #15: comm syz.9.5262: mark_inode_dirty error [ 285.348357][T17326] FAULT_INJECTION: forcing a failure. [ 285.348357][T17326] name failslab, interval 1, probability 0, space 0, times 0 [ 285.348388][T17326] CPU: 0 UID: 0 PID: 17326 Comm: syz.4.5271 Not tainted syzkaller #0 PREEMPT(voluntary) [ 285.348415][T17326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 285.348506][T17326] Call Trace: [ 285.348512][T17326] [ 285.348521][T17326] __dump_stack+0x1d/0x30 [ 285.348566][T17326] dump_stack_lvl+0xe8/0x140 [ 285.348592][T17326] dump_stack+0x15/0x1b [ 285.348641][T17326] should_fail_ex+0x265/0x280 [ 285.348668][T17326] should_failslab+0x8c/0xb0 [ 285.348758][T17326] kmem_cache_alloc_noprof+0x69/0x4b0 [ 285.348782][T17326] ? audit_log_start+0x342/0x720 [ 285.348811][T17326] audit_log_start+0x342/0x720 [ 285.348888][T17326] ? kstrtouint+0x76/0xc0 [ 285.348913][T17326] audit_seccomp+0x48/0x100 [ 285.348972][T17326] ? __seccomp_filter+0x832/0x1260 [ 285.349006][T17326] __seccomp_filter+0x843/0x1260 [ 285.349056][T17326] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 285.349092][T17326] ? vfs_write+0x7e8/0x960 [ 285.349263][T17326] ? __cond_resched+0x4e/0x90 [ 285.349293][T17326] __secure_computing+0x82/0x150 [ 285.349380][T17326] syscall_trace_enter+0xcf/0x1e0 [ 285.349410][T17326] do_syscall_64+0xb2/0x2a0 [ 285.349579][T17326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.349604][T17326] RIP: 0033:0x7f680ddff749 [ 285.349623][T17326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.349645][T17326] RSP: 002b:00007f680c85f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000124 [ 285.349692][T17326] RAX: ffffffffffffffda RBX: 00007f680e055fa0 RCX: 00007f680ddff749 [ 285.349708][T17326] RDX: 0000000000080000 RSI: ffffffffffffffff RDI: ffffffffffffffff [ 285.349723][T17326] RBP: 00007f680c85f090 R08: 0000000000000000 R09: 0000000000000000 [ 285.349743][T17326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.349755][T17326] R13: 00007f680e056038 R14: 00007f680e055fa0 R15: 00007ffe63bfde48 [ 285.349774][T17326] [ 285.435454][T17331] 9pnet_virtio: no channels available for device 127.0.0.1 [ 285.454936][T17296] EXT4-fs error (device loop9): ext4_xattr_delete_inode:3003: inode #15: comm syz.9.5262: mark inode dirty (error -117) [ 285.613247][T17296] EXT4-fs warning (device loop9): ext4_evict_inode:273: xattr delete (err -117) [ 285.624908][T17296] EXT4-fs (loop9): 1 orphan inode deleted [ 285.637834][T17296] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.883767][T12147] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.129189][T17354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.147612][T17354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.621469][T17379] lo speed is unknown, defaulting to 1000 [ 286.894514][T17406] loop9: detected capacity change from 0 to 128 [ 286.906095][T17406] netlink: 'syz.9.5300': attribute type 39 has an invalid length. [ 286.948306][T17392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.959513][T17392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.990411][T17410] loop9: detected capacity change from 0 to 1024 [ 287.009397][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 287.019482][ T9] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 287.036559][T17410] loop9: detected capacity change from 0 to 2048 [ 287.299559][T17439] __nla_validate_parse: 6 callbacks suppressed [ 287.299573][T17439] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5313'. [ 287.637309][T17446] netlink: '+}[@': attribute type 13 has an invalid length. [ 287.651859][T17446] gretap0: refused to change device tx_queue_len [ 287.658899][T17446] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 287.674844][ T3393] lo speed is unknown, defaulting to 1000 [ 287.680579][ T3393] syz2: Port: 1 Link ACTIVE [ 287.687341][T17446] netlink: '+}[@': attribute type 4 has an invalid length. [ 287.710502][ T3393] lo speed is unknown, defaulting to 1000 [ 287.716368][ T3393] syz2: Port: 1 Link DOWN [ 287.758556][T17452] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5318'. [ 287.767578][T17452] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5318'. [ 288.009692][T17457] netlink: 'syz.0.5319': attribute type 13 has an invalid length. [ 288.087758][T17461] sd 0:0:1:0: device reset [ 288.147560][T17465] netlink: 52 bytes leftover after parsing attributes in process `syz.9.5323'. [ 288.262787][T17469] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 288.290038][T17473] loop9: detected capacity change from 0 to 1024 [ 288.306543][T17473] EXT4-fs: inline encryption not supported [ 288.422402][T17473] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.525187][T17492] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 288.929541][T17504] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5338'. [ 289.016955][T17510] FAULT_INJECTION: forcing a failure. [ 289.016955][T17510] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.030045][T17510] CPU: 0 UID: 0 PID: 17510 Comm: syz.1.5341 Not tainted syzkaller #0 PREEMPT(voluntary) [ 289.030100][T17510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 289.030112][T17510] Call Trace: [ 289.030118][T17510] [ 289.030124][T17510] __dump_stack+0x1d/0x30 [ 289.030228][T17510] dump_stack_lvl+0xe8/0x140 [ 289.030252][T17510] dump_stack+0x15/0x1b [ 289.030276][T17510] should_fail_ex+0x265/0x280 [ 289.030368][T17510] should_fail+0xb/0x20 [ 289.030388][T17510] should_fail_usercopy+0x1a/0x20 [ 289.030410][T17510] _copy_from_user+0x1c/0xb0 [ 289.030488][T17510] ___sys_sendmsg+0xc1/0x1d0 [ 289.030599][T17510] __x64_sys_sendmsg+0xd4/0x160 [ 289.030666][T17510] x64_sys_call+0x17ba/0x3000 [ 289.030696][T17510] do_syscall_64+0xd8/0x2a0 [ 289.030729][T17510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.030822][T17510] RIP: 0033:0x7faa4d53f749 [ 289.030836][T17510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.030857][T17510] RSP: 002b:00007faa4bfa7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 289.030878][T17510] RAX: ffffffffffffffda RBX: 00007faa4d795fa0 RCX: 00007faa4d53f749 [ 289.030893][T17510] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005 [ 289.030946][T17510] RBP: 00007faa4bfa7090 R08: 0000000000000000 R09: 0000000000000000 [ 289.030960][T17510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.030975][T17510] R13: 00007faa4d796038 R14: 00007faa4d795fa0 R15: 00007ffcaac68528 [ 289.030993][T17510] [ 289.190379][T17488] Process accounting resumed [ 289.280452][T12147] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.291444][ T29] kauditd_printk_skb: 1912 callbacks suppressed [ 289.291460][ T29] audit: type=1326 audit(1765330445.835:81890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17515 comm="syz.3.5346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d2ddf749 code=0x7ffc0000 [ 289.322266][ T29] audit: type=1326 audit(1765330445.875:81891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17515 comm="syz.3.5346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f51d2ddf749 code=0x7ffc0000 [ 289.345957][ T29] audit: type=1326 audit(1765330445.875:81892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17515 comm="syz.3.5346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d2ddf749 code=0x7ffc0000 [ 289.369600][ T29] audit: type=1326 audit(1765330445.875:81893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17515 comm="syz.3.5346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d2ddf749 code=0x7ffc0000 [ 289.393310][ T29] audit: type=1326 audit(1765330445.875:81894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17515 comm="syz.3.5346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f51d2ddf749 code=0x7ffc0000 [ 289.416945][ T29] audit: type=1326 audit(1765330445.875:81895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17515 comm="syz.3.5346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d2ddf749 code=0x7ffc0000 [ 289.440633][ T29] audit: type=1326 audit(1765330445.875:81896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17515 comm="syz.3.5346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d2ddf749 code=0x7ffc0000 [ 289.464308][ T29] audit: type=1326 audit(1765330445.875:81897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17515 comm="syz.3.5346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f51d2ddf749 code=0x7ffc0000 [ 289.488142][ T29] audit: type=1326 audit(1765330445.875:81898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17515 comm="syz.3.5346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d2ddf749 code=0x7ffc0000 [ 289.511836][ T29] audit: type=1326 audit(1765330445.875:81899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17515 comm="syz.3.5346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d2ddf749 code=0x7ffc0000 [ 289.585649][T17531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5351'. [ 289.711810][T17550] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5359'. [ 289.727732][T17550] loop9: detected capacity change from 0 to 1024 [ 289.734795][T17550] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 289.746415][T17518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.749271][T17553] netlink: 'syz.1.5358': attribute type 298 has an invalid length. [ 289.755972][T17518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.805797][T17550] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.5359: Invalid block bitmap block 0 in block_group 0 [ 289.821135][T17550] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.5359: Failed to acquire dquot type 0 [ 289.844665][T17550] EXT4-fs error (device loop9): ext4_free_blocks:6728: comm syz.9.5359: Freeing blocks not in datazone - block = 0, count = 4096 [ 289.858449][T17550] EXT4-fs error (device loop9): ext4_read_inode_bitmap:139: comm syz.9.5359: Invalid inode bitmap blk 0 in block_group 0 [ 289.871424][ T31] EXT4-fs error (device loop9): ext4_release_dquot:7022: comm kworker/u8:1: Failed to release dquot type 0 [ 289.883349][T17550] EXT4-fs error (device loop9) in ext4_free_inode:361: Corrupt filesystem [ 289.892358][T17550] EXT4-fs (loop9): 1 orphan inode deleted [ 289.898741][T17550] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.945760][T12147] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.043578][T17561] SELinux: policydb magic number 0x100 does not match expected magic number 0xf97cff8c [ 290.058180][T17561] SELinux: failed to load policy [ 290.073441][T17561] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 290.080676][T17561] IPv6: NLM_F_CREATE should be set when creating new route [ 290.087955][T17561] IPv6: NLM_F_CREATE should be set when creating new route [ 290.119663][T17561] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 290.130627][T17561] loop9: detected capacity change from 0 to 512 [ 290.137305][T17561] EXT4-fs: Ignoring removed bh option [ 290.143127][T17561] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 290.163876][T17561] EXT4-fs (loop9): 1 truncate cleaned up [ 290.169098][T17548] lo speed is unknown, defaulting to 1000 [ 290.170021][T17561] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.228995][T17566] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5364'. [ 290.340116][T17578] FAULT_INJECTION: forcing a failure. [ 290.340116][T17578] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.353322][T17578] CPU: 1 UID: 0 PID: 17578 Comm: +}[@ Not tainted syzkaller #0 PREEMPT(voluntary) [ 290.353367][T17578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 290.353408][T17578] Call Trace: [ 290.353415][T17578] [ 290.353423][T17578] __dump_stack+0x1d/0x30 [ 290.353450][T17578] dump_stack_lvl+0xe8/0x140 [ 290.353475][T17578] dump_stack+0x15/0x1b [ 290.353551][T17578] should_fail_ex+0x265/0x280 [ 290.353574][T17578] should_fail+0xb/0x20 [ 290.353592][T17578] should_fail_usercopy+0x1a/0x20 [ 290.353614][T17578] _copy_from_user+0x1c/0xb0 [ 290.353721][T17578] __sys_bpf+0x183/0x7c0 [ 290.353747][T17578] __x64_sys_bpf+0x41/0x50 [ 290.353864][T17578] x64_sys_call+0x28e1/0x3000 [ 290.353890][T17578] do_syscall_64+0xd8/0x2a0 [ 290.353922][T17578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.354081][T17578] RIP: 0033:0x7f680ddff749 [ 290.354106][T17578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.354128][T17578] RSP: 002b:00007f680c85f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 290.354149][T17578] RAX: ffffffffffffffda RBX: 00007f680e055fa0 RCX: 00007f680ddff749 [ 290.354164][T17578] RDX: 0000000000000018 RSI: 0000200000000700 RDI: 0000000000000007 [ 290.354178][T17578] RBP: 00007f680c85f090 R08: 0000000000000000 R09: 0000000000000000 [ 290.354189][T17578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.354278][T17578] R13: 00007f680e056038 R14: 00007f680e055fa0 R15: 00007ffe63bfde48 [ 290.354302][T17578] [ 290.676581][T17596] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5375'. [ 290.822560][T12147] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.928932][T17606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.938026][T17606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.947362][T17619] 9pnet_virtio: no channels available for device 127.0.0.1 [ 290.955363][T17616] FAULT_INJECTION: forcing a failure. [ 290.955363][T17616] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.967689][T17600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.968498][T17616] CPU: 0 UID: 0 PID: 17616 Comm: syz.9.5384 Not tainted syzkaller #0 PREEMPT(voluntary) [ 290.968555][T17616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 290.968572][T17616] Call Trace: [ 290.968581][T17616] [ 290.968589][T17616] __dump_stack+0x1d/0x30 [ 290.968630][T17616] dump_stack_lvl+0xe8/0x140 [ 290.968696][T17616] dump_stack+0x15/0x1b [ 290.968721][T17616] should_fail_ex+0x265/0x280 [ 290.968752][T17616] should_fail+0xb/0x20 [ 290.968777][T17616] should_fail_usercopy+0x1a/0x20 [ 290.968827][T17616] copy_fpstate_to_sigframe+0x628/0x7d0 [ 290.968860][T17616] ? copy_fpstate_to_sigframe+0xe6/0x7d0 [ 290.968897][T17616] ? x86_task_fpu+0x36/0x60 [ 290.968922][T17616] get_sigframe+0x34d/0x490 [ 290.968999][T17616] ? get_signal+0xdc7/0xf70 [ 290.969145][T17616] x64_setup_rt_frame+0xa8/0x580 [ 290.969178][T17616] arch_do_signal_or_restart+0x24c/0x450 [ 290.969261][T17616] exit_to_user_mode_loop+0x6a/0x740 [ 290.969294][T17616] do_syscall_64+0x202/0x2a0 [ 290.969370][T17616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.969397][T17616] RIP: 0033:0x7f655089f747 [ 290.969418][T17616] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 290.969478][T17616] RSP: 002b:00007f654f307038 EFLAGS: 00000246 ORIG_RAX: 0000000000000049 [ 290.969503][T17616] RAX: 0000000000000049 RBX: 00007f6550af5fa0 RCX: 00007f655089f749 [ 290.969518][T17616] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000004 [ 290.969552][T17616] RBP: 00007f654f307090 R08: 0000000000000000 R09: 0000000000000000 [ 290.969567][T17616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.969583][T17616] R13: 00007f6550af6038 R14: 00007f6550af5fa0 R15: 00007fff507bb248 [ 290.969608][T17616] [ 291.026856][T17621] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=28 sclass=netlink_audit_socket pid=17621 comm=syz.3.5385 [ 291.032772][T17600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.249257][T17633] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5390'. [ 291.327308][T17639] ipvlan3: entered promiscuous mode [ 291.357678][T17640] 9pnet_virtio: no channels available for device 127.0.0.1 [ 291.614692][T17644] netlink: 'syz.4.5394': attribute type 298 has an invalid length. [ 291.919447][T17644] lo speed is unknown, defaulting to 1000 [ 292.052528][T17657] FAULT_INJECTION: forcing a failure. [ 292.052528][T17657] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 292.065778][T17657] CPU: 1 UID: 0 PID: 17657 Comm: syz.3.5398 Not tainted syzkaller #0 PREEMPT(voluntary) [ 292.065808][T17657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 292.065880][T17657] Call Trace: [ 292.065885][T17657] [ 292.065965][T17657] __dump_stack+0x1d/0x30 [ 292.065994][T17657] dump_stack_lvl+0xe8/0x140 [ 292.066074][T17657] dump_stack+0x15/0x1b [ 292.066112][T17657] should_fail_ex+0x265/0x280 [ 292.066134][T17657] should_fail+0xb/0x20 [ 292.066156][T17657] should_fail_usercopy+0x1a/0x20 [ 292.066178][T17657] _copy_from_user+0x1c/0xb0 [ 292.066203][T17657] memdup_user_nul+0x5f/0xe0 [ 292.066300][T17657] sel_commit_bools_write+0xd2/0x270 [ 292.066325][T17657] vfs_writev+0x406/0x8b0 [ 292.066380][T17657] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 292.066416][T17657] do_writev+0xe7/0x210 [ 292.066440][T17657] __x64_sys_writev+0x45/0x50 [ 292.066459][T17657] x64_sys_call+0x1ba5/0x3000 [ 292.066514][T17657] do_syscall_64+0xd8/0x2a0 [ 292.066549][T17657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.066568][T17657] RIP: 0033:0x7f51d2ddf749 [ 292.066582][T17657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.066664][T17657] RSP: 002b:00007f51d1847038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 292.066683][T17657] RAX: ffffffffffffffda RBX: 00007f51d3035fa0 RCX: 00007f51d2ddf749 [ 292.066699][T17657] RDX: 0000000000000001 RSI: 00002000000025c0 RDI: 0000000000000003 [ 292.066715][T17657] RBP: 00007f51d1847090 R08: 0000000000000000 R09: 0000000000000000 [ 292.066730][T17657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.066742][T17657] R13: 00007f51d3036038 R14: 00007f51d3035fa0 R15: 00007ffd1a7ba578 [ 292.066761][T17657] [ 292.254132][T17656] FAULT_INJECTION: forcing a failure. [ 292.254132][T17656] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 292.267298][T17656] CPU: 0 UID: 0 PID: 17656 Comm: syz.1.5399 Not tainted syzkaller #0 PREEMPT(voluntary) [ 292.267354][T17656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 292.267369][T17656] Call Trace: [ 292.267376][T17656] [ 292.267385][T17656] __dump_stack+0x1d/0x30 [ 292.267415][T17656] dump_stack_lvl+0xe8/0x140 [ 292.267458][T17656] dump_stack+0x15/0x1b [ 292.267482][T17656] should_fail_ex+0x265/0x280 [ 292.267511][T17656] should_fail+0xb/0x20 [ 292.267531][T17656] should_fail_usercopy+0x1a/0x20 [ 292.267557][T17656] _copy_from_user+0x1c/0xb0 [ 292.267655][T17656] ip_tunnel_parm_from_user+0x4c/0x230 [ 292.267721][T17656] ip_tunnel_siocdevprivate+0x45/0xe0 [ 292.267766][T17656] dev_ifsioc+0x8f8/0xaa0 [ 292.267801][T17656] dev_ioctl+0x78d/0x960 [ 292.267898][T17656] sock_ioctl+0x593/0x610 [ 292.267946][T17656] ? __pfx_sock_ioctl+0x10/0x10 [ 292.267984][T17656] __se_sys_ioctl+0xce/0x140 [ 292.268078][T17656] __x64_sys_ioctl+0x43/0x50 [ 292.268116][T17656] x64_sys_call+0x14b0/0x3000 [ 292.268147][T17656] do_syscall_64+0xd8/0x2a0 [ 292.268297][T17656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.268324][T17656] RIP: 0033:0x7faa4d53f749 [ 292.268390][T17656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.268413][T17656] RSP: 002b:00007faa4bfa7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 292.268435][T17656] RAX: ffffffffffffffda RBX: 00007faa4d795fa0 RCX: 00007faa4d53f749 [ 292.268450][T17656] RDX: 0000200000001040 RSI: 00000000000089f1 RDI: 0000000000000004 [ 292.268585][T17656] RBP: 00007faa4bfa7090 R08: 0000000000000000 R09: 0000000000000000 [ 292.268601][T17656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.268615][T17656] R13: 00007faa4d796038 R14: 00007faa4d795fa0 R15: 00007ffcaac68528 [ 292.268639][T17656] [ 292.591004][T17678] __nla_validate_parse: 1 callbacks suppressed [ 292.591028][T17678] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5408'. [ 292.643667][T17665] FAULT_INJECTION: forcing a failure. [ 292.643667][T17665] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 292.657058][T17665] CPU: 1 UID: 0 PID: 17665 Comm: syz.3.5403 Not tainted syzkaller #0 PREEMPT(voluntary) [ 292.657085][T17665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 292.657121][T17665] Call Trace: [ 292.657126][T17665] [ 292.657133][T17665] __dump_stack+0x1d/0x30 [ 292.657159][T17665] dump_stack_lvl+0xe8/0x140 [ 292.657254][T17665] dump_stack+0x15/0x1b [ 292.657277][T17665] should_fail_ex+0x265/0x280 [ 292.657352][T17665] should_fail_alloc_page+0xf2/0x100 [ 292.657379][T17665] __alloc_frozen_pages_noprof+0x109/0x360 [ 292.657407][T17665] alloc_pages_mpol+0xb3/0x260 [ 292.657490][T17665] folio_alloc_mpol_noprof+0x39/0x80 [ 292.657601][T17665] shmem_get_folio_gfp+0x3cf/0xd50 [ 292.657631][T17665] shmem_fallocate+0x5cd/0x890 [ 292.657673][T17665] vfs_fallocate+0x3b6/0x400 [ 292.657728][T17665] __x64_sys_fallocate+0x7a/0xd0 [ 292.657830][T17665] x64_sys_call+0x1cd4/0x3000 [ 292.657858][T17665] do_syscall_64+0xd8/0x2a0 [ 292.657898][T17665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.657974][T17665] RIP: 0033:0x7f51d2ddf749 [ 292.657991][T17665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.658009][T17665] RSP: 002b:00007f51d1847038 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 292.658032][T17665] RAX: ffffffffffffffda RBX: 00007f51d3035fa0 RCX: 00007f51d2ddf749 [ 292.658047][T17665] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 292.658098][T17665] RBP: 00007f51d1847090 R08: 0000000000000000 R09: 0000000000000000 [ 292.658110][T17665] R10: 00000000001000f4 R11: 0000000000000246 R12: 0000000000000001 [ 292.658171][T17665] R13: 00007f51d3036038 R14: 00007f51d3035fa0 R15: 00007ffd1a7ba578 [ 292.658254][T17665] [ 292.669225][T17686] netlink: 'syz.0.5411': attribute type 13 has an invalid length. [ 292.884743][T17702] netlink: 'syz.9.5417': attribute type 298 has an invalid length. [ 293.067696][T17690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.082563][T17690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.200362][T17706] lo speed is unknown, defaulting to 1000 [ 293.441474][T17715] netlink: 7 bytes leftover after parsing attributes in process `syz.0.5421'. [ 293.450666][T17715] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5421'. [ 293.459692][T17715] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5421'. [ 293.475289][T17715] netlink: 7 bytes leftover after parsing attributes in process `syz.0.5421'. [ 293.484582][T17715] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5421'. [ 293.493617][T17715] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5421'. [ 293.523785][T17715] netlink: 7 bytes leftover after parsing attributes in process `syz.0.5421'. [ 293.532812][T17715] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5421'. [ 293.541806][T17715] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5421'. [ 293.658021][T17729] sd 0:0:1:0: device reset [ 293.782492][T17739] openvswitch: netlink: EtherType 0 is less than min 600 [ 293.897047][T17751] FAULT_INJECTION: forcing a failure. [ 293.897047][T17751] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 293.910171][T17751] CPU: 1 UID: 0 PID: 17751 Comm: syz.1.5435 Not tainted syzkaller #0 PREEMPT(voluntary) [ 293.910201][T17751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 293.910213][T17751] Call Trace: [ 293.910277][T17751] [ 293.910285][T17751] __dump_stack+0x1d/0x30 [ 293.910313][T17751] dump_stack_lvl+0xe8/0x140 [ 293.910377][T17751] dump_stack+0x15/0x1b [ 293.910395][T17751] should_fail_ex+0x265/0x280 [ 293.910415][T17751] should_fail+0xb/0x20 [ 293.910538][T17751] should_fail_usercopy+0x1a/0x20 [ 293.910706][T17751] _copy_to_user+0x20/0xa0 [ 293.910734][T17751] simple_read_from_buffer+0xb5/0x130 [ 293.910785][T17751] proc_fail_nth_read+0x10e/0x150 [ 293.910877][T17751] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 293.910907][T17751] vfs_read+0x1a8/0x770 [ 293.910926][T17751] ? __rcu_read_unlock+0x4f/0x70 [ 293.910985][T17751] ? __fget_files+0x184/0x1c0 [ 293.911010][T17751] ? mutex_lock+0x58/0x90 [ 293.911034][T17751] ksys_read+0xda/0x1a0 [ 293.911106][T17751] __x64_sys_read+0x40/0x50 [ 293.911122][T17751] x64_sys_call+0x2889/0x3000 [ 293.911221][T17751] do_syscall_64+0xd8/0x2a0 [ 293.911255][T17751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.911276][T17751] RIP: 0033:0x7faa4d53e15c [ 293.911324][T17751] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 293.911346][T17751] RSP: 002b:00007faa4bfa7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 293.911443][T17751] RAX: ffffffffffffffda RBX: 00007faa4d795fa0 RCX: 00007faa4d53e15c [ 293.911454][T17751] RDX: 000000000000000f RSI: 00007faa4bfa70a0 RDI: 0000000000000004 [ 293.911465][T17751] RBP: 00007faa4bfa7090 R08: 0000000000000000 R09: 0000000000000000 [ 293.911488][T17751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 293.911500][T17751] R13: 00007faa4d796038 R14: 00007faa4d795fa0 R15: 00007ffcaac68528 [ 293.911522][T17751] [ 294.112202][T17743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.120720][T17743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.387337][ T29] kauditd_printk_skb: 521 callbacks suppressed [ 294.387356][ T29] audit: type=1326 audit(1765330450.935:82418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17785 comm="syz.3.5451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d2ddf749 code=0x7ffc0000 [ 294.418077][ T29] audit: type=1326 audit(1765330450.935:82419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17785 comm="syz.3.5451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d2ddf749 code=0x7ffc0000 [ 294.441780][ T29] audit: type=1326 audit(1765330450.935:82420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17785 comm="syz.3.5451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f51d2ddf749 code=0x7ffc0000 [ 294.465292][ T29] audit: type=1326 audit(1765330450.935:82421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17785 comm="syz.3.5451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d2ddf749 code=0x7ffc0000 [ 294.489072][ T29] audit: type=1326 audit(1765330450.935:82422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17785 comm="syz.3.5451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d2ddf749 code=0x7ffc0000 [ 294.512998][ T29] audit: type=1326 audit(1765330450.935:82423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17785 comm="syz.3.5451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f51d2ddf749 code=0x7ffc0000 [ 294.536580][ T29] audit: type=1326 audit(1765330450.935:82424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17785 comm="syz.3.5451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d2ddf749 code=0x7ffc0000 [ 294.560352][ T29] audit: type=1326 audit(1765330450.935:82425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17785 comm="syz.3.5451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d2ddf749 code=0x7ffc0000 [ 294.583934][ T29] audit: type=1326 audit(1765330450.935:82426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17785 comm="syz.3.5451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f51d2ddf749 code=0x7ffc0000 [ 294.607435][ T29] audit: type=1326 audit(1765330450.935:82427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17785 comm="syz.3.5451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d2ddf749 code=0x7ffc0000 [ 294.733938][T17799] netlink: 'syz.4.5456': attribute type 39 has an invalid length. [ 295.005566][T17827] loop9: detected capacity change from 0 to 4096 [ 295.021468][T17827] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.042459][T17827] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 295.114853][ T9] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x4 [ 295.122600][ T9] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x2 [ 295.169172][T17835] pimreg: entered allmulticast mode [ 295.173397][ T9] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x3 [ 295.178873][T17835] 9p: Bad value for 'rfdno' [ 295.188316][T17835] pimreg: left allmulticast mode [ 295.189375][ T9] hid-generic 0000:3000000:0000.0002: hidraw0: HID v0.00 Device [sy] on syz0 [ 295.227793][T17837] sd 0:0:1:0: device reset [ 295.415907][T17842] serio: Serial port ptm0 [ 295.756052][T17857] lo speed is unknown, defaulting to 1000 [ 295.789878][T12147] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.874872][T17862] lo speed is unknown, defaulting to 1000 [ 295.880942][T17874] loop9: detected capacity change from 0 to 1024 [ 295.887614][T17874] EXT4-fs: inline encryption not supported [ 295.905717][T17874] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.950907][T17862] chnl_net:caif_netlink_parms(): no params data found [ 296.003786][T17862] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.010879][T17862] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.018162][T17862] bridge_slave_0: entered allmulticast mode [ 296.024804][T17862] bridge_slave_0: entered promiscuous mode [ 296.031544][T17862] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.038794][T17862] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.046265][T17862] bridge_slave_1: entered allmulticast mode [ 296.053069][T17862] bridge_slave_1: entered promiscuous mode [ 296.071432][T17862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.082037][T17862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.104207][T17862] team0: Port device team_slave_0 added [ 296.111049][T17862] team0: Port device team_slave_1 added [ 296.120803][T17883] sd 0:0:1:0: device reset [ 296.131960][T17862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.139062][T17862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.165078][T17862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.176451][T17862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.183442][T17862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.209401][T17862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.236120][T17862] hsr_slave_0: entered promiscuous mode [ 296.242408][T17862] hsr_slave_1: entered promiscuous mode [ 296.248230][T17862] debugfs: 'hsr0' already exists in 'hsr' [ 296.253978][T17862] Cannot create hsr debugfs directory [ 296.404023][T17900] siw: device registration error -23 [ 296.410370][T17902] FAULT_INJECTION: forcing a failure. [ 296.410370][T17902] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 296.423509][T17902] CPU: 0 UID: 0 PID: 17902 Comm: syz.3.5490 Not tainted syzkaller #0 PREEMPT(voluntary) [ 296.423538][T17902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 296.423617][T17902] Call Trace: [ 296.423694][T17902] [ 296.423703][T17902] __dump_stack+0x1d/0x30 [ 296.423774][T17902] dump_stack_lvl+0xe8/0x140 [ 296.423802][T17902] dump_stack+0x15/0x1b [ 296.423826][T17902] should_fail_ex+0x265/0x280 [ 296.423952][T17902] should_fail+0xb/0x20 [ 296.423976][T17902] should_fail_usercopy+0x1a/0x20 [ 296.424005][T17902] _copy_from_user+0x1c/0xb0 [ 296.424038][T17902] ___sys_sendmsg+0xc1/0x1d0 [ 296.424166][T17902] __x64_sys_sendmsg+0xd4/0x160 [ 296.424270][T17902] x64_sys_call+0x17ba/0x3000 [ 296.424345][T17902] do_syscall_64+0xd8/0x2a0 [ 296.424427][T17902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.424453][T17902] RIP: 0033:0x7f51d2ddf749 [ 296.424470][T17902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.424533][T17902] RSP: 002b:00007f51d1847038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 296.424594][T17902] RAX: ffffffffffffffda RBX: 00007f51d3035fa0 RCX: 00007f51d2ddf749 [ 296.424609][T17902] RDX: 0000000000000804 RSI: 0000200000000300 RDI: 0000000000000006 [ 296.424631][T17902] RBP: 00007f51d1847090 R08: 0000000000000000 R09: 0000000000000000 [ 296.424647][T17902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.424666][T17902] R13: 00007f51d3036038 R14: 00007f51d3035fa0 R15: 00007ffd1a7ba578 [ 296.424691][T17902] [ 296.473361][T17905] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 296.614601][T17909] netlink: 'syz.3.5492': attribute type 39 has an invalid length. [ 296.663975][T12147] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.722201][T17862] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 296.774904][T17862] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 296.787612][T17862] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 296.797099][T17862] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 297.068963][T17936] lo speed is unknown, defaulting to 1000 [ 297.141748][T17862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.156761][T17862] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.167216][ T6744] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.174310][ T6744] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.198139][T17862] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 297.208568][T17862] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 297.229255][ T6744] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.236353][ T6744] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.423419][T17939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.435360][T17939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.493651][T17937] lo speed is unknown, defaulting to 1000 [ 297.625505][T17862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.986060][T17862] veth0_vlan: entered promiscuous mode [ 298.005231][T17862] veth1_vlan: entered promiscuous mode [ 298.048297][T17862] veth0_macvtap: entered promiscuous mode [ 298.067203][T17862] veth1_macvtap: entered promiscuous mode [ 298.116147][T17862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.157294][T17862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 298.196233][T13062] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.244435][T13062] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.283871][T13062] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.312741][T13062] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.337322][T17989] __nla_validate_parse: 4 callbacks suppressed [ 298.337339][T17989] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5480'. [ 298.407576][T17941] ================================================================== [ 298.415691][T17941] BUG: KCSAN: data-race in __bpf_get_stackid / bcmp [ 298.422318][T17941] [ 298.424642][T17941] write to 0xffff888174499d60 of 176 bytes by interrupt on cpu 1: [ 298.432453][T17941] __bpf_get_stackid+0x737/0x7d0 [ 298.437414][T17941] bpf_get_stackid+0xf3/0x130 [ 298.442112][T17941] bpf_get_stackid_raw_tp+0xf6/0x120 [ 298.447440][T17941] bpf_prog_53f0063d4d7f65ce+0x2a/0x32 [ 298.452909][T17941] bpf_trace_run2+0x107/0x1d0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 298.457633][T17941] __traceiter_kfree+0x2e/0x50 [ 298.462424][T17941] kfree+0x353/0x3c0 [ 298.466331][T17941] qdisc_free_cb+0x7c/0x90 [ 298.470785][T17941] rcu_core+0x5d7/0xc60 [ 298.474964][T17941] rcu_core_si+0xd/0x20 [ 298.479155][T17941] handle_softirqs+0xba/0x290 [ 298.483862][T17941] __irq_exit_rcu+0x3a/0xc0 [ 298.488399][T17941] sysvec_apic_timer_interrupt+0x74/0x80 [ 298.494064][T17941] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 298.500061][T17941] finish_task_switch+0x83/0x2a0 [ 298.505025][T17941] __schedule+0x85f/0xcd0 [ 298.509397][T17941] schedule+0x5f/0xd0 [ 298.513402][T17941] schedule_timeout+0xb7/0x170 [ 298.518175][T17941] msleep+0x50/0x90 [ 298.521985][T17941] nsim_fib_event_work+0x3b21/0x4790 [ 298.527282][T17941] process_scheduled_works+0x4ce/0x9d0 [ 298.532761][T17941] worker_thread+0x582/0x770 [ 298.537383][T17941] kthread+0x489/0x510 [ 298.541502][T17941] ret_from_fork+0x149/0x290 [ 298.546098][T17941] ret_from_fork_asm+0x1a/0x30 [ 298.550874][T17941] [ 298.553194][T17941] read to 0xffff888174499d90 of 8 bytes by task 17941 on cpu 0: [ 298.560817][T17941] bcmp+0x23/0x90 [ 298.564451][T17941] __bpf_get_stackid+0x382/0x7d0 [ 298.569398][T17941] bpf_get_stackid+0xf3/0x130 [ 298.574084][T17941] bpf_get_stackid_raw_tp+0xf6/0x120 [ 298.579384][T17941] bpf_prog_53f0063d4d7f65ce+0x2a/0x32 [ 298.584841][T17941] bpf_trace_run2+0x107/0x1d0 [ 298.589529][T17941] __traceiter_kfree+0x2e/0x50 [ 298.594300][T17941] kfree+0x353/0x3c0 [ 298.598217][T17941] ___sys_recvmsg+0x135/0x370 [ 298.602909][T17941] do_recvmmsg+0x1ef/0x540 [ 298.607332][T17941] __x64_sys_recvmmsg+0xe5/0x170 [ 298.612286][T17941] x64_sys_call+0x2b75/0x3000 [ 298.616970][T17941] do_syscall_64+0xd8/0x2a0 [ 298.621485][T17941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.627382][T17941] [ 298.629700][T17941] value changed: 0xffffffff84539565 -> 0xffffffff8149251d [ 298.636805][T17941] [ 298.639124][T17941] Reported by Kernel Concurrency Sanitizer on: [ 298.645269][T17941] CPU: 0 UID: 0 PID: 17941 Comm: syz.9.5501 Not tainted syzkaller #0 PREEMPT(voluntary) [ 298.655075][T17941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 298.665128][T17941] ================================================================== [ 298.684806][T18000] netlink: 'syz.1.5514': attribute type 39 has an invalid length. [ 299.534314][T13056] smc: removing ib device syz0 [ 299.539182][ T824] bond0 (unregistering): Released all slaves [ 299.549121][ T824] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 299.613741][ T824] bond1 (unregistering): Released all slaves [ 299.622018][ T824] bond2 (unregistering): Released all slaves [ 299.816253][ T824] hsr_slave_0: left promiscuous mode [ 299.821796][ T824] hsr_slave_1: left promiscuous mode [ 300.416778][ T824] IPVS: stop unused estimator thread 0... [ 300.716437][ T824] dvmrp6 (unregistering): left allmulticast mode [ 300.774645][ T824] bond0 (unregistering): Released all slaves [ 300.783124][ T824] bond1 (unregistering): Released all slaves [ 300.824895][ T824] tipc: Left network mode [ 300.831840][ T824] hsr_slave_0: left promiscuous mode [ 300.837619][ T824] hsr_slave_1: left promiscuous mode [ 300.843194][ T824] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 300.849948][ T824] batman_adv: batadv0: Removing interface: ipvlan2 [ 301.466606][ T824] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.505068][ T824] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.574797][ T824] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.644595][ T824] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.725429][ T824] bridge_slave_1: left allmulticast mode [ 301.731117][ T824] bridge_slave_1: left promiscuous mode [ 301.736830][ T824] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.744600][ T824] bridge_slave_0: left allmulticast mode [ 301.750248][ T824] bridge_slave_0: left promiscuous mode [ 301.755995][ T824] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.844246][ T824] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 301.854220][ T824] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 301.863748][ T824] bond0 (unregistering): Released all slaves [ 301.896097][ T824] hsr_slave_0: left promiscuous mode [ 301.901752][ T824] hsr_slave_1: left promiscuous mode [ 301.907412][ T824] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 301.914842][ T824] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.922389][ T824] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 301.929770][ T824] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.940214][ T824] veth1_macvtap: left promiscuous mode [ 301.945885][ T824] veth0_macvtap: left promiscuous mode [ 301.951366][ T824] veth1_vlan: left promiscuous mode [ 301.956644][ T824] veth0_vlan: left promiscuous mode [ 302.020539][ T824] team0 (unregistering): Port device team_slave_1 removed [ 302.030861][ T824] team0 (unregistering): Port device team_slave_0 removed [ 305.712583][T18001] bond0 (unregistering): Released all slaves [ 305.720695][T18001] bond1 (unregistering): Released all slaves [ 305.766039][T18001] hsr_slave_0: left promiscuous mode [ 305.771657][T18001] hsr_slave_1: left promiscuous mode